HPE6-A85 practice questions
HPE Aruba Networking · HPE6-A85 · 200 questions
Original practice questions for the HPE6-A85 / Aruba Certified Campus Access Associate (ACA - Campus Access) exam, covering plan the solution, configure the solution, operate the solution, troubleshoot the solution, and optimize the solution — AOS-CX switching, VLANs, spanning tree, VSX/VSF, link aggregation, basic routing, Aruba access points and WLAN fundamentals, RF basics, Aruba Central, AOS-8/AOS-10 concepts, ClearPass/role-based access basics, NetEdit, and troubleshooting — framed on a large teaching hospital campus with wards, clinics, imaging suites, guest and patient Wi-Fi, biomedical devices, and an outpatient annex.
This course contains the use of artificial intelligence.
About the HPE6-A85 exam
- Time allowed
- 1 hour 30 minutes
- Questions
- 60
- Passing score
- 67%
- Languages
- English, Japanese, Latin American Spanish
- Format
- Proctored; no reference material permitted at the test centre; may contain unscored beta items
Schedule this exam The certification this earns
Exam details published by the vendor, checked 26 August 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Browse by Domain
Study specific topics at your own pace.
Plan the Solution · 26 questions
- A network technician at a teaching hospital receives the campus network design package before starting the wireless rollout in the new outpatient annex. The document lists building names, an overall three-tier topology, and target SSID coverage goals, but no port-by-port switch configuration, IP subnet table, or specific AP model list. Which type of design document is the technician most likely reading?
- The high-level design for a new ward building states that "each wiring closet must have redundant uplinks to the campus aggregation layer to avoid a single point of failure." When reviewing the site's low-level design, which detail should the technician expect to find that fulfills this HLD requirement?
- Before AP installation, the technician reviews a predictive coverage-plan heat map for the imaging wing. The map shows adequate projected signal everywhere except a dip directly outside the MRI suite door. What should the technician conclude from this output?
- The RF plan for a densely populated emergency department specifies 20 MHz channel width on the 5 GHz band instead of 40 MHz, even though 40 MHz would offer higher per-client throughput. What is the most likely reason the designer chose this?
- Reviewing a low-level design diagram for a new ward, the technician sees several switches connecting end-user ports and IP phones directly, uplinking to a pair of larger switches that in turn connect to the campus core. What role do the pair of larger switches perform in this design?
- The low-level design's VLAN table assigns infusion pumps and patient monitors in a ward to a dedicated VLAN, separate from the staff-data VLAN and the guest VLAN. What is the primary design intent behind this separation?
- A low-level design shows two aggregation switches configured as a VSX pair, with access switches in each ward dual-homed to both members. What does this design detail indicate about the intended failure behavior?
- The wireless design document for a high-density outpatient waiting area notes a "5 GHz-preferred" band-steering setting alongside a high AP count. What is the most likely reason the designer emphasizes 5 GHz here?
- In the outpatient annex, the coverage plan specifies APs spaced further apart with lower transmit power for hallway coverage than the same designer used for the crowded annex waiting room. Why would a designer size these two areas differently?
- The low-level design's IP addressing table assigns a separate /24 subnet to each ward floor rather than one large subnet for the whole building. What implication does this design decision have for implementation that the technician should recognize?
- One document in the design package is a predictive RF model generated in planning software before any hardware was installed; another is a post-installation walk-through report with measured signal readings from a handheld device. What distinguishes the second document from the first?
- The RF design calls for small, overlapping AP cells with reduced transmit power throughout the busy emergency department, but large cells with higher transmit power along the outdoor path connecting to the outpatient annex. What principle explains this difference in cell sizing?
- A low-level design's trunk port table lists the ward access switch uplink as carrying only the staff-data VLAN and the management VLAN, deliberately excluding the biomedical-device VLAN. What does this detail imply for a nurse-call system connected to that ward's access switch?
- A hospital's new orthopedics ward is scheduled to receive 40 Aruba access points next week, and the deployment technician wants each AP to pull an address and phone home to Aruba Central the moment it is racked and powered, with zero manual IP entry. Which prerequisite absolutely must be confirmed on the ward's network before install day?
- Before onboarding new AOS-CX switches in the hospital's biomedical engineering lab, the technician plans to enroll them with certificate-based device authentication to Aruba Central. Which prerequisite must be verified first for that certificate validation to succeed?
- A junior technician is planning the pre-implementation checklist for a new nurse-call system that will run over PoE on an access switch stack in the cardiac ward. The stack will also feed access points and desk phones on the same ports. What must the technician calculate before hardware arrives to avoid a failed rollout?
- The outpatient annex across the road is connected back to the main hospital campus by a fiber uplink that the low-level design assumes is already terminated and tested. Before the technician schedules the switch install in the annex, what should be confirmed about that uplink?
- A technician is about to onboard a stack of AOS-CX switches into the new radiology wing but realizes the switches will need to reach Aruba Central over the internet to complete zero-touch provisioning. Which of the following is the correct pre-implementation check to make?
- The hospital wants to ship 12 new access switches directly from the vendor to the maternity ward, have local staff rack and cable them with no networking expertise, and have the switches automatically pull their correct configuration once they power on and reach Aruba Central. Which planning activity makes this possible?
- Procurement bought new Aruba access points for the outpatient annex, but the technician cannot add them to the existing Aruba Central account and finish onboarding. What is the most likely planning gap that was missed before ordering hardware?
- The technician needs to replace an aging access switch that feeds nurse-call panels on a cardiac ward, and the replacement will require roughly 20 minutes of downtime on that switch. What is the correct change-control step to plan before doing the work?
- As part of planning a firmware upgrade on the access switches serving the imaging suites, the technician is asked to include a rollback plan in the change request. What should that rollback plan specifically describe?
- A technician is preparing to pre-stage 15 new access points for the pediatrics wing inside Aruba Central before they ship from the warehouse. Which piece of information about each access point is essential to gather first so the pre-staged record actually matches the physical device on arrival?
- The annex rollout will use new Wi-Fi 6 access points capable of exceeding 1 Gbps per radio, but the existing wiring closet only has older Category 5e cabling run to each AP location. What planning gap does this raise before the access points arrive?
- A technician is preparing wireless SSID profiles in Aruba Central for the new outpatient annex days before the switches and access points even arrive on site. What kind of implementation-preparation task is this?
- Before cutting over the new oncology wing's access switches, the technician assembles an information-gathering checklist covering VLAN IDs, IP addressing, uplink port assignments, and the maintenance window. Why is completing this checklist before install day important?
Configure the Solution · 64 questions
- Biomedical engineering just racked a new HPE Aruba AOS-CX switch for a new orthopedic ward, and it has not yet been assigned a management IP address. Which method lets a technician log in to configure the switch for the first time?
- A network technician is provisioning access ports for a new medical-surgical ward. Each patient-room wall jack should carry only the traffic for the ward's clinical workstation VLAN. What is the correct AOS-CX port mode for these jacks?
- An access switch on the cardiology ward has a single uplink cable to the distribution switch, which must carry traffic for the clinical VLAN, the guest Wi-Fi VLAN, and the biomedical device VLAN simultaneously. How should this uplink port be configured?
- On a trunk link between the radiology-ward access switch and the aggregation switch, frames arrive on the link without an 802.1Q tag. Which VLAN does the receiving AOS-CX switch place these untagged frames into?
- A technician is bundling two physical links between the outpatient annex aggregation switch and the core switch into a single logical interface for extra bandwidth and resiliency. Which technology accomplishes this on AOS-CX?
- A technician is forming a link aggregation group between an access switch and the aggregation switch and wants both ends to actively negotiate the bundle rather than assume it is already formed. Which LACP configuration achieves this?
- A rogue consumer switch gets plugged into a nurse-station wall jack, and its bridging behavior starts destabilizing the ward's access-layer spanning tree topology. Which AOS-CX access-port feature is designed to prevent exactly this kind of problem?
- Two access switches on the same ward are both eligible to become the spanning tree root bridge. A technician wants the more powerful aggregation-facing switch, not either access switch, to remain root. What is the most direct way to ensure this?
- An outpatient annex is being built with two AOS-CX aggregation switches configured as a VSX pair to avoid a single point of failure. In normal, healthy operation, how do the two VSX switches behave from the perspective of connected devices?
- In a VSX pair deployed at the hospital's core-aggregation layer, the two switches use a dedicated link between them to synchronize MAC/ARP tables and coordinate forwarding state. What is this link called?
- The biomedical engineering lab wants to manage two physical AOS-CX switches as a single logical device with one management IP and one configuration file, primarily to simplify day-to-day administration rather than to maximize inter-building resiliency. Which technology best fits this goal?
- The lead network engineer must choose between VSF and VSX for a new pair of access switches serving a maternity ward, where the priority is keeping both switches' management and control planes fully independent so a software fault on one switch cannot affect the other. Which choice fits, and why?
- A new wireless infusion-pump monitoring hub in the ICU draws more power than a typical IP phone. Before plugging it into an AOS-CX access port, what should the technician confirm about that port's PoE configuration?
- An access switch in the emergency department is close to its total PoE power budget. A technician needs to guarantee that nurse-call station ports keep receiving power even if adding new devices pushes the switch over budget. What AOS-CX PoE feature addresses this?
- A new pediatric wing needs devices on the clinical VLAN to communicate with devices on the guest Wi-Fi VLAN without a separate router, using the AOS-CX aggregation switch that already carries both VLANs. What should be configured on that aggregation switch to enable inter-VLAN routing?
- The outpatient annex's aggregation switch has a directly connected route to its local VLANs but needs a path to reach the hospital's main data center subnet, which is not directly connected. No dynamic routing protocol has been deployed yet. What is the simplest way to provide that reachability?
- The hospital IT team wants newly racked AOS-CX switches at a future clinic expansion site to automatically discover their configuration profile from Aruba Central as soon as they receive DHCP and internet reachability, without a technician manually logging into each one. What onboarding approach does this describe?
- During initial provisioning of a new ward's access switches, the network team wants administrative access to each switch to be isolated from the clinical and guest data traffic those switches carry. What design choice accomplishes this?
- A nurse-station wall jack needs to support both a desk phone and a PC daisy-chained through the phone, with the phone's voice traffic separated from the PC's data traffic on the same cable. What AOS-CX access-port configuration supports this?
- A newly configured LAG between an access switch and the aggregation switch is not passing any traffic. One switch has both member ports set to LACP active mode, and the other switch has both member ports administratively set to access mode with LACP disabled. What is the most likely cause of the failure?
- A VSX pair at the aggregation layer serves as the default gateway for several ward VLANs. The hospital wants both switches to share a single virtual gateway IP and MAC address per VLAN, so an end device only needs one gateway configured regardless of which physical switch actually forwards its traffic. Which VSX feature provides this?
- After deploying VLANs, trunk uplinks, and a LAG for a newly built ward, the technician wants to validate the configuration before declaring the rollout complete. Which check most directly confirms the deployment is working as intended?
- A hospital's IT team unboxes a brand-new access point for the new clinic wing and connects it to a switch port on the network with internet reachability, without ever touching its CLI. The AP is expected to reach out on its own, discover it belongs to the hospital's Aruba Central account, and pull down its configuration automatically. What onboarding mechanism makes this possible?
- Network staff are creating a new WLAN for nurse-station laptops in a newly opened ward. The design calls for that traffic to land on its own dedicated clinical VLAN rather than mixing with guest or biomedical device traffic. Which setting on the WLAN profile accomplishes this?
- The hospital's guest and patient WLAN needs all of its traffic sent back to a central point where it can be firewalled and monitored before reaching the internet, rather than exiting directly at each access point. Which wireless forwarding mode should this WLAN be configured to use?
- A wireless design document for the new imaging wing specifies that APs near the MRI and CT suites must use only non-overlapping 5GHz channels from a defined list, avoiding auto-channel selection, because of known RF sensitivity around the imaging equipment. When configuring those APs, what is the correct way to honor this requirement?
- A network engineer wants a new SSID for tablet carts to broadcast only from the access points inside the new pediatric clinic wing, and not from any other AP on the hospital campus. Rather than configuring each AP individually, what is the most efficient way to scope this?
- The hospital wants visiting family members to get free internet access from the lobby and waiting areas, but wants those visitors to first agree to an acceptable-use policy before their device is allowed online. Which wireless feature is designed for exactly this workflow?
- A large hospital network runs its access points as Central-managed rather than tied to an on-site hardware controller. When network staff need to update a WLAN's settings for a whole clinic building at once, where is that change made?
- Biomedical engineering wants the WLAN used by networked infusion pumps to not appear in a casual Wi-Fi scan on a visitor's phone, to reduce the chance of someone accidentally trying to join it. Which WLAN setting addresses this specific concern?
- During AP provisioning for the new clinic wing, the network team wants each AP to receive its management IP address, subnet mask, and gateway automatically rather than typing these in on every device. Which provisioning approach fits this need?
- The RF design for the imaging suite calls for a dedicated WLAN that only operates in 5GHz, avoiding the more congested and interference-prone 2.4GHz band that several biomedical devices already use nearby. How should this WLAN be configured to meet that requirement?
- A hospital's wireless team needs to roll out an identical RF power and channel-width setting across all forty access points in the main tower in one change, without editing each AP separately. Which existing construct makes this a single action instead of forty?
- The outpatient annex across the road connects back to the main hospital campus over a modest point-to-point wireless link. The design wants staff clinical traffic tunneled back to the main campus for policy enforcement, while general internet-bound guest traffic at the annex exits locally to avoid straining that link. Which forwarding approach matches this?
- A hospital wants patient and visitor devices on the guest WLAN kept completely separate at the network layer from the WLAN used by clinical staff laptops, even though both networks are broadcast from the very same access points. What WLAN configuration choice enforces this separation?
- An IT technician plugs in a factory-default AP for the new surgical wing, but after several minutes it still has not appeared in Aruba Central's device list, even though the AP has a link light and appears to have network connectivity. What is the most likely explanation, assuming the AP was already added to the hospital's Central inventory?
- A small break-room WLAN for staff on the new ward is being set up quickly, without integrating it into the hospital's central authentication system yet. The requirement for now is simply that a single shared secret controls who can join. Which WLAN key setting fits this interim need?
- A wireless survey of the busy nurse-station area, dense with access points close together, shows unusually high co-channel interference degrading performance. The design calls for reducing the RF footprint per AP without shutting any radios off. Which radio setting adjustment addresses this?
- An AP that was originally provisioned for the general medical ward is physically relocated to the new pediatric wing, and its AP group membership is changed to match. What is the expected effect of that group change on the AP's wireless behavior?
- Hospital administration wants visitors on the guest WLAN to be able to reach the hospital's own patient-information website even before they accept the captive portal's terms, while everything else stays blocked until acceptance. Which captive portal concept enables this exception?
- At the outpatient annex, most client traffic (browsing local file shares, printing to a local printer) stays within the annex itself, and only a small portion needs to reach the main hospital campus. The design wants that local traffic switched right at the AP instead of adding unnecessary load to the point-to-point link back to campus. Which forwarding mode best fits the majority of this traffic?
- After validating a new guest WLAN's captive portal on a single test AP, the network team is ready to roll it out to every AP group across the hospital campus that should offer guest access. Using the Central-managed model, what is the correct way to deploy this at scale?
- The guest WLAN in the hospital's main lobby is seeing a handful of visitors monopolizing available bandwidth with large downloads, slowing the network for other waiting-room guests. The design wants a fair, per-client cap on guest bandwidth usage. Which WLAN-level setting addresses this?
- A hospital wants staff laptops joining the clinical Wi-Fi to prove their identity with domain credentials before they get any network access, rather than just knowing a shared passphrase. Which authentication approach is designed for this kind of per-user identity check at association time?
- An infusion pump on the med-surg ward has no way to run an 802.1X supplicant, but it still needs to authenticate onto the wired network port it's plugged into. Which authentication method is intended for exactly this kind of client?
- Instead of storing every staff member's credentials locally on each switch and controller across the hospital campus, the network team wants one central system that all access devices check against for both wired and wireless logins. What role does that central system play?
- After a nurse successfully authenticates on the hospital's staff SSID, the access point needs to decide which role to place her session in so the right VLAN and firewall policy apply. Where does that role decision typically come from?
- The hospital's radiology wing has a mix of staff workstations that can run 802.1X and older imaging viewers that cannot. The deployment technician wants 802.1X attempted first on every port, with devices that don't respond falling back to a hardware-address check instead of being denied outright. What is this fallback behavior called?
- Biomedical devices roam between wards on the hospital campus, but the security team wants their traffic to always be tunneled back to the same central policy enforcement point no matter which access point or wiring closet they associate through, rather than being switched locally at each edge. Which concept describes this approach?
- After pushing the access-layer configuration for a newly built pediatrics ward, the technician wants to confirm that a staff nurse's laptop actually lands in the correct VLAN once it authenticates, rather than assuming the configuration behaved as intended. What is the most direct way to confirm this?
- A single hospital SSID is used by both staff and visiting family members, but each group needs to reach very different resources once connected: staff need clinical systems, and visitors need only internet access. Which approach lets one SSID serve both groups with different network access?
- During a scheduled maintenance window, the hospital's RADIUS server briefly becomes unreachable, and staff laptops attempting 802.1X authentication start failing to connect to the clinical SSID. What does this outage most directly demonstrate about the deployment's authentication design?
- A biomedical device on the new oncology ward authenticates successfully and receives an IP address in its assigned VLAN, but the technician still hasn't finished validating the deployment. What additional check is needed to confirm the deployment is actually working as intended?
- A security-minded technician points out that MAC authentication, used for the ward's older nurse-call panels, verifies a hardware address rather than a real credential. What is the practical risk this introduces compared to 802.1X?
- A new technician is learning 802.1X and hears the terms supplicant, authenticator, and authentication server for the first time while shadowing a rollout on the surgical wing. Which pairing correctly matches each role to what it does?
- A newly opened cardiology ward has three kinds of clients landing on the same access ports: staff laptops, a vital-signs monitor, and a printer. The design calls for each to receive a different role automatically, without a technician manually assigning anything port by port. What makes this automatic differentiation possible?
- A staff member on the newly onboarded transplant ward can associate to the clinical SSID and authenticates successfully, but reports being unable to reach the electronic health records system that every other staff member on that SSID can reach. Association and authentication both look fine in the logs. What should the technician check next?
- The network team is frustrated that every ward's access switches need the exact same set of VLANs configured before a roaming infusion pump can keep the same policy as it moves from cardiology to oncology. Which approach removes the need to replicate that VLAN everywhere the device might roam?
- A network engineer wants to stop a rogue or misconfigured DHCP server plugged into an access port from handing out incorrect IP addresses to nurse-station devices on a ward switch. Which switch feature should be enabled to block DHCP server responses coming from untrusted ports?
- When RADIUS accepts a staff member's login on the maternity ward's SSID, it can include additional information alongside the plain accept, such as which role or VLAN that session should receive. What is this additional information called?
- After onboarding a new ward's nurse-call system, which uses MAC authentication because it can't run a supplicant, the technician wants to confirm the deployment actually worked. What should be verified specifically for this device?
- Family members visiting a patient on the surgical ward connect to the hospital's guest Wi-Fi and are presented with a login page before they can browse the internet, but they should never be able to reach the clinical systems staff use on a different SSID. What ensures this separation for the guest connection?
- A hospital's network security team wants to control not only which administrators can log in to the core switches, but also which specific configuration commands each administrator is permitted to run once logged in. Which AAA protocol is built to authorize individual commands like this?
- Before signing off on a newly built neurology ward and handing it over to clinical staff, the deployment technician wants a complete checklist confirming the access-layer rollout actually works end to end. Which sequence best captures a full post-deployment validation?
Operate the Solution · 44 questions
- A NOC Level 1 technician opens the Aruba Central dashboard each morning for the hospital's main tower and glances at the client and device health tiles before doing anything else. What is the main value of that daily glance, before drilling into any single device?
- On the weekly report for the biomedical engineering team, an access point in the infusion-pump storage room shows a client health score that has been steadily dropping for three days without a single client complaint being logged. How should the NOC technician interpret that trend for the report?
- A nurse-station switch in the cardiology ward generates an alert overnight for a single port flapping up and down every few minutes, while a separate alert fires for the switch's overall CPU utilization briefly touching 60 percent during a backup job. Which alert deserves priority attention from the technician on the morning shift?
- Ahead of opening the new outpatient annex, the facilities team asks for a coverage report showing whether planned Wi-Fi signal strength meets the target in every exam room. Which monitoring output best supports that specific request?
- A technician reviewing the monthly utilization report for the radiology wing switches notices one uplink port consistently running near 90 percent of its capacity during business hours, while every other port on the same switch sits well below 30 percent. What does this specific reporting pattern most clearly indicate?
- A technician compiling the weekly report needs to show which switch ports across the hospital logged the most interface errors in the past seven days. Which data source is built specifically to answer that kind of question?
- A biomedical engineering manager asks the NOC technician why an infusion pump briefly dropped off the network three times last Tuesday, but no one noticed at the time. Which monitoring practice would have made that history easy to reconstruct after the fact?
- While reviewing overnight syslog entries for a nurse-station switch, a technician sees a message logged at severity "warning" for a power supply reading outside its normal range, alongside dozens of routine "informational" messages about interfaces coming up and down during a planned maintenance window. How should the technician read these two message types for the report?
- The biomedical engineering team's weekly report needs a chart showing how many wireless clients were associated to the imaging suite's access points at each hour over the past seven days. What is this type of report best described as?
- A technician configuring a switch to send SNMP data to the hospital's monitoring platform is asked, at a conceptual level, what SNMP actually does in this arrangement. Which description is accurate?
- A weekly report needs to show whether the guest Wi-Fi network in the hospital's main lobby is approaching its licensed client capacity. Which reporting metric most directly answers that question?
- A nurse-station switch dashboard shows a client health indicator labeled with a poor rating for one connected workstation, alongside a normal rating for every other client on the same port group. Before writing anything into the report, what should the technician confirm the indicator is actually measuring?
- The monthly report for hospital leadership needs to state, in one line, how reliably the wireless network was available across the whole campus over the past 30 days. Which figure belongs in that line?
- A technician sets a custom alert threshold on the imaging suite's access points so that an alert fires only when client count exceeds double the normal daily peak. Why would a technician deliberately set the threshold that high rather than at the normal peak itself?
- A technician is asked to produce a report showing, for each ward's access switches, how much of the total switch capacity is currently being consumed by connected devices versus how much headroom remains before the next planned expansion. What kind of report is being requested?
- A technician wants the monitoring platform to notify the on-call team immediately if a nurse-station switch stops responding, rather than waiting for someone to notice it missing from tomorrow's report. What monitoring concept is the technician relying on?
- A dashboard widget for the pediatric ward shows an access point's radio utilization at 85 percent alongside a client count that is actually lower than the ward's typical average. What does this combination most likely indicate about what is being reported?
- A technician wants to document, for the weekly report, exactly when a nurse-station switch port last transitioned from up to down and back up, without changing anything on the switch. Where would that specific historical detail most reliably be found?
- A technician is asked to add a new metric to the weekly wireless report specifically to help track whether patients and visitors are having a good experience on the guest network, beyond just knowing whether access points are online. Which additional metric best serves that specific goal?
- A technician notices that a nurse-station switch has been sending syslog messages to the central logging server all week, but the messages simply stopped appearing as of this morning even though the switch still shows as reachable on the dashboard. Which conclusion best fits that specific combination of observations?
- A monthly reporting summary needs to compare wireless coverage in the new outpatient annex against the emergency department's existing coverage, both measured the same way. Why does using the same measurement method in both locations matter for this specific report?
- A technician is reviewing an alert history report and notices the same access point in the surgical wing generated the identical low-signal alert nine times over the past two weeks, each time clearing on its own within minutes. What does this recurring pattern suggest is the right way to treat the alert going forward?
- Before staging a new AOS-CX firmware image on the access switches that serve the third-floor nurse stations, a technician wants to be sure the upgrade won't break anything already running. What should the technician check first?
- A technician downloads an approved AOS-CX image to a nurse-station switch's inactive partition but does not activate it yet. What is the main benefit of staging the image this way before the maintenance window?
- Two AOS-CX switches form a VSX pair serving a hospital ward's access layer, and both need the new firmware. What upgrade order keeps the ward connected throughout the maintenance window?
- After successfully upgrading firmware on a campus access switch, why does the technician leave the previous firmware image intact on the other boot partition instead of deleting it right away?
- Just before starting a firmware upgrade on a nurse-station switch, a technician also saves a full copy of its running configuration to a backup server. What risk does this specific step protect against?
- A biomedical engineering team asks IT how confident they should be that a campus switch's configuration could be recovered quickly if that switch failed tomorrow. What operational practice actually answers that question?
- A technician makes a VLAN change on a ward access switch, and afterward several nurse-station devices lose network connectivity. What is the fastest, safest way to return the switch to its previous working state?
- After upgrading a ward access switch to a new firmware version, several nurse-station devices report intermittent drops that never happened before the upgrade, and the technician confirms the issue tracks with the new firmware itself rather than any configuration change. What is the fastest, safest way to return the switch to stable behavior?
- A new imaging suite is being added to an existing wing, and its devices need a VLAN that doesn't currently exist on the access switch trunk. What is the safest order of operations for adding it during a low-impact maintenance window?
- IT needs to change the passphrase on a WLAN SSID that biomedical devices like infusion pumps and patient monitors use to connect. What approach minimizes disruption to those devices?
- A technician is about to change the spanning-tree port priority on an access switch uplink serving a ward, as part of a small ongoing maintenance task. What should happen immediately after applying the change, before considering the task finished?
- A technician needs to move a single access port on a ward switch from one VLAN to another to support a relocated workstation, without affecting the other active ports on that switch. What is the correct scope for this change?
- After access switches are added for a newly opened ward wing, what documentation update ensures the network diagram stays accurate for future troubleshooting?
- A change-control policy requires every network modification to be logged. What information does a useful change-log entry need to include beyond just the date?
- Shortly after a firmware upgrade, an access point on a patient floor loses its connection to the WLAN controller and won't reassociate despite repeated retries. What is the appropriate next step for the technician to take on that AP?
- Before obtaining approval to touch a production switch that serves an active hospital ward, what does good change-control practice require the technician to have ready?
- A planned configuration change will briefly interrupt network access on a wing that includes a biomedical device charging station. Who else, besides IT, should be informed before the change proceeds?
- A change request for a routine access-switch configuration update is missing one required element before it can be approved: a plan for what to do if the change causes a problem. What is this missing element called?
- A network diagram and an as-built record both document the campus, but they serve different purposes. What belongs specifically in the as-built record for a ward's access switches that typically isn't the diagram's job to show?
- Before pushing a new firmware version to every access point across the hospital campus through Aruba Central, what staged approach reduces the risk of a widespread problem?
- Which sequence correctly reflects the recommended order for updating firmware on a campus access switch, from start to finish?
- A routine, non-urgent configuration change on a hospital ward switch turns into an emergency fix after hours because a device suddenly loses connectivity and the technician has to act immediately, without time for the normal approval process. What should happen once service is restored?
Troubleshoot the Solution · 50 questions
- A junior network engineer at a large teaching hospital is called to a single dark nurse-station wall port. Before touching any configuration, which step of a structured troubleshooting methodology should come first?
- After defining the problem and forming a working theory for why a lab MRI-suite switch stack lost half its ports, a technician at the hospital is ready to move forward. What should happen immediately after the theory of probable cause is established?
- A technician has tested and confirmed a theory that a failing uplink in the outpatient annex is caused by a bad fiber patch cord. What is the next correct step in the troubleshooting methodology before the fix is actually applied?
- A resolved trouble ticket for a repeated port flap on a cardiology ward access switch is about to be closed. Per structured troubleshooting methodology, what must still happen before closure?
- A help-desk call reports that a single infusion pump on a medical-surgical ward cannot join the network, while every other device on the same wall switch and the same wireless SSID is working fine. How should the technician scope this issue before digging further?
- Multiple staff across an entire hospital wing report they cannot join the guest Wi-Fi, while the clinical staff SSID on the same access points continues to work normally. What does this scoping detail suggest the technician should investigate first?
- A technician needs to decide whether a reported Wi-Fi slowness complaint in a hospital's imaging department is a single-client problem or something affecting the whole coverage area. Which action best establishes that scope?
- A link between two wiring-closet switches in a clinic wing passes traffic, but throughput crawls and several devices report intermittent retransmissions, while every other link in the building performs normally. Interface statistics on that one link show a steadily climbing count of late collisions. What does this specific counter point to as the underlying cause?
- A newly cabled infusion pump outlet in a hospital ward shows a persistently down link light, and a technician confirms the same patch cord tests fine at the workbench. What is the most likely physical-layer cause to check next?
- A biomedical engineer reports that three newly installed nurse-call panels on one hospital floor power on briefly, then reboot in a loop, all connected to the same PoE switch. What is the most likely physical-layer explanation?
- A wall-mounted vitals monitor at a hospital nurse station links up but never receives PoE power, even though the same cable and port worked for a laptop with an inline injector the day before. What physical-layer behavior should the technician suspect first?
- An uplink between a hospital ward's access switch and the building's distribution switch will not come up, and the technician notices the transceiver at one end is rated for single-mode fiber while the transceiver at the other end is rated for multi-mode fiber. What is the most likely cause?
- A hospital IT technician notices an unusually high count of CRC errors on the interface counters for a copper uplink connecting two wiring closets, even though the link stays up. What does this most likely indicate?
- A technician troubleshooting a slow file transfer to a radiology workstation notices the interface shows a high number of late collisions and the port is running at half duplex, while the connected switch port on the other end is configured for full duplex. What should the technician conclude?
- A technician cannot get link on a freshly punched-down jack for a new clinic exam room, but a cable tester shows continuity on all eight conductors. Tracing the run at the patch panel reveals the pairs were terminated in a different pin order than the standard used at the wall plate. What is the most likely explanation for the failed link?
- A newly onboarded workstation in a hospital billing office can reach devices on its local subnet but cannot reach anything beyond it, and the technician confirms the switch port is assigned to VLAN 20 while the router's corresponding subinterface is configured for VLAN 30. What is the most accurate description of this fault?
- After a trunk link is reconfigured between a hospital ward's access switch and its distribution switch, staff report that devices on VLAN 40 can reach the rest of the network but devices on VLAN 50 cannot, even though both VLANs are configured and active on both switches. What should the technician check on the trunk?
- Two switches connected by a trunk link in a hospital's east wing begin dropping intermittent untagged traffic, and the technician discovers one switch has its trunk's native VLAN set to VLAN 1 while the other has it set to VLAN 99. What kind of fault is this?
- A hospital's IT team notices that a redundant link between two wiring-closet switches is sitting in a blocking-like state, and network monitoring shows an unusually high count of topology change notifications over the past hour. What is the most likely explanation?
- A hospital ward suddenly experiences widespread slowness, and the technician observes an extremely high volume of broadcast traffic along with rapidly incrementing MAC address table changes on multiple switches at once. What condition does this pattern most strongly suggest?
- A newly configured link aggregation group between a hospital's core switch and a ward's distribution switch fails to bundle, with only one of the two intended member links passing traffic. The technician finds one switch configured for active LACP while the other switch has the matching ports configured as a static, non-negotiated aggregate. What is the most likely cause?
- A four-member link aggregation group connecting a hospital's biomedical engineering lab to the core has been running normally, but staff now report noticeably slower transfers, and the technician finds that one of the four member interfaces has gone down. What is the most accurate description of the resulting condition?
- A technician reviewing a hospital ward's access switch notices the same MAC address rapidly appearing and disappearing from different ports in the MAC address table within seconds of each other. What does this behavior most likely indicate?
- A technician troubleshooting intermittent unicast flooding on a hospital ward's switch notices that a workstation's MAC address keeps disappearing from the switch's MAC address table between periods of activity, forcing the switch to flood its traffic to every port on the VLAN. What is the most likely explanation?
- A wireless access point mounted in a new hospital clinic wing associates clients successfully, but every client that connects to the staff SSID ends up unable to reach any campus resources, while the same AP's guest SSID works normally. The technician confirms the AP's wired uplink port on the switch has only the guest VLAN in its allowed-VLAN list. What is the fault?
- A new medical-surgical ward opens with 40 workstations on VLAN 120. Within the first hour, several new PCs fail to obtain an IP address while PCs that were already powered on before the rollout keep working fine. What is the most likely cause?
- Staff workstations on the oncology ward VLAN can reach printers and file shares on the same VLAN, but none of them can reach the pharmacy server on a different subnet or browse the internet. What should you check first?
- A nurse reports that a workstation cannot open the hospital's intranet page by typing its hostname, but pinging the same server's IP address works without any packet loss. What does this indicate?
- After a fiber link is brought up to the new outpatient annex across the road, staff at the annex can reach devices on their own local subnet but cannot reach any server on the main hospital campus. Pinging the annex's own default gateway succeeds. What is the most likely gap?
- Nurses on a med-surg ward can ping the electronic health records (EHR) application server without any loss, but the EHR client software itself times out and never loads a patient chart. Other applications on the same server, using different ports, work normally. What should you investigate first?
- A newly added VLAN for nurse-call system controllers sits on a switch several hops from the DHCP server, which lives on the core VLAN. None of the controllers receive an IP address, even though the VLAN and its interface are both configured and up. What is most likely missing?
- A radiology workstation can send traffic to a research server on a partner network, confirmed by a packet capture at the server showing the requests arriving, but the workstation never receives any response and the connection eventually times out. What kind of problem does this describe?
- Staff in the radiology suite consistently report no Wi-Fi signal in one specific room used for MRI scans, while adjacent rooms show strong coverage from the same AP. What is the most likely explanation?
- Users in a busy nurses' station report slow and unreliable Wi-Fi even though signal strength readings show strong coverage from two nearby access points. A site survey shows both APs are set to the same 20 MHz channel. What is the most likely cause of the slowness?
- A charge nurse's laptop stays connected to the AP near the elevator lobby with a very weak signal even after she has walked well into the ICU, passing directly under an AP with a much stronger signal. What wireless behavior does this describe?
- Physicians using voice-over-Wi-Fi handsets frequently have their calls drop while walking the covered walkway between the main hospital building and the outpatient annex, even though signal strength stays above the minimum needed at every point along the walk. What is the most likely cause?
- A visitor's laptop successfully associates to the hospital's guest SSID and shows a strong signal, but it cannot load any web page, including the guest Wi-Fi login portal. Other visitors nearby using the same SSID are browsing normally. What should you check first?
- Starting at 8 a.m., every workstation across the hospital campus attempting 802.1X authentication on the wired network fails and falls back to no network access, while devices already authenticated before 8 a.m. remain connected normally. What is the most likely cause?
- A biomedical infusion pump is swapped for a replacement unit and plugged into the same wall jack that worked fine for the old pump, but the new pump gets no network connectivity at all and the switch port's link light stays off. Other ports on the same switch are unaffected. What is the most likely explanation?
- A physician's tablet, previously able to authenticate seamlessly to the clinical Wi-Fi network using certificate-based authentication, suddenly begins failing every connection attempt with an authentication error after IT rotates the network's authentication certificates. What is the most likely explanation, at a conceptual level?
- After correcting a VLAN mismatch that was preventing a newly deployed clinic wing's workstations from reaching the pharmacy server, what is the best way to validate that the fix actually resolved the issue before closing the ticket?
- Visitors in the hospital lobby can associate to the guest Wi-Fi SSID and their devices show they received a valid IP address, but the captive portal page never appears in their browser no matter what website they try to load. What is the most likely cause?
- An infusion pump on its dedicated biomedical VLAN cannot reach the nurse-call integration server, which lives on a separate VLAN, even though both devices show correct IP addressing and both VLANs route successfully to other destinations. What should be checked next?
- During peak visiting hours, dozens of visitor devices connect to the guest SSID in the main waiting room, and users begin reporting slow web browsing even though the access point shows strong signal to every connected client. What is the most likely explanation?
- After enlarging the DHCP scope for a ward VLAN that had run out of addresses, what is the best way to validate that the fix has actually resolved the exhaustion issue?
- Devices connecting to wired ports in the biomedical engineering lab are failing 802.1X authentication intermittently, roughly once every few minutes, while devices in other parts of the hospital authenticate without issue during the same window. What should be investigated?
- A patient monitoring device on a med-surg ward authenticates and is dynamically placed on the general guest VLAN instead of the clinical device VLAN, leaving it unable to reach the electronic health records server it needs to report vitals to. Other clinical devices in the same ward correctly land on the clinical VLAN. What is the most likely explanation?
- A large diagnostic imaging file transfer from a workstation to the PACS server hangs partway through and eventually times out, while a ping to the same server with default-sized packets succeeds with no loss. Smaller file transfers to the same server complete without issue. What does this pattern most strongly suggest?
- After adding a supplemental access point inside the MRI suite to resolve a coverage dead zone, what is the most effective way to validate that the fix actually restored usable Wi-Fi coverage in that room?
- After identifying and correcting a missing DHCP relay address as the cause of nurse-call controllers failing to get IP addresses, what is the last step that should be completed before considering the issue fully resolved?
Optimize the Solution · 16 questions
- A hospital's network team plans to open a new outpatient annex in three months and wants to tune the existing main campus WLAN for better performance beforehand. Before changing any RF or QoS settings, the team spends a week capturing coverage, throughput, and roaming data across the current wards. Why is capturing this data before making any changes the right first step?
- While baselining a medical-surgical ward's WLAN before an optimization pass, a technician records signal strength at fixed points, but does not capture retransmission rates, roaming times between APs, or channel utilization. A colleague reviewing the plan flags this as incomplete. Why is signal strength alone an insufficient baseline for judging WLAN performance?
- After tuning transmit power and enabling band steering in a hospital's imaging suite corridor, the network team pulls a new coverage and roaming report and lays it side by side with the pre-change baseline. Roaming time between APs has dropped and 5 GHz client association has increased, but overall coverage area at the weakest points is roughly unchanged. What should the team conclude from this comparison?
- In a hospital lobby with mixed dual-band and older single-band devices, the wireless team enables band steering to encourage capable clients onto the 5 GHz band. A staff member later asks why some older handheld scanners still connect on 2.4 GHz even with the feature turned on. What is the best explanation?
- A wireless team considers disabling the lowest 802.11 data rates (such as 1 and 2 Mbps) on APs serving a large hospital atrium where many devices roam constantly. What is the main trade-off they are accepting by doing this?
- A busy nursing station area has a mix of newer 802.11ax laptops and older 802.11n tablets sharing the same AP. Staff notice that when the older tablets are active, the newer laptops feel noticeably slower even though signal strength is good for both. Enabling an airtime fairness feature on the AP is intended to address which specific problem?
- During optimization of a clinic wing with APs spaced closely together to support high device density, the team notices that many neighboring APs are assigned the same 5 GHz channel. Devices report frequent contention and slower-than-expected throughput even though signal strength is strong everywhere. What is the most likely cause, and the correct optimization response?
- To support a high density of biomedical devices in a small clinic wing, the wireless team decides to reduce transmit power on several APs rather than leave them at maximum. What is the primary optimization goal of intentionally shrinking each AP's coverage cell in this way?
- A clinic wing was deployed with unusually high AP density to handle a large number of biomedical devices, but staff report that phones and tablets frequently re-associate to a new AP even while standing still in one exam room. Reviewing the RF settings, the team finds transmit power set very low and cell sizes very small in this area. What optimization adjustment best addresses the sticky, over-frequent roaming without abandoning the high-density design?
- On a medical-surgical ward, wireless connectivity works everywhere and no outages are reported, but nurses pushing workstations-on-wheels down the hallway notice a brief pause each time their device switches access points. The network already has appropriate channel and power settings. Which optimization best addresses this specific complaint?
- A hospital's nurse-call system and Wi-Fi handset traffic for care staff share the same wired access-layer switches as general workstation traffic. During optimization, the team wants to make sure nurse-call and voice traffic get consistent priority during busy periods even though nothing is currently failing. What is the correct best-practice approach?
- A wiring closet on a busy hospital floor has several access switches uplinked to the distribution switch over a single gigabit link each, and the team observes that the uplink is regularly the busiest point in the path during peak hours, even though individual access ports are lightly used. What is the appropriate LAN optimization to relieve this specific bottleneck?
- An access switch trunk uplink in an older hospital wing carries every VLAN configured anywhere on the campus, even though the switch only has devices belonging to two of those VLANs connected to it. During LAN optimization, the team prunes the trunk to allow only the VLANs actually needed on that switch. What is the main benefit of this change?
- A hospital wing broadcasts six separate SSIDs from every AP — one each for staff, guest, biomedical devices, nurse-call handsets, contractors, and a legacy testing network that is rarely used anymore. During optimization, the team proposes retiring the unused testing SSID and consolidating some others. What is the main WLAN benefit of reducing the number of SSIDs broadcast per AP?
- After completing a round of WLAN optimization in a hospital ward, a technician wants to prove the changes were worthwhile before reporting results to the network manager. The technician has both the original baseline and new post-change measurements for coverage, retransmission rate, and average roaming time. Which comparison approach best demonstrates whether the optimization actually helped?
- A hospital's WLAN carries VoIP calls for on-call physicians alongside general web browsing on the same SSID, and staff report choppy, dropped-sounding calls specifically during peak browsing hours. The team wants voice traffic to get priority over bulk web traffic on that shared airtime. What is the correct approach?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by the exam vendor.