View Full HP HPE7-A01 Exam Dumps and Practice Test Dumps.

 

Question 161

An administrator needs to prevent users in one VLAN from communicating directly with users in another VLAN unless a Layer 3 security policy permits the traffic. Which design provides this separation?

1. VLAN segmentation
2. Port mirroring
3. Link aggregation
4. NTP synchronization

Correct Answer: 1

Explanation

VLAN segmentation separates devices into distinct Layer 2 broadcast domains. Devices in different VLANs cannot communicate directly at Layer 2 and require a Layer 3 gateway or routing function to communicate between VLANs. Security policies can then be applied to control which inter-VLAN traffic is permitted. Port mirroring is used for traffic analysis, link aggregation combines physical interfaces, and NTP synchronizes system clocks. Therefore, VLAN segmentation is the appropriate design for separating users into different logical networks and controlling communication between those networks.

Question 162

An administrator wants to identify whether a switch interface is receiving excessive CRC or other physical-layer errors. Which information should be reviewed?

1. DNS cache
2. Interface error counters
3. RADIUS database
4. NTP configuration

Correct Answer: 2

Explanation

Interface error counters provide useful information about physical and data-link problems on Ethernet interfaces. Counters such as CRC errors, input errors, output errors, and discards can help administrators identify faulty cabling, duplex problems, transceiver issues, or other connectivity conditions. DNS cache information concerns name resolution, RADIUS databases contain authentication information, and NTP configuration concerns time synchronization. Therefore, interface error counters should be reviewed when troubleshooting excessive CRC or other interface-related errors. Comparing counters over time can also help determine whether the problem is ongoing or isolated.

Question 163

An administrator needs to provide a network device with an IP address, subnet mask, default gateway, and DNS server automatically. Which protocol should be used?

1. SNMP
2. LLDP
3. DHCP
4. STP

Correct Answer: 3

Explanation

DHCP automatically provides clients with network configuration parameters such as IP addresses, subnet masks, default gateways, and DNS server addresses. This reduces manual configuration and makes large network deployments easier to manage. DHCP uses leases, allowing addresses to be assigned for defined periods. SNMP is used for monitoring, LLDP provides neighbor information, and STP prevents Layer 2 loops. Therefore, DHCP is the correct protocol when a device needs to receive its IP configuration automatically from a network service.

Question 164

An administrator wants to prevent a switch port from accepting DHCP server responses from an untrusted endpoint. Which feature should be configured?

1. DHCP snooping
2. LACP
3. QoS
4. LLDP

Correct Answer: 1

Explanation

DHCP snooping allows a switch to distinguish between trusted and untrusted interfaces for DHCP traffic. DHCP server responses can be permitted only through trusted interfaces, helping prevent unauthorized endpoints from operating as rogue DHCP servers. This protects clients from receiving incorrect IP addresses, gateways, or DNS information. LACP provides link aggregation, QoS controls traffic treatment, and LLDP provides neighbor discovery information. Therefore, DHCP snooping is the appropriate feature for restricting DHCP server responses to trusted network interfaces.

Question 165

Which feature can be used to copy traffic from selected switch interfaces to a dedicated interface for packet analysis?

1. STP
2. Port mirroring
3. OSPF
4. DHCP relay

Correct Answer: 2

Explanation

Port mirroring copies selected network traffic from source interfaces or VLANs to a designated monitoring interface. A packet analyzer connected to the monitoring interface can inspect the copied frames for troubleshooting, performance analysis, or security investigations. The mirrored traffic does not normally replace or alter the original forwarding behavior. STP prevents switching loops, OSPF provides dynamic routing, and DHCP relay forwards DHCP messages between Layer 3 networks. Therefore, port mirroring is the appropriate feature for sending a copy of selected switch traffic to a monitoring system.

Question 166

An administrator needs to authenticate network users against a centralized authentication service rather than maintaining separate credentials on every access point. Which solution is appropriate?

1. RADIUS
2. NTP
3. DNS
4. LACP

Correct Answer: 1

Explanation

RADIUS provides centralized authentication and authorization services for network access. Wireless infrastructure can forward authentication requests to a RADIUS server, which validates user credentials and can return authorization information. This approach simplifies account management and allows consistent authentication policies across multiple network devices. NTP is used for time synchronization, DNS provides name resolution, and LACP manages link aggregation. Therefore, RADIUS is an appropriate solution when network users need to authenticate against a centralized service rather than using independent credentials on each access point.

Question 167

An administrator wants to use stronger security for administrative management by requiring an encrypted remote CLI session. Which protocol should be selected?

1. Telnet
2. TFTP
3. SSH
4. FTP

Correct Answer: 3

Explanation

SSH provides an encrypted remote command-line management session and is widely used to securely administer network infrastructure. It protects management credentials and session information while they travel across the network. Telnet provides remote CLI access without equivalent encryption, while TFTP and FTP are primarily file-transfer protocols. Administrators should also use appropriate authentication controls and restrict management access to trusted networks where possible. Therefore, SSH is the correct protocol when secure, encrypted remote CLI management is required.

Question 168

An administrator needs to determine whether a wireless client has sufficient signal strength at its current location. Which metric is most relevant?

1. RSSI
2. DHCP lease duration
3. DNS response time
4. NTP offset

Correct Answer: 1

Explanation

RSSI, or Received Signal Strength Indicator, is commonly used to evaluate the strength of a wireless signal received by a client or access point. It can help administrators identify weak coverage areas and determine whether a client is operating near the edge of effective wireless coverage. DHCP lease duration concerns IP address assignment, DNS response time concerns name resolution, and NTP offset concerns clock synchronization. Therefore, RSSI is the most relevant metric when evaluating the strength of a client’s wireless signal.

Question 169

An administrator wants to improve wireless client distribution by encouraging capable dual-band devices to use 5 GHz instead of 2.4 GHz when appropriate. Which feature can help?

1. Captive portal
2. Band steering
3. DHCP relay
4. Static routing

Correct Answer: 2

Explanation

Band steering can encourage capable dual-band clients to associate with a preferred frequency band, such as 5 GHz, when the wireless infrastructure and client behavior support it. This can help distribute clients across available radio resources and potentially reduce congestion on the 2.4 GHz band. Captive portals provide web-based access control, DHCP relay forwards DHCP messages between networks, and static routing defines fixed Layer 3 paths. Therefore, band steering is the appropriate feature for influencing suitable dual-band clients toward a preferred wireless band.

Question 170

An administrator wants to ensure that all network devices use consistent timestamps for centralized log analysis. Which service should be configured?

1. RADIUS
2. NTP
3. SNMP
4. FTP

Correct Answer: 2

Explanation

NTP synchronizes device clocks with a reliable time source, allowing network devices to maintain consistent timestamps. Accurate timestamps are particularly important when administrators correlate events from switches, access points, authentication servers, and other infrastructure components. Without synchronized time, determining the sequence of network events can become difficult. RADIUS provides authentication, SNMP provides monitoring information, and FTP transfers files. Therefore, NTP should be configured when consistent timestamps are required for centralized logging and event analysis.

Question 171

An administrator needs to identify the VLAN and interface associated with a learned Ethernet device address. Which table should be checked?

1. Routing table
2. MAC address table
3. DNS cache
4. DHCP options

Correct Answer: 2

Explanation

A switch MAC address table records learned Layer 2 addresses and associates them with VLANs and switch interfaces. Administrators can use the table to determine where a device has been learned and troubleshoot switching behavior. A routing table contains Layer 3 routes, a DNS cache stores name-resolution information, and DHCP options provide configuration parameters to clients. Therefore, the MAC address table is the appropriate source for identifying the VLAN and interface associated with a learned Ethernet MAC address.

Question 172

An administrator wants to protect an edge port from receiving unexpected BPDUs from an unauthorized switch. Which feature should be enabled?

1. Root Guard
2. BPDU Guard
3. SNMP
4. OSPF

Correct Answer: 2

Explanation

BPDU Guard is designed to protect edge ports where BPDUs are not expected. If an unexpected BPDU is received, the configured protection mechanism can place the port into a protective state. This helps prevent an unauthorized switch from participating in or influencing the spanning-tree topology through an endpoint-facing interface. Root Guard is used for protecting the intended root bridge hierarchy, SNMP provides monitoring, and OSPF provides Layer 3 routing. Therefore, BPDU Guard is the appropriate feature for protecting an edge port from unexpected BPDUs.

Question 173

Which feature helps protect the intended spanning-tree root by preventing an interface from accepting superior BPDUs that could influence root selection?

1. DHCP snooping
2. Port mirroring
3. Root Guard
4. LACP

Correct Answer: 3

Explanation

Root Guard helps protect the intended spanning-tree hierarchy by preventing a designated interface from becoming a path toward an unexpected root bridge. It is useful where administrators know that a particular neighboring device should not influence root bridge selection. DHCP snooping protects DHCP traffic, port mirroring copies traffic for analysis, and LACP combines physical links. Root Guard should be deployed according to the network’s spanning-tree design so that legitimate topology changes are not unintentionally blocked. Therefore, Root Guard is the appropriate feature for protecting the intended STP root hierarchy.

Question 174

An administrator needs to combine two Ethernet interfaces into one logical interface while providing redundancy if one physical link fails. Which technology is appropriate?

1. LACP
2. DNS
3. NTP
4. SNMP

Correct Answer: 1

Explanation

LACP allows multiple physical Ethernet links to be combined into a logical link aggregation group. When multiple links are available, traffic can be distributed across the aggregated connection according to the platform’s hashing and forwarding behavior. If one physical member fails, the remaining link can continue carrying traffic, providing redundancy. DNS handles name resolution, NTP provides time synchronization, and SNMP provides monitoring and management. Therefore, LACP is the appropriate technology when two physical interfaces need to operate as one logical connection with redundancy.

Question 175

An administrator wants to prevent users from sending unauthorized ARP information that could cause incorrect IP-to-MAC mappings on a switched network. Which security feature can help?

1. QoS
2. Dynamic ARP Inspection
3. LLDP
4. NTP

Correct Answer: 2

Explanation

Dynamic ARP Inspection can validate ARP messages against trusted IP-to-MAC address bindings on supported switches. This helps reduce the risk of unauthorized ARP information being accepted and used to redirect or disrupt local network communication. DAI is commonly associated with DHCP snooping information when the platform supports that integration. QoS controls traffic treatment, LLDP provides neighbor discovery, and NTP synchronizes system clocks. Therefore, Dynamic ARP Inspection is the appropriate security feature for helping validate ARP information on a switched network.

Question 176

An administrator wants to prevent a large amount of broadcast traffic from consuming all available bandwidth on an Ethernet segment. Which feature should be considered?

1. Storm control
2. RADIUS
3. DNS
4. OSPF

Correct Answer: 1

Explanation

Storm control can limit excessive broadcast, multicast, or unknown-unicast traffic on supported interfaces. This helps reduce the impact of traffic storms that could otherwise consume substantial bandwidth and affect normal network communication. Administrators can configure thresholds appropriate to their network design and monitor the resulting behavior. RADIUS provides authentication, DNS provides name resolution, and OSPF provides dynamic routing. Therefore, storm control should be considered when an administrator needs to limit excessive broadcast traffic and protect network resources from a traffic storm.

Question 177

An administrator wants to monitor whether network interfaces are approaching bandwidth capacity without capturing every packet. Which technology can provide sampled traffic visibility?

1. STP
2. sFlow
3. DHCP
4. RADIUS

Correct Answer: 2

Explanation

sFlow provides sampled traffic information that can help administrators analyze traffic patterns and utilization without requiring full packet capture. It can provide visibility into traffic sources, destinations, and volumes depending on the monitoring platform and configuration. This makes sFlow useful for capacity planning, performance analysis, and identifying unusual traffic behavior. STP prevents Layer 2 loops, DHCP manages IP configuration, and RADIUS provides authentication and authorization. Therefore, sFlow is the appropriate technology when sampled traffic visibility is needed for network monitoring and capacity analysis.

Question 178

An administrator wants to provide different forwarding treatment to voice, video, and ordinary data traffic during periods of network congestion. Which technology should be configured?

1. QoS
2. ARP
3. LLDP
4. DHCP

Correct Answer: 1

Explanation

Quality of Service allows network traffic to be classified and handled according to application requirements. Voice and video may require more predictable latency, jitter, and packet-loss characteristics than ordinary data traffic. QoS mechanisms can classify traffic, apply markings, place traffic into queues, and schedule transmission according to configured policies. ARP handles IPv4-to-MAC resolution, LLDP provides neighbor information, and DHCP provides IP configuration. Therefore, QoS is the appropriate technology when different traffic types need different forwarding treatment during network congestion.

Question 179

An administrator wants to identify the default gateway configured for a network client. Which DHCP information is most relevant?

1. DNS domain name
2. Lease duration
3. Router option
4. Hostname

Correct Answer: 3

Explanation

The DHCP Router option provides clients with the IP address of the default gateway they should use for destinations outside their local subnet. This information is important because clients depend on the default gateway to reach remote networks. The DNS domain name provides domain-related configuration, lease duration defines how long an address assignment remains valid, and hostname identifies a client or requested host name. Therefore, the Router option is the relevant DHCP information when determining which default gateway should be configured on a client.

Question 180

An administrator needs to verify whether a remote network service is reachable at the IP layer before investigating application-specific problems. Which basic test should be performed first?

1. Ping
2. SNMP configuration
3. Syslog configuration
4. LLDP discovery

Correct Answer: 1

Explanation

Ping provides a basic test of IP-layer reachability by sending ICMP echo requests and waiting for responses. It can help determine whether a destination is reachable and whether packet loss or unusually high response times are present. A successful ping does not guarantee that a particular application or TCP/UDP service is functioning, but it is useful as an initial connectivity test. SNMP configuration concerns monitoring, Syslog concerns event logging, and LLDP discovers directly connected neighbors. Therefore, ping is an appropriate first test when checking basic IP connectivity to a remote service.