Free Aruba Certified Campus Access Mobility Expert Written Exam HPE7-A07 Exam Practice Test

A customer would like to allow their IT Helpdesk to configure loT devices to connect lo a single SSID using a unique PSK that other devices cannot use. Which solution would you recommend?

• MPSK AES with MAC Auth
• MPSK Local
• MPSK AES with Cloud Auth
• MPSK AES with ClearPass

You are troubleshooting a WLAN deployment with APs and gateways set up with an 802.1X tunneled SSIO. End-users are complaining that they can’t connect to die enterprise SSID. Which possible AP tunnel states could be the cause of the Issue? (Select two.)

• SM_STATE_RE KEYING
• SM_STATE_SURVIVED
• SM_STATE_CONNECTED
• SM_STATE_SURVIVING
• SM_STATE_CONNECTING

A customer has deployed an AOS 10 mobility gateway cluster consisting of three controllers at a single site The WLAN is configured to tunnel wireless device traffic to the AOS 10 mobility cluster The clients are authenticated by ClearPass using WPA3-Enterprise (opmode wpa3-aes-ccm-128). The security team has requested the ability to force a wireless device to reauthenticate using ClearPass. Which steps are required to ensure ClearPass can consistently initiate a change of authorization against an AOS 10 mobility cluster, including during gateway failover scenarios? (Select two)

• set cluster mode to Auto Site under High Availability - Cluster configuration
• modify WLAN - SSID - VLAN - Mode Configuration
• enable manual cluster configuration under High Availability - Cluster Configuration
• enable Dynamic Authorization CoA under High Availability - Cluster Configuration
• modify NAS IPv4 address under Security - Advanced - RADIUS Client

A network technician racked up two 9240 mobility gateways in a single cluster that will be terminating 1700 APs in a medium-sized branch office Next, the technician cabled the gateways withtwo SFP28 Direct Attach Copper (DAC) cables, distributed between a two-member core switching stack and powered them up.What must the network administrator do next regarding the gateway configuration to ensure maximum wired bandwidth utilization?

• Map two physical ports to a port channel on each gateway.
• Make an ports trunk interfaces and permit data VLANs
• Disable the spanning tree and allocate unique VLANs to each port.
• Manually set 25Gbps speeds on all ports.

A network administrator wants to configure an 802 1X supplicant for a wireless network that includes the following:

• AES encryption
• EAP-MSCHAPv2-based user and machine authentication
• validation of server certificate in Microsoft Windows 10
• The network administrator creates a WLAN profile and selects the change connection settings option Then the network administrator changes the security type to Microsoft Protected EAP (PEAP) and enables user and machine authentication under Additional Settings.
• What must the network administrator do next to accomplish the task?
• Enable user authentication
• Change the security type to Microsoft: Smart Card or other certificate.
• Change default RC4 encryption for AES
• Enable server certificate validation

What is me recommended configuration to ensure link aggregation is consistent in a campus topology using VSX with two aggregation switches and downlinks to access switches?

• Use a custom LACP hash algorithm for improved load Balancing.
• Keep the MTU values at the default setting for GRE and VXLAN communications
• Use the command "vsx-sync mclag-interfaces" under the VSX context.
• Use the command "vsx-sync active-gateways" under the VSX context.

Your customer added third-party USB dongles to the USB ports of their AOS 10 access points. The customer uses AP-615 and AP-635 Each AP is connected with a Cat 6A cable to a CX 6300F Class 4 PoE switch All APs are in the same group in HPE Aruba Networking Central and share the same configuration However, many of the dongles do not come up.Which option will solve this issue?

• Replace the Class a PoE switches with Class 6 PoE switches.
• Create two separate service profiles in the loT tab of the Central configuration settings.
• Perform a "poe disable" followed by a "poe enable" for the switch ports which connect to the APs so that the APs reboot.
• Move the AP-635 access points to a different group in Central to configure the dongles separately from the AP-615.

Based on best practices if an SSID is configured Tor a primary and secondary gateway cluster with cluster preemption enabled, which will decide if the APs move to the secondary gateway cluster if all of the nodes in the primary gateway cluster are down?

• tunnel orchestrator for LAN tunnel service in HPE Aruba Networking Central
• every AP individually
• cluster leader in the primary gateway cluster
• cluster leader in the secondary gateway cluster

A customer has recently deployed a wireless system using AP-535S to provide connectivity for their employees who are responsible tor uploading large video files for review. The customer wants to use features that provide throughput gains for large data uploads.Which feature can be enabled to meet the requirement and simultaneously allow spatially separated clients access to the channel?

• Ul-TXBF
• OFOMA
• DL MU-MIMO
• UL MU-MIMO

You recently added ClearPass as an authentication server to an HPE Aruba Networking Central group. RADIUS authentication with Local User Roles (LUR) works fine Out the same access points cannot use Downloadable User Roles (DUR).What should he corrected in this configuration to fa the issue with DUR?

• Add a new Enforcement Policy of type ‘’WEBAUTH’’ on ClearPass and associate it with the matching service on ClearPass
• Add the correct IP addresses or IP subnets of the Network Access Devices (NADs) under the "Devices" tab on ClearPass
• Replace the AP's expiree digital certificate using the "crypto pki-import pem serverCert" command.
• Add the correct values for "CPPM username" and "CPPM Password" m the authentication server configuration on HPE Aruba Networking Central