About the Exam

This proctored written exam is part of the HPE Aruba Networking Certified Expert - Campus Access Mobility certification path. It validates the ability to design and implement complex HPE Aruba Networking wired and wireless campus solutions, including security, connectivity, performance optimization, and troubleshooting. It is intended for experienced networking professionals pursuing expert-level certification.

Exam Topics

  • Network Stack4%
  • Connectivity9%
  • Network Resiliency and virtualization6%
  • Switching10%
  • WLAN25%
  • Routing9%
  • Security11%
  • Authentication/Authorization10%
  • Troubleshooting10%
  • Performance Optimization6%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated December 3, 2025 at 2:14 AM

Topic filter
Retired questions
Question sort
Questions per page

QuestionQ1

Connectivity

You are deploying a new AOS-10 mobility gateway cluster. Because of customer requirements, the gateways must use static IP addresses and may communicate on port 443 only with URLs matching *.central.arubanetworks.com.

How can these gateways be successfully onboarded into HPE Aruba Networking Central?

Explanation

Static Activate relies on Aruba Activate for initial provisioning, and Aruba Activate uses HTTPS endpoints such as device.arubanetworks.com, which do not match the permitted *.central.arubanetworks.com domain. Full Setup supports static addressing and configuration of the ACP FQDN, so the gateway can establish its Central connection using the allowed Central domain.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Troubleshooting

You configured a tunneled SSID with a captive portal and an HPE Aruba Networking ClearPass Guest Self Registration workflow. During testing, after you launch the self-registration workflow and registration succeeds, the login action displays the following error:

Question Image

What is the best solution for resolving this error?

Explanation

A captive-portal login hostname is resolved and redirected by the captive-portal infrastructure for a client associated with the captive guest WLAN. The post-registration login action must therefore be tested while connected to that guest SSID; from another network, the virtual login hostname is not publicly resolvable and produces a server-not-found error. Certificate-chain configuration affects TLS trust, not DNS resolution.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Routing

A BGP routing table has several routes to the same destination prefix.

With reference to the table below, which route would be indicated by a > symbol?

Question Image

Explanation

BGP first prefers the highest local preference. Routes B, D, and E tie at 100; the route with no AS-path distance is preferred as the locally originated or shortest-AS-path candidate. Origin code and MED are considered only afterward, so route B is selected as the best path.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

A university operates a campus with several buildings divided into east and west wings that are L3-separated. The east wing has 1600 APs, while the west wing has 1200 APs. Each wing has one gateway cluster managed by HPE Aruba Networking Central, and each cluster contains a single 7210 mobility gateway. The gateways use DHCP relay and route every client VLAN.

A new business-critical, real-time faculty application requires users to roam within their wings, but not between wings, with no disconnections or added delay.

Which changes must the network administrator make to meet this requirement successfully, without performance degradation and in accordance with best practices?

Choose two
Explanation

Seamless roaming in a gateway deployment requires all APs in the roaming domain to tunnel to the same gateway cluster and requires the client VLANs and broadcast domains to be common across the cluster. L2 forwarding with the client VLANs permitted on the gateway uplinks preserves a client’s VLAN, IP address, and default gateway during an intra-wing roam. Adding a second 7210 to each cluster provides the clustered stateful failover required for a business-critical service; a 7210 supports up to 2,048 devices per gateway, covering both 1,600-AP and 1,200-AP wings. HPE Aruba Networking gateway deployments, AOS 10 gateway capacity planning

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Routing

Refer to the exhibits.

Question Image

An engineer applied the displayed configuration to R1 and R2. However, the routers’ OSPF adjacency never advances beyond the EXSTART/DR state, as shown below.

Question Image

Which configuration action on either router will enable R1 and R2 to advance past the EXSTART/DR state?

Explanation

OSPF database-description packet exchange requires compatible interface MTUs. The configured Layer 3 MTUs are 9100 on R1 and 9102 on R2, causing an MTU mismatch that prevents the adjacency from progressing beyond ExStart. Removing the Layer 3 MTU configuration restores the same default MTU on both interfaces.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home