VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

HPE Campus Access Switching Expert Practical Exam Free Sample Questions

Description

Covers resilient layer 2 campus switching with VSX and spanning tree, layer 3 routing with OSPF and BGP, AAA and network access control, VXLAN and EVPN fabric, secure WLAN deployment, and QoS.

12 free sample questions150 in the full practice test

Try simulator

HPE4-A52 Sample Questions

  1. Question 1

    Intermediate

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Optimized VSX and/or VSF Features with Best Practices

    A large university campus is deploying a pair of Aruba CX 8325 switches in a VSX cluster to serve as the Core aggregation point. The administrators have configured the Inter-Switch Link (ISL) using two 100GbE links and a separate 1GbE link for the Keepalive. During a failure simulation where the ISL links are physically disconnected but the Keepalive link remains active, the secondary VSX member shuts down its VSX LAG member ports. Which specific component or configuration is responsible for this behavior to prevent traffic loops?

    Answer and explanation

    Correct answer: C

    When the ISL fails but the Keepalive remains up, the VSX cluster detects a split condition. The secondary switch initiates 'split-recovery' logic (often implicitly handled via the keepalive detection) and shuts down its VSX LAG member ports to prevent split-brain scenarios and loops, ensuring traffic only flows through the primary.

  2. Question 2

    Intermediate

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Optimized VSX and/or VSF Features with Best Practices

    You are designing a Layer 2 access layer for a financial institution using AOS-CX switches. The requirement is to support Multi-Chassis Link Aggregation (MC-LAG) to downstream servers without using a proprietary stacking cable. You decide to use VSX. Which of the following statements correctly describes the configuration requirement for the downstream server LAGs on the VSX pair?

    Answer and explanation

    Correct answer: D

    In AOS-CX VSX configurations, for an MC-LAG to function, the LAG interface ID (e.g., interface lag 10) must be the same on both VSX peers, and the command multi-chassis must be applied within the LAG interface context.

  3. Question 3

    Advanced

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Advanced Spanning Tree with hardening

    An administrator is configuring MSTP on an Aruba CX switch network. The network consists of three regions. While troubleshooting a connectivity issue, the administrator notices that the boundary ports between Region A and Region B are discarding traffic unexpectedly. A 'show spanning-tree' reveals a digest mismatch. What is the most likely cause of this issue?

    Answer and explanation

    Correct answer: B

    In MSTP, the configuration digest is a hash calculated based on the VLAN-to-Instance mapping table. If this mapping differs even slightly between switches that are supposed to be in the same region, the digests will not match, causing them to treat each other as being in different regions or causing boundary inconsistencies.

  4. Question 4

    Beginner

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Advanced Spanning Tree with hardening

    You are implementing a security hardening policy on the access layer switches. You want to ensure that if a malicious user connects a rogue switch to an edge port and attempts to become the root bridge, the port is immediately placed into a 'blocking' or 'inconsistent' state, but recovers automatically if the rogue BPDU stops. Which feature should you enable?

    Answer and explanation

    Correct answer: C

    Root Guard enforces the position of the root bridge. If a port configured with Root Guard receives a superior BPDU (indicating a better path to root), the port enters a root-inconsistent state rather than changing the root port, effectively blocking the rogue path. It recovers automatically when superior BPDUs cease.

  5. Question 5

    Intermediate

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Loop prevention and storm control

    A customer requires a loop prevention mechanism that is independent of Spanning Tree Protocol (STP) for their edge ports, specifically to detect if an unmanaged switch connected to an edge port has a loop. Which feature in AOS-CX is designed to send proprietary packets to detect this condition and shut down the port?

    Answer and explanation

    Correct answer: B

    Loop Protection in AOS-CX sends proprietary loop-detect packets out of an interface. If the packet returns to the same switch, it indicates a loop downstream (e.g., on an unmanaged hub/switch) and disables the port. This works independently of STP.

  6. Question 6

    Intermediate

    Deploy and Troubleshoot Secure and Resilient Layer 2 Campus Network · Optimized VSX and/or VSF Features with Best Practices

    You are troubleshooting a VSX cluster where the configuration synchronization is failing. The 'show vsx status' command indicates 'Config Sync Status: Disabled'. You verify that the ISL is up and the keepalive is reachable. Which of the following commands must be executed to enable synchronization from the primary to the secondary?

    Answer and explanation

    Correct answer: C

    In AOS-CX, VSX config sync is granular. You must go into the specific feature contexts (like interface lag or spanning-tree) and type vsx-sync . However, to check global sync status, you look at show vsx status. If it says disabled, it typically implies no contexts are configured for sync or the peers are mismatched. But specifically, there isn't a global 'turn on sync' switch; you enable it per feature.

Register free for 6 more questions

Or unlock all 150 HPE4-A52 questions with explanations, timed mode and flashcards.

Related practice tests

All Aruba practice exams