Free HPE7-A01 sample questions

Correct answer: VSX for the core; Active Gateway for the active gateway.

VSX is the correct choice as it meets the requirements for dual control planes and non-disruptive software upgrades. VSF has a single control plane. The primary mechanism in a VSX environment to provide a single, active-active default gateway is called 'Active Gateway'. It is an enhancement over traditional VRRP, allowing both VSX nodes to simultaneously forward traffic sent to the virtual IP address, thus providing true active-active first-hop redundancy.

Correct answer: It defines the firewall policies applied to traffic from the AP itself.

The `ap-role` is a firewall role that governs the traffic originating from or destined for the access point itself, such as control plane traffic (PAPI, GRE) to the Mobility Controller. It is distinct from user roles, which apply to client traffic passing through the AP.

Correct answer: At a common group node under /md (e.g., /md/Campus) that contains all of the MDs.

The Mobility Conductor uses a hierarchical configuration model: devices inherit configuration along their node path, and child nodes can override single-instance settings. Although configuration at /md would reach every managed device, Aruba recommends not adding configuration at /md itself. Instead, place the MDs in a group node such as /md/Campus and configure the common 'Staff' WLAN there, where every MD in the group inherits it. /mm holds configuration for the Mobility Conductors, not the managed devices.

Correct answer: False

False. Cluster connection type is defined by user VLANs. In an L2-connected cluster, the members share all user VLANs. In an L3-connected cluster, members do not necessarily share the same user VLANs. A cluster can be formed over an L2 or an L3 network (L2 is recommended for simplicity), so members do not have to be in one IP subnet. Hitless client failover (client state synchronization) requires an L2-connected cluster.

Correct answer: All traffic from the user's device will be encapsulated in a GRE tunnel and sent to the Mobility Controller.

In a user-based tunneling (Tunneled Node) setup, after successful authentication (typically 802.1X), the switch encapsulates all data traffic from the authenticated user into a GRE tunnel directed to a Mobility Controller. The controller then applies the user's assigned role and firewall policies before forwarding the traffic, thus unifying policy enforcement for wired and wireless clients.

Correct answer: To authenticate APs to the controller using certificates and secure control plane communication.

Control Plane Security (CPSec) is designed to protect the control communications (PAPI) between Aruba APs and the Mobility Controller. When enabled, it uses certificates to mutually authenticate the AP and controller and then encrypts all subsequent control plane traffic. This prevents rogue APs from joining the network and protects management traffic from eavesdropping or tampering.

Correct answer: Configure a single Switched Virtual Interface (SVI) for the required VLAN.

A VSF stack operates as one virtual switch with a single control plane. A single SVI configured on the stack is therefore a resilient default gateway: if the conductor fails, the standby takes over the conductor role and the SVI stays up. No FHRP such as VRRP or Active Gateway (a VSX feature) is needed inside a VSF stack.

Correct answer: Generate a heatmap of the floor plan for signal strength.

VisualRF's core function is to visualize RF data on a floor plan. By generating a signal strength heatmap for the specific floor and ward, the administrator can visually identify areas of weak signal (coverage holes). This allows them to confirm the user's report and make informed decisions about adding, moving, or adjusting the power of nearby APs.