Covers the CX 10000 Series with Pensando architecture, Fabric Composer and PSM installation and navigation, building network services, microsegmentation, and monitoring.
12 free sample questions150 in the full practice test
HPE Aruba Networking CX 10000 Series with Pensando overview · List the major components in the HPE Aruba Networking CX 10000 Series with Pensando
A network architect is evaluating the HPE Aruba Networking CX 10000 Series switch for a new data center deployment. The primary goal is to provide stateful firewall services at the edge without hair-pinning traffic to a central appliance. Which component within the CX 10000 makes this distributed services architecture possible?
Answer and explanation
Correct answer: B
The HPE Aruba Networking CX 10000 integrates an AMD Pensando Data Processing Unit (DPU) directly into the switch. This DPU is responsible for delivering stateful software-defined services (like firewalling, IPsec, and telemetry) inline, eliminating the need to hairpin traffic to a centralized security appliance.
Q2Question 2
Intermediate
HPE Aruba Networking CX 10000 Series with Pensando overview · Explain how security is implemented in a distributed services architecture
When comparing a traditional centralized data center security model to the distributed services architecture of the CX 10000, which fundamental networking inefficiency is directly resolved by deploying the CX 10000 at the Top of Rack (ToR)?
Answer and explanation
Correct answer: A
In traditional architectures, East-West traffic between workloads in different subnets (or even the same subnet, for microsegmentation) must be routed to a centralized firewall, creating a 'trombone' or 'hair-pin' effect that consumes core bandwidth and adds latency. The CX 10000 applies stateful policies directly at the ToR, completely eliminating this inefficiency.
flowchart LR
subgraph Traditional
A[Server A] --> B[ToR Switch]
B --> C[Core]
C --> D[Central Firewall]
D --> C
C --> B
B --> E[Server B]
end
subgraph CX10000
F[Server A] --> G[CX 10000 /w DPU]
G --> H[Server B]
end
Q3Question 3
Advanced
HPE Aruba Networking CX 10000 Series with Pensando overview · Describe the key attributes of the CX 10000
NovaCorp is designing a new data center fabric. They have strict compliance requirements mandating that every packet traversing between any two virtual machines—even those on the same physical host and VLAN—must be subject to a stateful firewall policy.
Currently, they use centralized firewalls, but the projected traffic volume will overwhelm their existing appliances. The architect proposes replacing the ToR switches with HPE Aruba Networking CX 10000 switches.
Which combination of technologies in the CX 10000 solution will optimally satisfy this compliance requirement while preventing core network congestion?
Answer and explanation
Correct answer: A
To inspect traffic between VMs on the same host, the traffic must be forced out of the hypervisor's virtual switch up to the Top of Rack (ToR) switch. Once at the ToR, the CX 10000's Pensando DPU applies the stateful firewall policy locally. This satisfies the compliance rule without sending traffic to the core network, eliminating the congestion caused by centralized firewall topologies.
Q4Question 4
Intermediate
HPE Aruba Networking CX 10000 Series with Pensando overview · List the major components in the HPE Aruba Networking CX 10000 Series with Pensando
True or False: In the HPE Aruba Networking CX 10000 Series architecture, the Pensando DPU shares the same control plane CPU and memory resources as the switch's base operating system (AOS-CX) to process stateful firewall rules.
Answer and explanation
Correct answer: B
False. The Pensando DPU operates independently from the switch's main CPU and memory. AOS-CX runs on the switch CPU and handles standard L2/L3 networking, while the Pensando DPU has its own dedicated processing cores and memory for handling stateful services and telemetry.
Q5Question 5
Intermediate
Installation and setup Installation · Explain how to install Fabric Composer using an OVA or ISO file, and provide high availability
A system administrator is preparing to deploy HPE Aruba Networking Fabric Composer (AFC) in a production data center environment. To ensure High Availability (HA) for the orchestration platform, what is the minimum required deployment configuration?
Answer and explanation
Correct answer: B
HPE Aruba Networking Fabric Composer (AFC) requires a cluster of three (3) virtual machine nodes to form a highly available control plane. This 3-node architecture ensures that a quorum is maintained even if one node fails, preventing split-brain scenarios and ensuring continuous orchestration capabilities.
Q6Question 6
Beginner
Installation and setup Installation · Explain how to bootstrap the Pensando PSM Cluster
During the initial installation of the Pensando Policy and Services Manager (PSM) cluster, an engineer has deployed the necessary virtual machines. Which critical action must be performed next to initialize the cluster and make it operational?
Answer and explanation
Correct answer: C
After the PSM virtual machines are deployed, the cluster is not automatically formed. An administrator must log into the primary node and execute the bootstrap process (typically via CLI or initial web setup) to initialize the database, establish quorum among the nodes, and finalize the cluster formation.
Register free for 6 more questions
Or unlock all 150 HPE6-A87 questions with explanations, timed mode and flashcards.
