Aruba A41 Exam - Aruba Certified Switch
Associate (ACSA) UPDATED ACTUAL
Exam Questions and CORRECT Answers
What are the console settings for out-of-band (OOB) - CORRECT ANSWER The switches
use default settings for the terminal emulation
software:
•9600 bps
•8 data bits
•No parity
•1 stop bit
•No flow control
Switch modules come in two forms. Which switch forms supports port name "a39"? -
CORRECT ANSWER Module Switch come in fix and module. Modular switches support
alphanumeric naming i.e. interface <slot_letter><1-24>
What aos command will allow you to configure ports 1, and 4 thru 9? - CORRECT
ANSWER switch(config#) interface 1,4-9
What command will Access the enable - CORRECT ANSWER context enable
What command will Access the global configuration - CORRECT ANSWER config
A user must prove who they are - CORRECT ANSWER authentication
user is allowed by RADIUS server policy to obtain network access - CORRECT
ANSWER authorization
,switch submits information about the user connection - CORRECT ANSWER accounting
when does authentication start? - CORRECT ANSWER as soon as the connection between
the switch port and the client comes up
Both sides of (switch & client) connection control the port; disable by default and based on
authentication "state" - CORRECT ANSWER controlled port
Always active port; can only carry EAP packets to traverse for proper authentication -
CORRECT ANSWER uncontrolled port
What are the roles in an AAA process? - CORRECT ANSWER Supplicant, Authenticator,
and Authentication server
can prove if users credentials are correct, validate if connecting at the proper time and location -
CORRECT ANSWER authentication server
opposing side of the client's connection; usually the switch and role to start authentication with
client - CORRECT ANSWER authenticator
what are the requirements for 802.1x operations? - CORRECT ANSWER Client 802.1x
supplicant, 802.1x supporting device (i.e. switch), and 802.1x server supporting EAP-RADIUS.
how does the switch aid in the supplicant/authentication server exchange - CORRECT
ANSWER the switch encapsultes the supplicant's "EAP Request" messages in RADIUS
Access-Request messages, then sends to server
Aruba supports several EAP methods. Which is the most secure? - CORRECT
ANSWER EAP-Transport Layer Protocol (EAP-TLS)
,What material is required to use EAP/TLS - CORRECT ANSWER digital certificate and CA
infrastructure to support cert creations.
What EAP method are supported by Aruba switching - CORRECT ANSWER EAP-TLS,
PEAP, and EAP-Tunneled TLS
What method provides security similar to EAP-TLS, without the use of digital certifcates -
CORRECT ANSWER PEAP and EAP-Tunneled TLS; PEAP created by Cisco, Microsoft,
and RSA Security).
What command will Access the enable - CORRECT ANSWER context enable
What command will Access the global configuration - CORRECT ANSWER configure
terminal
What's behavior for AOS-Switches with default settings and no password for local authentication
- CORRECT ANSWER If no password is configured, AOS-switch does not perform any
authentication
What three access types to CLI? - CORRECT ANSWER console, telnet, and SSH (possible
fourth is Web via http/https
What level is the user prompted to authenticate - CORRECT ANSWER Login Level
What level the user is prompted to authenticate when moving from basic mode to enable mode
and, after successful authentication, receives manager rights. - CORRECT ANSWER Enable
Level
What BGP command ensure that the routers have routes to each peers loopback interface -
CORRECT ANSWER neighbor <ipv4-addr> ebgp-multihop [2-255]
, BGP neighbors establish a TCP session on port ____ - CORRECT ANSWER Port 179
A network administrator is configuring a multicast routing solution. Potential
multicast receivers are on VLAN 5. What must the administrator enable on this VLAN? -
CORRECT ANSWER PIM-DM and IGMP
What is one advantage of PIM-DM as compared to PIM-SM? - CORRECT ANSWER PIM-
DM tends to be simpler to set up.
When do PIM-SM receivers join the SPT tree? - CORRECT ANSWER At the reception of a
multicast stream, RP and other routers join SPT. Then, DR (gateway) for source starts forward
traffic in the SPT
Who is the PIM-SM designated router (DR)? - CORRECT ANSWER Based on the source,
The default router for the source's subnet receives the traffic. This default router is called the DR.
What is the purpose of the rendezvous point (RP)? - CORRECT ANSWER Monitor and
source's DRs which directs multicast traffic to the RP, and RP connects the multicast traffic to
the devices (routers) that need it.
PIM-SM communicate over what broadcast address? - CORRECT ANSWER PIM SM-
enabled interfaces exchange hellos on 224.0.0.13.
How is a multicast forwarder obtained? - CORRECT ANSWER The routing switch with the
more favorable path becomes the
multicast forwarder, as determined first by administrative distance (preference) and then, if the
administrative distance ties, by metric or cost. If the metric ties as well, the routing interface
with the
higher IP address is elected.
What command views IGMP entries? - CORRECT ANSWER show igmp group
Associate (ACSA) UPDATED ACTUAL
Exam Questions and CORRECT Answers
What are the console settings for out-of-band (OOB) - CORRECT ANSWER The switches
use default settings for the terminal emulation
software:
•9600 bps
•8 data bits
•No parity
•1 stop bit
•No flow control
Switch modules come in two forms. Which switch forms supports port name "a39"? -
CORRECT ANSWER Module Switch come in fix and module. Modular switches support
alphanumeric naming i.e. interface <slot_letter><1-24>
What aos command will allow you to configure ports 1, and 4 thru 9? - CORRECT
ANSWER switch(config#) interface 1,4-9
What command will Access the enable - CORRECT ANSWER context enable
What command will Access the global configuration - CORRECT ANSWER config
A user must prove who they are - CORRECT ANSWER authentication
user is allowed by RADIUS server policy to obtain network access - CORRECT
ANSWER authorization
,switch submits information about the user connection - CORRECT ANSWER accounting
when does authentication start? - CORRECT ANSWER as soon as the connection between
the switch port and the client comes up
Both sides of (switch & client) connection control the port; disable by default and based on
authentication "state" - CORRECT ANSWER controlled port
Always active port; can only carry EAP packets to traverse for proper authentication -
CORRECT ANSWER uncontrolled port
What are the roles in an AAA process? - CORRECT ANSWER Supplicant, Authenticator,
and Authentication server
can prove if users credentials are correct, validate if connecting at the proper time and location -
CORRECT ANSWER authentication server
opposing side of the client's connection; usually the switch and role to start authentication with
client - CORRECT ANSWER authenticator
what are the requirements for 802.1x operations? - CORRECT ANSWER Client 802.1x
supplicant, 802.1x supporting device (i.e. switch), and 802.1x server supporting EAP-RADIUS.
how does the switch aid in the supplicant/authentication server exchange - CORRECT
ANSWER the switch encapsultes the supplicant's "EAP Request" messages in RADIUS
Access-Request messages, then sends to server
Aruba supports several EAP methods. Which is the most secure? - CORRECT
ANSWER EAP-Transport Layer Protocol (EAP-TLS)
,What material is required to use EAP/TLS - CORRECT ANSWER digital certificate and CA
infrastructure to support cert creations.
What EAP method are supported by Aruba switching - CORRECT ANSWER EAP-TLS,
PEAP, and EAP-Tunneled TLS
What method provides security similar to EAP-TLS, without the use of digital certifcates -
CORRECT ANSWER PEAP and EAP-Tunneled TLS; PEAP created by Cisco, Microsoft,
and RSA Security).
What command will Access the enable - CORRECT ANSWER context enable
What command will Access the global configuration - CORRECT ANSWER configure
terminal
What's behavior for AOS-Switches with default settings and no password for local authentication
- CORRECT ANSWER If no password is configured, AOS-switch does not perform any
authentication
What three access types to CLI? - CORRECT ANSWER console, telnet, and SSH (possible
fourth is Web via http/https
What level is the user prompted to authenticate - CORRECT ANSWER Login Level
What level the user is prompted to authenticate when moving from basic mode to enable mode
and, after successful authentication, receives manager rights. - CORRECT ANSWER Enable
Level
What BGP command ensure that the routers have routes to each peers loopback interface -
CORRECT ANSWER neighbor <ipv4-addr> ebgp-multihop [2-255]
, BGP neighbors establish a TCP session on port ____ - CORRECT ANSWER Port 179
A network administrator is configuring a multicast routing solution. Potential
multicast receivers are on VLAN 5. What must the administrator enable on this VLAN? -
CORRECT ANSWER PIM-DM and IGMP
What is one advantage of PIM-DM as compared to PIM-SM? - CORRECT ANSWER PIM-
DM tends to be simpler to set up.
When do PIM-SM receivers join the SPT tree? - CORRECT ANSWER At the reception of a
multicast stream, RP and other routers join SPT. Then, DR (gateway) for source starts forward
traffic in the SPT
Who is the PIM-SM designated router (DR)? - CORRECT ANSWER Based on the source,
The default router for the source's subnet receives the traffic. This default router is called the DR.
What is the purpose of the rendezvous point (RP)? - CORRECT ANSWER Monitor and
source's DRs which directs multicast traffic to the RP, and RP connects the multicast traffic to
the devices (routers) that need it.
PIM-SM communicate over what broadcast address? - CORRECT ANSWER PIM SM-
enabled interfaces exchange hellos on 224.0.0.13.
How is a multicast forwarder obtained? - CORRECT ANSWER The routing switch with the
more favorable path becomes the
multicast forwarder, as determined first by administrative distance (preference) and then, if the
administrative distance ties, by metric or cost. If the metric ties as well, the routing interface
with the
higher IP address is elected.
What command views IGMP entries? - CORRECT ANSWER show igmp group
