Free HPE7-A01 sample questions

Correct answer: At a common group node under /md (e.g., /md/Campus) that contains all of the MDs.

The Mobility Conductor uses a hierarchical configuration model: devices inherit configuration along their node path, and child nodes can override single-instance settings. Although configuration at /md would reach every managed device, Aruba recommends not adding configuration at /md itself. Instead, place the MDs in a group node such as /md/Campus and configure the common 'Staff' WLAN there, where every MD in the group inherits it. /mm holds configuration for the Mobility Conductors, not the managed devices.

Correct answer: False

False. Cluster connection type is defined by user VLANs. In an L2-connected cluster, the members share all user VLANs. In an L3-connected cluster, members do not necessarily share the same user VLANs. A cluster can be formed over an L2 or an L3 network (L2 is recommended for simplicity), so members do not have to be in one IP subnet. Hitless client failover (client state synchronization) requires an L2-connected cluster.

Correct answer: All traffic from the user's device will be encapsulated in a GRE tunnel and sent to the Mobility Controller.

In a user-based tunneling (Tunneled Node) setup, after successful authentication (typically 802.1X), the switch encapsulates all data traffic from the authenticated user into a GRE tunnel directed to a Mobility Controller. The controller then applies the user's assigned role and firewall policies before forwarding the traffic, thus unifying policy enforcement for wired and wireless clients.

Correct answer: To authenticate APs to the controller using certificates and secure control plane communication.

Control Plane Security (CPSec) is designed to protect the control communications (PAPI) between Aruba APs and the Mobility Controller. When enabled, it uses certificates to mutually authenticate the AP and controller and then encrypts all subsequent control plane traffic. This prevents rogue APs from joining the network and protects management traffic from eavesdropping or tampering.

Correct answer: Configure a single Switched Virtual Interface (SVI) for the required VLAN.

A VSF stack operates as one virtual switch with a single control plane. A single SVI configured on the stack is therefore a resilient default gateway: if the conductor fails, the standby takes over the conductor role and the SVI stays up. No FHRP such as VRRP or Active Gateway (a VSX feature) is needed inside a VSF stack.

Correct answer: Generate a heatmap of the floor plan for signal strength.

VisualRF's core function is to visualize RF data on a floor plan. By generating a signal strength heatmap for the specific floor and ward, the administrator can visually identify areas of weak signal (coverage holes). This allows them to confirm the user's report and make informed decisions about adding, moving, or adjusting the power of nearby APs.

Correct answer: copy running-config checkpoint pre-maintenance

The correct command syntax on ArubaOS-CX to save the current running configuration to a named checkpoint is `copy running-config checkpoint `. This allows for easy rollback to a known good state.

Correct answer: It provides the wired backhaul connection for the entire mesh network to the upstream wired infrastructure.

In an Aruba mesh network, the Mesh Portal (MPP) is the AP that has a physical Ethernet connection to the wired network. It serves as the gateway for all other mesh APs (Mesh Points) to backhaul their traffic. All traffic from the wireless mesh ultimately flows through the MPP to reach the rest of the network.