HP0-Y51 - Building HP SDN and FlexNetwork Solutions

Go back to HP

Example Questions

A company has an HP Network Protector SDN Application with these characteristics: - The Network Protector whitelist for all user VLANs includes site1.example.com. - The blacklist for all user VLANs includes site1.example.com with a time range of 9:00 to 17:00. - The Rep DV database includes site1example.com with a reputation score of 90. An endpoint attempts to browse to site1.example.com. How does Network Protector classify DNS requests for site1.example.com? An HP VAN SDN Controller runs the HP Network Protector SDN Application. The application has programmed an HP Switch with flows that output the service insertion tunnel. How does the switch forward packets matching these flows to the controller? What correctly describes the role of OpenFlow in an SDN solution? An HP Unified Wired-Wireless controller is configured to enforce portal authentication on a Guest SSID. The company plans to use the local portal server on the controller but needs customized portal pages that show information about the company. What is one of the rules for customizing the pages? A company has an HP BYOD solution. The administrator is setting up synchronization of user accounts from Active Directory (AD). The administrator wants User Access Manager (UAM) to organize the user accounts in groups in the same way that AD does. How does the administrator configure this to accomplish the goal? A company has three HP VAN SDN Controllers, which will be deployed in a team. The administrator is deciding whether to create one region or three regions. What is a benefit of creating three regions rather than one region? A company has an HP Unified Wired-Wireless controller that controls HP MultiService Mobility (MSM) APs. The network administrator wants to implement protection against rogue APs in the company's campus environment. Only APs that have approved MAC addresses should be allowed to operate and support clients. Controlled APs should send disassociation frames to prevent clients from connecting to rogue APs. The administrator sets up APs to monitor the area and creates a permitted MAC address list with the approved AP MAC addresses. The administrator has not configured any other Intrusion Detection System (IDS) settings. Which additional step must the administrator complete? An HP Unified Wired-Wireless controller controls an AP. The AP implements centralized forwarding. It supports 802.11n clients that implement Wi-Fi Multimedia (WMM) or 802.11 e. Some of the clients are sending traffic in high priority WMM queues. How does the AP help to ensure that this traffic is prioritized in the wired LAN? Which OpenFlow use case is an example of Network Functions Virtualization (NFV)? A large shopping center has an HP BYOD solution with these requirements: User Access Manager (UAM) should provide the portal in which guests register their own accounts. Guests should only have to register and log in once. After that, the guest device automatically logs in by MAC address. Each shop has its own SSID. The administrator wants UAM to display a custom portal page to users based on the SSID to which they connect. What is the proper way to configure this solution? HP Unified Wired-Wireless controllers support wireless Intrusion Detection System (IDS)/intrusion prevention system (IPS) features. An HP AP radio is configured to participate in this solution in hybrid mode. Which functions can the hybrid mode radio fulfill? An administrator sets up an OpenFlow instance on an HP Provision switch in passive mode. What does this mean? A company has an HP BYOD solution with these requirements: Employees can connect their own devices to an Employees SSID, which enforces Wi-Fi Protected Access 2 (WPA2) with 802.1X. User Access Manager (UAM) is the RADIUS server for 802.1X authentication, and it enforces EAP-TLS. The employees will first connect to an open SSID, access a portal page, and download the proper certificates for completing 802.1X authentication. To meet these requirements, an administrator needs to deploy the correct certificate templates on UAM. What determine deploy? An HP Virtual Cloud Networking (VCN) SDN Application runs on an HP VAN SDN Controller. How does VCN help to provision networking for virtualized services in a cloud solution? A Company has APs that are deployed relatively close together. These APs are controlled by an HP Unified Wired-Wireless controller. Which setting helps to prevent the APs from interfering with each other while also letting the APs extend their coverage area if one of the AP fails? An administrator plans to deploy a wireless network, which might need to support a mix of 802.11g and 802.11n clients in the 2.4 GHz frequency. The administrator wants to prioritize transmissions for 802.11 n clients. Which 2.4 GHz radio setting helps to prevent slow clients from taking more than their share of transmission time? Table of Acronyms An administrator is setting up an EVI solution on four HP Comware switches. The switches reach each other on these IP address: - Switch1= 10.1.1.1 - Switch2= 10 2.2 2 - Switch3= 10.3.3.3 - Switch4= 10.4.4.4 The administrator wants to make Switch1 and Switch2 potential EVI Network Discovery Protocol (ENDP) servers. What is the proper configuration on the Switch1 EVI tunnel interface? An administrator has set up an HP BYOD solution for an HP MSM760 controller and its APs. These are the specifications: Guests should only have to register and log in once After that, the guest device should be automatically logged in. User Access Manager (UAM) provides the portal in which guests register their own accounts. The MSM760 is connected to a Comware switch, which redirects unregistered guests to the UAM portal. Currently guests can reach the portal, register for their accounts, and log in. However, guests report that they cannot reach the Internet after they log in. When the administrator asks the guests to disconnect from the wireless network and then connect again, they succeed in reaching the Internet. What could fix this problem? A large shopping center has an HP BYOD solution with these requirements: - User Access Manager (UAM) should provide the portal in which guests register their own accounts. - Guests should only have to register and log in once. After that, the guest device automatically logs in byMAC address. - Each shop has its own SSID. The administrator wants UAM to display a custom portal page to users based on the SSID to which they connect. What is the proper way to configure this solution? A company has HP MultiService Mobility (MSM) APs that receive DHCP addresses on several different subnets. The APs are controlled by an MSM Controller. The company is considering replacing the MSM Controller with a Unified Wired-Wireless controller. The administrator runs a proof of concept test in which some of these APs are discovered and controlled by the Unified Wired-Wireless controller. Now the administrator wants to return the APs to being controlled by the MSM Controller. The network administrator performs these actions: - Ensures that the Colubris vendor-specific option in each AP subnet DHCP scope references the MSM Controller IP address - Reboots the APs. The MSM Controller never succeeds in discovering the APs. A debug reveals that the APs are not contacting the controller at all. Which action could fix this problem? A company has HP MultiService Mobility (MSM) APs that receive DHCP addresses on several different subnets. The APs are controlled by an MSM Controller. The company is considering replacing the MSM Controller with a Unified Wired-Wireless controller. The administrator runs a proof of concept test in which some of these APs are discovered and controlled by the Unified Wired-Wireless controller. Now the administrator wants to return the APs to being controlled by the MSM Controller. The network administrator performs these actions: Ensures that the Colubris vendor-specific option in each AP subnet DHCP scope references the MSM Controller IP address Reboots the APs. The MSM Controller never succeeds in discovering the APs. A debug reveals that the APs are not contacting the controller at all. Which action could fix this problem? An SDN application needs to create reactive flow table entries in response to specific packets. The flow_mod APIs will create the actual entries, but application must be configured with another API as part of this function. What is that API? When should an administrator enable hybrid mode on an HP VAN SDN Controller? What is one benefit of the HP patent for Adaptive Multicast channel width and Guard Interval 802.11n? A company is deploying an HP Unified Wired-Wireless controller solution with an HP BYOD solution. Guests will connect to an open Guest SSID and be redirected by their default gateway to a portal hosted by User Access Manager (UAM). The default gateway is a Comware routing device. The administrator has set up portal authentication on the Comware device to implement the redirect. The administrator asks the BYOD solution designer about the correct RADIUS and domain settings for portal authentication on the switch. What should the BYOD solution designer explain to the administrator? A company has an HP BYOD solution to let guests connect to a Guest SSID and log in through a registration page. The company needs an Employee SSID which enforces Wi-Fi Protected Access 2 (WPA2) with 802.1X. Employees must authenticate with certificates. Before authenticating with a device for the first time, the employees should be able to connect to the Guest SSID, access the guest registration page, and download valid certificates. How does the administrator configure User Access Manager (UAM) to allow employees to download certificates from the registration page? An administrator has set up an HP BYOD solution for an HP MSM760 controller and its APs. These are the specifications: - Guests should only have to register and log in once After that, the guest device should be automatically logged in. - User Access Manager (UAM) provides the portal in which guests register their own accounts. - The MSM760 is connected to a Comware switch, which redirects unregistered guests to the UAM portal. Currently guests can reach the portal, register for their accounts, and log in. However, guests report that they cannot reach the Internet after they log in. When the administrator asks the guests to disconnect from the wireless network and then connect again, they succeed in reaching the Internet. What could fix this problem? A company has a Unified Wired-Wireless controller solution, which uses its local portal to authenticate guests. The company is adding an HP BYOD solution with these requirements: - The User Access Manager (UAM) server with IP address 10.1 3.4 should provide the portal in which guests register own accounts - Guests should only have to register and log in once. After that,the guest device automatically logs inby MAC address The administrator removes the local portal settings and begins to reconfigure the solution. What is one change that the administrator must take to the settings for the Guest SSID? A company is considering TRILL and SPBM as options for the data center architecture. The company is interested in how the solution handles load-balancing unicast traffic. What correctly describes the TRILL and SPBM options? A company has an Employees SSID, which enforces Wi-Fi Protected Access 2 (WPA2) with 802.1X. The company has a Contractors SSID, which has no encryption. Contractors can connect their own devices to the Contractors SSID and log in the credentials assigned to them by an employee. HP User Access Manager (UAM) has these services: A Contractor access service, which is assigned to contractor accounts created by employees An Employee access service, which is assigned to employee accounts synchronized from Active Directory (AD) A new company policy encourages contractors to use encryption. Contractors should download certificates when they connect to Contractors SSID and register. Then the contractors can connect to the Employees SSID and have an encrypted connection. How does the administrator enable the contractors to connect to the Employees SSID but receive the correct contractor VLAN assignment? A company has an external SDN application that works with an HP VAN SDN Controller. The application programmer has tried testing several RESTful API calls but receives authentication errors. What does the administrator need to explain to the programmer? A company has an Employees SSID, which enforces Wi-Fi Protected Access 2 (WPA2) with 802.1X. The company has a Contractors SSID, which has no encryption. Contractors can connect their own devices to the Contractors SSID and log in the credentials assigned to them by an employee. HP User Access Manager (UAM) has these services: - AContractor access service, which is assigned to contractor accounts created by employees - An Employee access service, which is assigned to employee accounts synchronized from Active Directory (AD) A new company policy encourages contractors to use encryption. Contractors should download certificates when they connect to Contractors SSID and register. Then the contractors can connect to the Employees SSID and have an encrypted connection. How does the administrator enable the contractors to connect to the Employees SSID but receive the correct contractor VLAN assignment? A company is adding an HP BYOD solution. User Access Manager (UAM) should provide the portal in which guests register their own accounts. Guests should only have to register and log in once. After that, the guest device automatically logs in by MAC address. UAM has these settings: User account BYOD Anonymous = Assigned to Access service 1 Guest access service = Access service 2 Access service 1: Default access policy = Access policy 1 Access policy 1: No certificate authentication and User VLAN 8 Access service 2. Default access policy = Access policy 2 Access policy 2: No certificate authentication and User VLAN 88 How should the administrator configure portal authentication (HTTP redirection)? A company has an HP Network Protector SDN Application with these characteristics: The Network Protector whitelist for all user VLANs includes site1.example.com. The blacklist for all user VLANs includes site1.example.com with a time range of 9:00 to 17:00. The Rep DV database includes site1 example.com with a reputation score of 90. An endpoint attempts to browse to site1.example.com. How does Network Protector classify DNS requests for site1.example.com? A company has a Unified Wired-Wireless controller solution, which uses its local portal to authenticate guests. The company is adding an HP BYOD solution with these requirements: The User Access Manager (UAM) server with IP address 10.1 3.4 should provide the portal in which guests register own accounts Guests should only have to register and log in once. After that, the guest device automatically logs in by MAC address The administrator removes the local portal settings and begins to reconfigure the solution. What is one change that the administrator must take to the settings for the Guest SSID? Table of Acronyms An administrator is setting up an EVI solution on four HP Comware switches. The switches reach each other on these IP address: Switch1 = 10.1.1.1 Switch2 = 10 2.2 2 Switch3 = 10.3.3.3 Switch4 = 10.4.4.4 The administrator wants to make Switch1 and Switch2 potential EVI Network Discovery Protocol (ENDP) servers. What is the proper configuration on the Switch1 EVI tunnel interface? A company has an HP BYOD solution with these requirements: - Employees can connect their own devices to an Employees SSID, which enforces Wi-Fi Protected Access 2(WPA2) with802.1X. - User Access Manager (UAM) is the RADIUS server for 802.1X authentication, and it enforces EAP-TLS. - The employees will first connect to an open SSID, access a portal page, and download the proper certificatesfor completing 802.1X authentication. To meet these requirements, an administrator needs to deploy the correct certificate templates on UAM. What determine deploy? A company is adding an HP BYOD solution. User Access Manager (UAM) should provide the portal in which guests register their own accounts. Guests should only have to register and log in once. After that, the guest device automatically logs in by MAC address. UAM has these settings: - User account BYODAnonymous = Assigned to Access service 1 - Guest access service = Access service 2 - Access service 1: Default access policy = Access policy 1 - Access policy 1: No certificate authentication and User VLAN 8 - Access service 2. Default access policy = Access policy 2 - Access policy 2: No certificate authentication and User VLAN 88 How should the administrator configure portal authentication (HTTP redirection)? How does the HP Optimizer SDN Application -Microsoft Lync enhance QoS for Microsoft Lync?