HPE Networking Campus Access Architect Expert written Exam Questions & Verified Answers

A government facility is seeking an upgrade for its network. As one key aspect of the upgrade, the customer requires strengthening of the security. Security requirements include: - For all employee devices: * Certificate-based authentication based on certificates issued under their private PKI * Authentication and RBAC based on the company’s existing AD * Encryption with CNSA algorithms - For all corporate devices (such as IoT and network devices): * Certificate-based authentication based on certificates issued under their private PKI if possible * Otherwise, unique passphrases per device * RBAC based on the device type - For guest devices: * Encrypted open network with fallback to open for legacy * No authentication required, but guests must see welcome page and accept terms of agreement * Traffic tunneled to the Internet * IDS/IPS for all traffic * Remote manager authentication for all network equipment - Other requirements include: * Support for up to 7,500 wireless employee and IoT clients * Support for up to 2,000 wired employee and IoT clients * Support for up to 1,000 wireless guest clients a day * High availability for all components including resiliency against Internet failures The customer prefers a 3-year subscription for any required software. For this scenario, you will only be planning security, not other aspects of the upgrade. Assume that you have planned for roughly 200 AP-735s, 32 CX 6200M series switches, and two CX 8325 switches. You will use an AOS 10 architecture managed through HPE Aruba Networking Central. You have proposed a security solution that meets this customer's key requirements. The customer objects that this solution does not provide advanced, AI-based device profiling. What should you respond about the solution that you are proposing?

You created a proposal for a hotel, which needs to upgrade its wireless services to Wi-Fi 7, including in several large event spaces. You included UXI sensors, and the customer asks you to justify the inclusion. How should you respond?

You are presenting a HPE Aruba Networking solution, which includes HPE Aruba Networking APs and switches managed by HPE Aruba Networking Central. The customer is concerned about migrating to a new solution. What is one example you can provide to illustrate how HPE Aruba Networking improves the admin experience?

You have an existing customer, a software developer with a large corporate office building, which uses HPE Aruba Networking CX switches and HPE Aruba Networking mobility solutions using an AOS 8 architecture (including a pair of 7205 mobility controllers). The number of wireless clients, including IoT devices, has proliferated over the past several years, and the customer wants to achieve higher wireless throughput and better performance. Therefore, the customer has decided to upgrade to Wi-Fi 7 and start benefiting from higher-than-Gigabit radio speeds. (The customer does not need to support any additional wired devices at this time.) The customer’s other main goal is to improve the granularity of their security policies. Currently the corporation has two SSIDs: Corporate and IoT. All clients that authenticate to either of these SSIDs are assigned to the same role (“corporate” or “iot” respectively), and the mobility controllers apply firewall policies. The customer would like to apply different rules to different employees and IoT devices based on role. The customer currently authenticates wireless users to Microsoft NPS using certificates issued by their Windows CA, but the customer would like to migrate to Microsoft Entra ID. Wireless users should continue using certificates to authenticate to the new solution. * The office building has five floors, each of which is 48m (157 ft) by 70m (230 ft). * Floors mostly use an open office design with about four meeting rooms per floor. * The office supports about 2,000 employees, and the customer estimates that they have about 1,000 IoT devices using Wi-Fi. * The customer also has about 500 IoT devices that use Bluetooth, and they would like to retire their separate Bluetooth network. The customer currently uses these devices on each floor: * 8x 6200M 48G CL4 PoE 4SFP+ switches * 4 per closet * Connected to a pair of core switches using 10G SFP+ LC SR MMF transceivers * 24x AP-535s, which are connected to the switches with one port and receiving PoE The customer currently uses 3-year FC NBD exchange services and requires continued access to the same experience. What is one benefit that the customer will receive from using HPE Aruba Networking Central with this solution?

You are planning to use the switch design illustrated below for a customer's multi-building campus. Each switch-to-switch link between closets is a 10 GbE link. Each closet connects to multiple APs (although not shown in the figure). About half of the traffic at the site is wired and half is wireless. / On which four switches should you implement VSX? (Select four.)

A government facility is seeking an upgrade for its network. As one key aspect of the upgrade, the customer requires strengthening of the security. Security requirements include: - For all employee devices: * Certificate-based authentication based on certificates issued under their private PKI * Authentication and RBAC based on the company’s existing AD * Encryption with CNSA algorithms - For all corporate devices (such as IoT and network devices): * Certificate-based authentication based on certificates issued under their private PKI if possible * Otherwise, unique passphrases per device * RBAC based on the device type - For guest devices: * Encrypted open network with fallback to open for legacy * No authentication required, but guests must see welcome page and accept terms of agreement * Traffic tunneled to the Internet * IDS/IPS for all traffic * Remote manager authentication for all network equipment - Other requirements include: * Support for up to 7,500 wireless employee and IoT clients * Support for up to 2,000 wired employee and IoT clients * Support for up to 1,000 wireless guest clients a day * High availability for all components including resiliency against Internet failures The customer prefers a 3-year subscription for any required software. For this scenario, you will only be planning security, not other aspects of the upgrade. Assume that you have planned for roughly 200 AP-735s, 32 CX 6200M series switches, and two CX 8325 switches. You will use an AOS 10 architecture managed through HPE Aruba Networking Central. Which subscriptions should you propose?