HPE6-A47 HP Designing Aruba Solutions Free Practice Exam Questions (2025 Updated)

the new 802.11ac deployment should have a capacity-based design for the best performance, but the existing deployment sounds like a coverage-based design. This is because a capacity-based design takes into account the number and type of clients, the applications they use, and the bandwidth they require. A coverage-based design only considers the signal strength and the absence of coverage holes. A site survey is desirable to determine the optimal locations for the new APs because it can help the architect to assess the current and future capacity needs, identify the sources of interference and noise, and optimize the channel and power settings for the new APs.

Option A is incorrect because an 802.11ac deployment does not necessarily work better with side-mounted APs. The mounting location of the APs depends on the antenna type, the ceiling height, and the RF environment.

Option C is incorrect because 802.11ac AP radios are not more sensitive to 2.4 GHz interference than 802.11n APs. In fact, 802.11ac APs operate in the 5 GHz band, which is less crowded and prone to interference than the 2.4 GHz band.

Option D is incorrect because 802.11ac APs cannot support a higher density of clients by being deployed farther apart. On the contrary, 802.11ac APs need to be deployed closer together to provide the higher data rates and throughput that 802.11ac clients expect.

References: The information can be referenced from the official HPE documents and learning materials available on HPE Press and Aruba Networks. Specifically, it aligns with the objectives outlined in Chapter 4: Wireless LAN Design, where the capacity-based design and site survey methods are discussed. Designing Aruba Solutions Official Certification Study Guide Aruba Mobility Fundamentals Guide

This is the general recommendation from the AirWave Server Sizing Guide1, which provides guidelines for selecting and configuring hardware based on the number of devices, clients, and features. The guide also lists the conditions that impact hardware sizing, such as polling frequency, RAPIDS, VisualRF, and Clarity.

References: 1: AirWave 8.2.14.0 Server Sizing Guide - Aruba, page 5.

Deployed as a purpose-built hardware or virtual machine image, each AirWave server supports up to 4,000 network devices (access points, switches, and controllers).https://www.arubanetworks.com/assets/ds/DS_AW.pdf

ClearPass OnConnect is a feature of the ClearPass Policy Manager that allows wired authentication on switches that do not support 802.1X or RADIUS protocols. ClearPass OnConnect uses SNMP to monitor and control the switch ports based on the device profiles and policies defined in ClearPass12. ClearPass OnConnect can provide the following benefits for the customer:

It can enable wired authentication without requiring any changes to the existing switch infrastructure or the end-user devices. This can save the customer’s budget and time, as well as minimize the network disruption and user impact.

It can provide visibility and control over the wired devices, such as printers, IoT devices, and laptops, that connect to the network. ClearPass OnConnect can identify the device type, user role, and location, and apply the appropriate access policies based on the customer’s security and compliance requirements. For example, ClearPass OnConnect can allow only authorized devices and users to access certain network resources, or quarantine or block any unknown or non-compliant devices.

It can integrate with the other components of the Aruba solution, such as the MCs, MMs, APs, AirWave, and ClearPass Guest, to provide a consistent and unified network management and security solution across the wired and wireless networks. For example, ClearPass OnConnect can leverage the device profiles and policies from ClearPass Guest, or share the network health and performance data with AirWave.

Therefore, by explaining this feature, the architect can justify the proposed solution and show how it can meet the customer’s needs and expectations for wired authentication, as well as wireless authentication.

References:

1: https://www.arubanetworks.com/techdocs/ClearPass/6.7/PolicyManager/index.htm#CPPM_UserGuide/Admin/OnConnect.htm

2: https://www.arubanetworks.com/assets/tg/TB_ClearPass_OnConnect.pdf

 This answer is correct because it meets the customer’s requirements for wired authentication and traffic forwarding. By assigning wired users to different VLANs from wireless users, the architect can ensure that the wired traffic is not tunneled to the MCs, but forwarded locally on the access layer switches. This reduces the load on the MCs and the network bandwidth. By using port or role assignments on the access layer switches, the architect can also implement 802.1X authentication without tunnelled node, which enables user access control and dynamic VLAN assignment based on user identity and device type. By extending the VLANs to the core, the architect can ensure that the wired users can reach the data center and other network resources through the Layer 3 switch connected to the firewall. References:

Aruba 2930M Switch Series - Data sheet)

Aruba ClearPass Policy Manager - Data sheet)

ArubaOS-Switch Wired Access with ClearPass - Configuration guide)

 A collision domain is a logical area of the network where devices share the same wireless medium and may interfere with each other’s transmissions. In a WLAN, a collision domain is defined by the channel and the coverage area of an AP or a client. Devices that operate on the same channel and are within range of each other belong to the same collision domain and must contend for access to the medium using the Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) protocol. Devices that operate on different channels or are out of range of each other belong to different collision domains and do not interfere with each other.

In this scenario, the architect plans 12 APs for an auditorium that is 325 square meters (3,498 square feet). Each AP has one 2.4 GHz radio and one 5 GHz radio. Both types of radios use 20 MHz channels. Assuming that DFS channels can be used in this design, the question is how many 5 GHz collision domains does this design provide.

To answer this question, we need to consider the following factors:

The number of available 5 GHz channels in the regulatory domain of the auditorium. Different countries have different regulations on the use of the 5 GHz band, which affects the number and availability of channels for WLANs. For example, in the United States, there are 25 non-overlapping 20 MHz channels in the 5 GHz band, but some of them are subject to Dynamic Frequency Selection (DFS) requirements, which means that they must avoid interfering with radar systems by detecting and switching to another channel if radar signals are present. In other countries, such as Japan, there are 19 non-overlapping 20 MHz channels in the 5 GHz band, but some of them are restricted to indoor use only. Therefore, the number of available 5 GHz channels for the design depends on the regulatory domain of the auditorium.

The channel assignment and distribution of the 12 APs in the auditorium. The channel assignment and distribution of the APs affect the number and size of the collision domains in the WLAN. Ideally, the APs should be assigned to non-overlapping channels and distributed evenly across the auditorium to provide optimal coverage and capacity, while minimizing co-channelinterference and adjacent channel interference. Co-channel interference occurs when devices on the same channel interfere with each other, while adjacent channel interference occurs when devices on nearby channels interfere with each other. Both types of interference degrade the performance and quality of the WLAN. Therefore, the channel assignment and distribution of the APs should follow the best practices of RF design, such as using a channel reuse plan, avoiding channel overlap, and adjusting the transmit power and antenna gain of the APs to match the coverage and capacity requirements of the auditorium.

The coverage and capacity requirements of the auditorium. The coverage and capacity requirements of the auditorium affect the number and placement of the APs and the transmit power and antenna gain settings of the radios. The coverage requirement refers to the minimum signal strength and signal-to-noise ratio (SNR) that the APs and clients need to maintain a reliable wireless connection. The capacity requirement refers to the maximum number of clients and the minimum throughput and quality of service (QoS) that the APs and clients need to support the applications and services of the auditorium. The coverage and capacity requirements of the auditorium depend on the size and shape of the space, the density and distribution of the clients, the types and characteristics of the applications and services, and the performance and capabilities of the devices. Therefore, the coverage and capacity requirements of the auditorium should be determined by conducting a site survey and a network analysis, and then used to guide the design and configuration of the APs and radios.

Based on these factors, we can estimate the number of 5 GHz collision domains in the design as follows:

Assuming that the auditorium is located in the United States and that DFS channels can be used in the design, there are 25 non-overlapping 20 MHz channels in the 5 GHz band. However, not all of them may be available or suitable for the design, depending on the presence and activity of radar systems in the area, the compatibility and support of the APs and clients, and the interference and noise level of the environment. Therefore, we will use a conservative estimate of 15 available 20 MHz channels in the 5 GHz band for the design.

Assuming that the 12 APs are assigned to non-overlapping channels and distributed evenly across the auditorium, each AP will have its own 5 GHz collision domain, as there will be no co-channel interference or adjacent channel interference among the APs. Therefore, there will be 12 5 GHz collision domains in the design, corresponding to the 12 APs.

Assuming that the coverage and capacity requirements of the auditorium are moderate and that the transmit power and antenna gain settings of the radios are adjusted accordingly, each AP will cover an area of about 27 square meters (290 square feet), which is roughly the size of a small classroom. This means that the APs will provide adequate signal strength and SNR for the clients, while avoiding excessive overlap and interference among the APs. Therefore, there will be no need to further divide or merge the 5 GHz collision domains in the design, as they will match the coverage and capacity requirements of the auditorium.

Hence, the number of 5 GHz collision domains in the design is 12, which is the answer option C. References:

RF Design | Validated Solution Guide - Aruba

Configuring 2.4 Ghz and 5 Ghz Radios - Aruba

Chapter T-5: Understanding RF Collision Domains - Aruba

[Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47)]

The architect should follow the guideline of assigning access layer switches IP addresses on a VLAN that is dedicated for switch management. This is a best practice for network management security, as it isolates the switch management traffic from the data traffic, and prevents unauthorized access to the switches. A dedicated VLAN for switch management also simplifies the configuration and monitoring of the switches, and reduces the risk of broadcast storms or VLAN hopping attacks.

The other options are not best practices for network management security:

Option B is incorrect because enabling DHCP on only the switch Default VLAN is not a secure way of assigning IP addresses to the switches. DHCP stands for Dynamic Host Configuration Protocol, and it is a protocol that automatically assigns IP addresses and other network parameters to devices on a network. However, DHCP can be vulnerable to spoofing or hijacking attacks, where an attacker can impersonate a DHCP server or client, and obtain or alter the network configuration. Moreover, using the Default VLAN for switch management is not recommended, as it is the VLAN that is assigned to all ports by default, and it can be easily accessed by anyone on the network.

Option C is incorrect because enabling Telnet and setting it to listen on production VLANs is not a secure way of accessing the switches. Telnet stands for Telecommunication Network, and it is a protocol that allows remote login and command execution on a network device. However, Telnet is an insecure protocol, as it sends data in plain text, without any encryption or authentication. This means that anyone who can intercept the network traffic can read or modify the data, and gain unauthorized access to the switches. Moreover, using production VLANs for switch management is not recommended, as it exposes the switch management traffic to the data traffic, and increases the attack surface of the network.

Option D is incorrect because assigning switches static IP addresses on the same VLAN on which APs are deployed is not a secure way of managing the switches. Static IP addresses are fixed IP addresses that are manually configured on a device, and they do not change unless they are changed by the administrator. However, static IP addresses can be prone to human errors, misconfiguration, or duplication, and they can be difficult to manage and update. Furthermore, using the same VLAN for switch management and AP deployment is not recommended, as it mixes the switch management traffic with the wireless traffic, and creates unnecessary overhead and security risks.

References:

ArubaOS-Switch Management and Configuration Guide for WC.16.10)

ArubaOS-Switch Basic Operation Guide for 16.10)

Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47))

 The correct answer is option C, voice. Voice applications have the greatest potential impact on RF design because they are sensitive to latency, jitter, and packet loss. Voice applications also require a minimum signal strength and signal-to-noise ratio to ensure good voice quality. Therefore, an architect needs to consider the number of voice devices, the codec used, the roaming behavior, and the call admission control when planning the RF coverage for voice applications. References: The information can be referenced from the official HPE documents and learning materials available on HPE Press and Aruba Networks. Specifically, it aligns with the objectives outlined in Chapter 3: Wireless LAN Technologies and Standards, where the RF design considerations for voice applications are discussed. Designing Aruba Solutions Official Certification Study Guide Aruba Mobility Fundamentals Guide

According to the Aruba Validated Design: Campus Wireless LAN1, MCs that are in different subnets cannot form a cluster, which is a logical group of MCs that share the same configuration and provide redundancy and load balancing for each other. However, MCs that are in different subnets can still provide backup LMS (local mobility switch) functionality for each other’s APs. This means that if the primary MC that controls an AP fails, the AP can fail over to the backup MC that is in a different subnet. However, this failover is not stateful, meaning that the user sessions and firewall states are not preserved. Therefore, option D is the correct answer.

Option A is incorrect because the MCs can provide some level of redundancy for each other without being in the same subnet, as explained above. Option B is incorrect because VRRP is not required to provide redundancy for MCs that are in different subnets. VRRP is a protocol that provides redundancy for routers by creating a virtual router with a shared IP address. However, MCs do not act as routers, and they do not need a shared IP address to provide backup LMS functionality. Option C is incorrect because the MCs cannot be in a cluster if they are in different subnets, as explained above. Therefore, the cluster will not support any features, such as stateful failover, load balancing, or centralized configuration. References: Aruba Validated Design: Campus Wireless LAN)

The IRIS BOM is missing stacking modules and cables for the Aruba 2930M switches. The customer wants to flatten the architecture and avoid recabling, but also maintain connectivity to the core if one link fails. To achieve this, the architect proposed to combine the switches in each Building 2 closet as a VSF fabric and establish two 10 GbE connections to the core per fabric. However, to create a VSF fabric, the switches need to have stacking modules and cables to interconnect them. The IRIS BOM does not include these items, which are required for the VSF configuration. The part numbers for the stacking modules and cables are JL325A and J9735A, respectively.

The other options are not missing from the IRIS BOM because they are either not required or already included. Stacking licenses are not required for the Aruba 2930M switches, as they support VSF natively. 10 GbE direct attach cables are already included in the IRIS BOM as part number J9283D. An uplink module for one of the switches is not required, as the customer already has enough fiber strands to connect each switch to the core. References:

Aruba 2930M Switch Series Data Sheet (Aruba Networks)

Designing Aruba Solutions Study Guide (HPE Press)

The customer needs a solution that can terminate VPN tunnels for Aruba RAPs, which are remote access points that connect to the corporate network over the Internet. The customer has only one public IP address, which means that they need to use NAT to forward the IPsec traffic to the device that will terminate the VPN tunnel. The customer also wants N+1 redundancy, which means that they need at least two devices that can act as backup for each other in case of failure.

The solution that meets the customer requirements is to use two Aruba MCs on the same subnet that use VRRP without clustering. VRRP stands for Virtual Router Redundancy Protocol, and it is a protocol that allows multiple devices to share a virtual IP address and act as a single gateway for the network. This way, the customer can use the virtual IP address as the public IP address for the NAT, and the IPsec traffic will be forwarded to the device that is the VRRP master. If the master device fails, the backup device will take over the role of the master and continue to terminate the VPN tunnels. This provides N+1 redundancy for the customer.

The other options are not suitable for the customer requirements:

Option B is not suitable because a Layer 3 cluster requires two public IP addresses, one for each MC. The customer only has one public IP address, so they cannot use this option.

Option C is not suitable because VRRP does not work across different subnets. The customer needs to have the MCs on the same subnet to use VRRP.

Option D is not suitable because a Layer 2 cluster does not support NAT. The customer needs to use NAT to forward the IPsec traffic to the MCs.

References:

Aruba Remote Access Point (RAP) Networks Validated Reference Design)

Aruba Mobility Controller Virtual IP Configuration Guide)

ArubaOS 8.5 User Guide)

The switch needs to support PoE+ for this deployment. PoE+ stands for Power over Ethernet Plus, and it is a technology that allows the switch to provide both data and power to the connected devices over a single Ethernet cable. This eliminates the need for separate power sources or adapters for the devices, and simplifies the installation and management of the network. PoE+ can provide up to 30 watts of power per port,which is sufficient for the Aruba 320 Series APs, which have a maximum power consumption of 20 watts. PoE+ also supports 1 GbE connectivity, which meets the customer’s requirement.

The other options are not relevant for this deployment:

Option B is incorrect because LACP is not a feature that the switch needs to support for this deployment. LACP stands for Link Aggregation Control Protocol, and it is a protocol that allows multiple physical links to be combined into a single logical link, providing higher bandwidth and redundancy. However, the architect plans to connect each AP with one Ethernet port to the switch, so there is no need for link aggregation in this scenario.

Option C is incorrect because port channel is not a feature that the switch needs to support for this deployment. Port channel is another term for link aggregation, which is not required for this scenario, as explained above.

Option D is incorrect because Smart Rate is not a feature that the switch needs to support for this deployment. Smart Rate is a technology that allows the switch to provide multi-gigabit Ethernet speeds (up to 10 GbE) and PoE+ to the connected devices, depending on the cable type and length. However, the customer only wants to support at least 1 GbE connectivity, which can be achieved with PoE+ and CAT6 cable, without the need for Smart Rate.

References:

Aruba 320 Series Access Points Data Sheet)

ArubaOS-Switch and ArubaOS-CX Transceiver Guide)

Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47))

To plan a wireless solution upgrade for printers, the architect needs to know whether the printers support 802.1X and the 802.11 standards supported by the printer. These two factors are important for ensuring the compatibility, security, and performance of the wireless network.

802.1X is a standard for network access control that provides authentication, authorization, and encryption for devices that connect to a wireless network1. It prevents unauthorized devices from accessing the network resources and protects the data transmission from eavesdropping or tampering. If the printers support 802.1X, the architect can design a wireless solution that leverages this feature to enhance the security and compliance of the network. If the printers do not support 802.1X, the architect may need to consider alternative methods of securing the wireless access, such as MAC address filtering, VPN, or WPA2-PSK2.

802.11 is a set of standards that define the specifications and protocols for wireless communication3. Different 802.11 standards have different characteristics, such as frequency, bandwidth, data rate, range, and compatibility. For example, 802.11a operates at 5 GHz and offers up to 54 Mbps, while 802.11b operates at 2.4 GHz and offers up to 11 Mbps3. If the printers support the same or higher 802.11 standards as the wireless network, the architect can design a wireless solution that ensures the optimal performance and reliability of the wireless communication. If the printers support lower or different 802.11 standards than the wireless network, the architect may need to consider the impact of the compatibility issues, such as interference, congestion, or degradation4.

The other options are not as relevant for planning a wireless solution upgrade for printers. Whether the printers are physically locked down or not does not affect the wireless connectivity, unless the lock interferes with the antenna or signal reception. The identity of users who need to access printers is more related to the access control and user management policies, rather than the wireless solution design. Whether the printers support PoE or not does not affect the wireless connectivity, unless the power source is unreliable or insufficient.

References:

1: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-overview/802.1x.htm

2: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-overview/securing-wireless-access.htm

3: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-overview/802.11-standards.htm

4: https://www.arubanetworks.com/techdocs/ArubaOS_86_Web_Help/Content/arubaos-solutions/1-overview/compatibility-issues.htm

it meets the customer’s requirements for wired network upgrade. By combining the switches in each Building 2 closet as a Virtual Switching Framework (VSF) fabric, the architect can reduce the number of logical devices within the network, simplifying management and reducing complexity, aligning with the goal of flattening architecture. Establishing two 10 GbE connections to the core per fabric ensures redundancy and resilience, maintaining connectivity even if one link fails, without necessitating additional cabling. This also provides sufficient bandwidth and scalability for the network traffic.

The other options are incorrect because:

A. Using two additional 2930F switches to act as an aggregation layer for Building 2 adds another layer of devices and complexity to the network, contradicting the goal of flattening architecture. It also requires additional cabling and ports to connect the switches to the core and the access layer.

B. Connecting each Building 2 switch directly to the core on a single fiber strand through the use of SFP±SR transceivers does not provide redundancy and resilience, as one link failure would disconnect the switch from the core. It also limits the bandwidth and scalability of the network, as each switch would have only one 10 GbE connection to the core.

D. Extending additional fiber between the buildings so that each Building 2 switch can have a direct 10 GbE connection to the core requires recabling, which the customer wants to avoid. It also increases the cost and complexity of the network, as more fiber strands and ports would be needed.

References:

Aruba 2930M Switch Series - Data sheet)

Aruba Validated Reference Design: Campus Wired LAN - Chapter 3)

ArubaOS-Switch Virtual Switching Framework - Configuration guide)

The maximum bandwidth possible between the aggregation and core layers using 8 strands of OM4 Multi-Mode fiber can be up to 200 Gbps1. This is because each strand of OM4 fiber can support up to 25 Gbps of bandwidth, and with 8 strands, the total bandwidth can reach up to 200 Gbps1. However, the actual bandwidth can be influenced by various factors such as the quality of the fiber, the type of transceivers used, and the distance between the aggregation and core layers1.

References:

What is IP and Ethernet aggregation? - Ciena

Aruba 5400R zl2 Switch Series Data Sheet

Aruba 5400R zl2 Switch Series Installation and Getting Started Guide

ArubaOS-Switch and ArubaOS-CX Transceiver Guide

According to the Designing Aruba Solutions course, dedicated Air Monitors (AMs) are APs that are configured to scan all channels for wireless threats and perform wireless intrusion prevention system (WIPS) functions. One of the advantages of using dedicated AMs over APs that are doing WIPS in AP mode (hybrid) is that AMs can implement wireless containment on any channel on which they detect a threat without affecting the service of legitimate clients. Wireless containment is a technique that prevents rogue APs or clients from communicating with the network by sending deauthentication or disassociation frames to them. However, if an AP that is serving clients performs wireless containment on a different channel, it will have to switch channels frequently, which will degrade the performance and user experience of the clients. Therefore, dedicated AMs are recommended for customers who need effective and efficient wireless containment without compromising client service.

References:

Designing Aruba Solutions, Rev. 20.11, Module 5: Aruba Security Design, page 5-13

Aruba Validated Reference Design: Wireless Intrusion Prevention System, page 10

 References:https://www.arubanetworks.com/assets/ds/DS_7200Series.pdf

Aruba Mobility Controller Data Sheet (Aruba Networks)

Designing Aruba Solutions Study Guide (HPE Press)

The correct answer is option C, 20-25. This is because a general rule of thumb for 802.11ac wireless deployment is to have one AP for every 200 square meters (approximately 2,000 square feet) of coverage area. This assumes a moderate user density and application demand. Therefore, for a coverage area of 4,645 square meters (approximately 50,000 square feet), the architect should have in mind about 23 APs (4,645 / 200 = 23.225). This number can be adjusted based on the actual site survey and VisualRF plan, but it serves as a good starting point. References: The information can be referenced from the official HPE documents and learning materials available on HPE Press and Aruba Networks. Specifically, it aligns with the objectives outlined in Chapter 4: Wireless LAN Design, where the AP count estimation and site survey methods are discussed. Designing Aruba Solutions Official Certification Study Guide Aruba Mobility Fundamentals Guide

 In local mode, the IAP cluster at the branch office has a local subnet and the master IAP of the cluster acts as the DHCP server and gateway for clients. The local mode provides access to the corporate network using the inner IP of the IPsec tunnel. The local mode is recommended for this scenario because it allows the branch office to remain functional even if the link to the main office fails, as the clients can still obtain IP addresses and access local resources. The local mode also avoids the need for additional routing or switching configuration on the MC or the branch office network12. References:

1: Understanding IAP-VPN Architecture - Aruba

2: IAP-VPN Forwarding Modes - Aruba