Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Aruba
Exam Format
360 min
65%
Expert
Registration
PSI, Aruba Education Services
Validity
Until recertification is required
Pass the HPE7-A06 written exam again to recertify
HPE4-A52 Exam Topics and Domains
HPE4-A52 is organized into 7 weighted domains. Expect to work with ClearPass, AOS-CX BGP, AOS-CX DAI, AOS-CX RBAC, and more.
1
Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network
20%
Optimized VSX and/or VSF Features with Best Practices
Virtual Switching Extension (VSX) Configuration and OptimizationVirtual Switching Framework (VSF) Stacking and ManagementVSX Split-Brain Detection (VSX-MAD)Multi-Chassis Link Aggregation (MC-LAG) with VSXISL and Keepalive Link ManagementVSX Synchronization and Failover
- Configure and optimize VSX and VSF for campus switching environments
- Implement VSX-MAD for split-brain detection and prevention
- Deploy MC-LAG across VSX pairs for server and device dual-homing
- Troubleshoot VSX ISL, keepalive, and synchronization issues
Distributed Link Aggregation
LACP ConfigurationStatic LAG vs Dynamic LAGLAG Load Balancing and Troubleshooting
- Configure LACP and static LAG for link aggregation
- Deploy multi-chassis LAG across VSX pairs
- Verify and troubleshoot LAG load balancing and member link issues
Advanced Spanning Tree with Hardening
MSTP ConfigurationRoot Bridge Placement and OptimizationSTP Hardening Features
- Configure MSTP for multi-VLAN campus environments
- Optimize STP root bridge placement and convergence
- Harden STP with BPDU Guard, Root Guard, and Loop Guard
Loop Prevention and Storm Control
Storm Control ConfigurationLoop Detection and Protection
- Configure broadcast, multicast, and unknown unicast storm control
- Implement loop detection and auto-recovery mechanisms
- Troubleshoot Layer 2 loop conditions in campus environments
2
Design, Deploy and Troubleshoot Reliable and Resilient Layer 3 Campus Network
14%
ECMP (Equal-Cost Multi-Path)
ECMP Routing Configuration
- Configure and verify ECMP routing for multi-path load balancing
- Understand hash-based forwarding decisions in ECMP
Optimized and Secure Multi-Area OSPF
OSPF Multi-Area DesignOSPF Route Summarization and AuthenticationOSPF Convergence Tuning and TroubleshootingOSPF with VSX Integration
- Design and deploy multi-area OSPF for enterprise campus
- Implement OSPF authentication and route summarization
- Tune OSPF convergence and troubleshoot adjacency issues
- Integrate OSPF with VSX for resilient Layer 3
BGP (Border Gateway Protocol)
BGP Peering and Route AdvertisementsBGP Metrics and Route ControlBGP Troubleshooting
- Configure BGP peering for campus edge connectivity
- Apply BGP route control using attributes and policies
- Troubleshoot BGP neighbor states and route propagation
Anycast and First Hop Redundancy
VRRP and Active-Active GatewayFirst-Hop Redundancy Troubleshooting
- Configure VRRP and anycast gateway for first-hop redundancy
- Deploy active-active gateway with VSX
- Troubleshoot first-hop redundancy protocols
Multicast Routing
IGMP Snooping and QuerierPIM-SM and Rendezvous Point ConfigurationMulticast with VSX Integration
- Configure IGMP snooping and querier for multicast optimization
- Deploy PIM-SM with static or dynamic RP
- Integrate multicast routing with VSX
3
Control and Protect Wired Switched and Routed Network
24%
AAA (Authentication, Authorization, and Accounting)
RADIUS and TACACS+ ConfigurationAAA Troubleshooting and Debugging
- Configure RADIUS and TACACS+ for network and management authentication
- Integrate AOS-CX switches with ClearPass Policy Manager
- Troubleshoot AAA authentication and authorization issues
Network Access Control
802.1X Port-Based AuthenticationMAC Authentication and Concurrent MethodsUser Roles and RADIUS-Based VLAN Assignment
- Deploy 802.1X with EAP-TLS for secure port access
- Configure MAC authentication as fallback for non-supplicant devices
- Implement role-based access control via RADIUS and ClearPass
Rogue DHCP
DHCP Snooping and Dynamic ARP Inspection
- Implement DHCP snooping for rogue DHCP server mitigation
- Configure Dynamic ARP Inspection based on DHCP snooping binding table
Dynamic Segmentation
User-Based Tunneling (UBT) 1.0 and 2.0Role-Based Access via Dynamic Segmentation
- Deploy User-Based Tunneling for wired dynamic segmentation
- Configure wired zones with Aruba Gateway integration
- Implement role-based access control via dynamic segmentation
COP (Control Plane Policing)
Control Plane Policing Configuration
- Configure Control Plane Policing to protect switch CPU from DoS attacks
- Tune CoPP rate limits for appropriate control plane traffic management
Mitigation Against Layer 2 and Layer 3 LAN Attacks
Layer 2 Attack MitigationLayer 3 Attack Mitigation
- Implement comprehensive Layer 2 attack mitigation (DAI, port security, MACsec)
- Configure Layer 3 security with IP Source Guard and ACLs
- Secure management plane access on AOS-CX switches
4
Validate, Configure, and Troubleshoot a Secure Distributed Fabric
12%
VXLAN and EVPN
VXLAN Tunnel ConfigurationEVPN Control Plane with BGPVXLAN with VSX and Underlay Design
- Configure VXLAN tunnels with static or EVPN-based control plane
- Deploy EVPN with BGP for automated MAC/IP learning across fabric
- Integrate VXLAN with VSX and design OSPF underlay
GBP Based on Micro-segmentation
Group-Based Policy (GBP) ImplementationGBP Integration with Aruba Gateway and NetConductor
- Deploy GBP for micro-segmentation across the campus fabric
- Integrate GBP with Aruba Gateway and VXLAN fabric
- Understand NetConductor orchestration for policy enforcement
RBAC (Role-Based Access Control)
Role-Based Access PoliciesRBAC with Dynamic Segmentation
- Configure role-based access control policies on AOS-CX
- Integrate RBAC with dynamic segmentation and VXLAN fabric
- Understand NetConductor orchestration for RBAC
5
Deploy a Secure and Optimized WLAN Network
12%
Gateway Clustering
Aruba Gateway Cluster Configuration
- Configure Aruba Gateway clustering for WLAN high availability
- Design gateway cluster sizing for campus deployment
Tunneled/Mixed SSID
Tunneled and Mixed Mode SSIDs
- Configure tunneled and mixed mode SSIDs on Aruba Gateway
- Apply VLAN decision rules for forwarding mode selection
AAA and WLAN Security
WPA3/WPA2 Enterprise and 802.1X for WirelessGuest Access and Captive Portal
- Deploy WPA3-Enterprise and WPA2-Enterprise SSIDs
- Configure 802.1X with EAP-TLS for wireless authentication
- Set up guest access with captive portal and RADIUS
RF Optimization
Radio Frequency Planning and Management
- Configure RF optimization features including ARM and ClientMatch
- Implement band steering and airtime fairness for WLAN performance
MPSK (Multi Pre-Shared Key)
MPSK Configuration and Use Cases
- Configure MPSK for flexible PSK-based authentication
- Deploy MPSK for IoT device onboarding with role assignment
6
Plan and Configure QoS
12%
DSCP and CoS Marking
DSCP and CoS Classification
- Configure DSCP and CoS marking on AOS-CX switches
- Design trust boundaries for QoS at campus access layer
Traffic Prioritization
Priority Queuing and Per-Hop Behavior
- Configure traffic prioritization for voice and video
- Implement per-hop behavior with strict priority and weighted scheduling
Traffic Shaping
Rate Limiting and Shaping Policies
- Configure ingress and egress rate limiting
- Apply traffic shaping policies for bandwidth management
Queuing and Scheduling
Queue Configuration and Active Queue Management
- Configure queue mapping and scheduling stages on AOS-CX
- Implement WRED for active queue management
- Design end-to-end QoS across campus network
7
Management and Device Onboarding
6%
Central Groups and Templates
HPE Aruba Networking Central Management
- Configure HPE Aruba Networking Central groups and templates
- Manage firmware and configuration compliance via Central
ZTP (Zero Touch Provisioning)
Zero Touch Provisioning Workflow
- Configure Zero Touch Provisioning with Aruba Central
- Automate device onboarding using Activate service
Manual Provisioning
CLI-Based Configuration and Management
- Perform manual switch provisioning via CLI
- Configure management access (console, SSH) and backup/restore
How do I earn this certification?
Passing HPE4-A52 earns the HPE Aruba Networking Certified Expert - Campus Access Switching (ACX-CAS) certification. It sits in the Campus Access - Switching track.
Current Level Exams
Alternative Paths
- HPE7-A07 - HPE Campus Access Mobility Expert Written ExamComplementary expert certification focusing on wireless/mobility aspects
- HPE7-A09 - HPE Switching Expert Written ExamNewer AOS-CX-specific switching expert certification using the AAXSTS course
- HPE4-A50 - HPE Network Security Expert Practical ExamExpert-level network security certification
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for HPE4-A52 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2026-02
Updates
- EVPN-VXLAN Fabric with AOS-CX Core fabric overlay technology tested in practical scenarios
- NetConductor Orchestration Orchestration of GBP and RBAC across distributed fabric
- WPA3-Enterprise Latest wireless security standard tested alongside WPA2-Enterprise
- User-Based Tunneling (UBT) 2.0 Enhanced dynamic segmentation for wired clients via gateway
- MACsec (802.1AE) Link-layer encryption between AOS-CX switches
Who should take this exam?
HPE7-A06 HPE Campus Access Switching Expert Written Exam (must be passed before registering for HPE4-A52)
- 5+ years of experience with complex enterprise networks
- Mastery of configuration and troubleshooting of HPE Aruba Networking solutions
- ACP - Campus Access (Aruba Certified Professional - Campus Access) certification
- Advanced Campus Access for Switching (AACAS) course completion
Related practice tests
- HPE7-A01Aruba Campus Access Professional (Written)
- HPE6-A88HPE Aruba Networking ClearPass
- ACMP_6.4Aruba Certified Mobility Professional 6.4
- HPE6-A78HPE Aruba Networking Certified Associate - Network Security
- HPE7-A02HPE Aruba Networking Certified Network Security Professional