All HPE exams

Free HPE6-A85 practice test: 30 questions with answers

30 original questions for HPE Network Campus Access Associate Exam, drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.

Free questions
30
Full bank
112 questions
Real exam
60 questions, 90 min
Passing score
67%

HPE6-A85 exam guide: topics, cost and format

All 30 HPE6-A85 questions with answers

The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.

Configure the Solution (6 questions)

  1. Question 1

    A new AOS-CX switch will be installed at a branch office and powered on for the first time. The team wants it to appear in Aruba Central without anyone logging in to its console. Which step must be completed beforehand?

    1. AAdd the switch serial number and MAC address to the cloud management account and assign a subscription to it
    2. BInstall a third-party network monitoring agent on a laptop connected to the switch
    3. CCopy the running configuration from a similar switch in another office onto a USB drive and load it locally
    4. DManually assign a static IP address on every port so the switch can reach the internet
    Show answer and explanation
    Correct answer: A

    Cloud-managed onboarding requires the device to be added to the customer's cloud management account (HPE GreenLake workspace / Aruba Central) and to have a subscription assigned, so it can be discovered and managed after it connects. Static port addressing, a laptop agent, and a copied local configuration do not bind the switch to the account.

  2. Question 2

    In Aruba Central, what is the main advantage of assigning devices to a group?

    1. ASettings defined for the group are applied consistently to every device assigned to it
    2. BThe group blocks configuration changes until the vendor approves each device individually
    3. CDevices in the group receive new licenses automatically each billing period
    4. DGroup membership replaces the need to onboard each device to the Central account before it can be managed
    Show answer and explanation
    Correct answer: A

    Central groups let administrators apply one set of configuration to all member devices, which keeps sites consistent and simplifies changes. Licensing, vendor approval gates, and onboarding are separate from group-based configuration, so the other options are wrong.

  3. Question 3

    An engineer is deploying a campus WLAN with separate SSIDs for staff, guests, and IoT devices. Staff devices authenticate with 802.1X against ClearPass. Some IoT printers cannot run a supplicant. What should the engineer configure so those printers can gain network access?

    1. AMAC authentication bypass, so that the printer's MAC address is checked against ClearPass
    2. BA guest role for the printers, giving them internet-only access with no authentication step at all
    3. CNo authentication on the IoT SSID, with a firewall rule being the only control on the printers
    4. DThe staff user certificate installed on each printer so that it can perform EAP-TLS with ClearPass
    Show answer and explanation
    Correct answer: A

    MAC authentication bypass is the standard method for devices that cannot run 802.1X, because the MAC address is sent to the policy server for a decision. Guest access without authentication, open access with only a firewall rule, and copying a user certificate onto printers are not valid designs.

  4. Question 4

    Which two checks best confirm that a newly deployed site is ready for users? (Choose two.)

    1. AConfirm the site survey report has been archived in the project folder
    2. BConfirm that each switch and access point shows as online and healthy in the management platform
    3. CConfirm the hardware purchase order has been closed in the finance system
    4. DTest that a client joining the staff SSID receives the expected VLAN and IP address
    5. EConfirm that spare patch cables are stored in each wiring closet
    Show answer and explanation
    Correct answer: B, D

    Checking device health in the management platform and confirming that a real client gets the expected VLAN and address proves the site works for users. Font choices, public social accounts, and cable counts do not show whether the network is ready.

  5. Question 5

    A switch is shipped to a remote site with no saved configuration. Which capability lets it obtain its settings automatically after it is powered on and connected to the network?

    1. APort mirroring, which copies traffic from one port to a port with a monitoring tool attached
    2. BZero Touch Provisioning, which fetches settings from a provisioning source over the network
    3. CSpanning Tree Protocol, which blocks redundant paths to prevent forwarding loops
    4. DLink aggregation, which bundles several physical ports into one logical trunk for bandwidth and redundancy
    Show answer and explanation
    Correct answer: B

    Zero Touch Provisioning lets a switch with no local configuration download its settings from a provisioning service over the network after power-up. Port mirroring, Spanning Tree, and link aggregation are useful features but do not provide automatic configuration on first boot.

  6. Question 6

    A branch core needs two switches that operate as one redundant pair, with both active and forwarding traffic. Which technology should the team deploy?

    1. ASpanning Tree with root guard, which keeps one uplink in standby to avoid loops
    2. BA single larger switch with a redundant power supply, so the core keeps running after one power unit fails
    3. CVSX, which pairs two AOS-CX switches into an active-active redundant system
    4. DPort mirroring to a packet capture appliance for each switch in the core
    Show answer and explanation
    Correct answer: C

    VSX, the Virtual Switching Extension, joins two AOS-CX switches so both can forward traffic while providing redundancy. Spanning Tree keeps one path blocked, a single switch with a redundant power supply protects only against power-supply failure, and port mirroring is a monitoring feature rather than a redundancy design.

Troubleshoot the Solution (6 questions)

  1. Question 7

    Several users on the third floor report slow Wi-Fi, but users on the other floors are fine. What is the best first step to determine the scope of the problem?

    1. ACompare the third floor's access points, client counts, and health with those on the other floors
    2. BReplace the core switch, because the problem is probably a hardware failure that affects every floor
    3. CReboot every access point in the building at once so that all users reconnect to the network
    4. DAsk users to clear their browser cache and restart their email clients to rule out local problems on their laptops
    Show answer and explanation
    Correct answer: A

    Scoping compares the affected group with the unaffected floors to find what differs, which points to the likely cause. Replacing the core, rebooting every access point, or checking laptop wallpaper skips this step and risks an outage without evidence.

  2. Question 8

    A structured troubleshooting process is under way for a reported wired connectivity fault. Which action should come first?

    1. AApply the most recent firmware to the affected devices to see whether the symptom disappears without analysis
    2. BChange several settings at once so that the fix is found more quickly
    3. CDefine the problem clearly, including what changed recently and which users are affected
    4. DTell the user that the issue is resolved before any evidence has been gathered
    Show answer and explanation
    Correct answer: C

    A structured method starts with a clear problem definition, including symptoms, timing, recent changes, and affected users, before any test is made. Applying firmware blindly, changing several settings at once, or closing the ticket early breaks the method and hides the root cause.

  3. Question 9

    A user's port on an access switch flaps several times a day. The interface counters show a steadily rising number of CRC and input errors, and the link reconnects after each short drop. Which fault should the engineer suspect first?

    1. AA VLAN assigned to the port that places the user in the wrong broadcast domain
    2. BA damaged cable, patch cord, or connector somewhere along the physical path to that port
    3. CAn incorrect default gateway configured on the workstation attached to that port
    4. DA DNS server that is not answering name queries for the user's workstation in the building
    Show answer and explanation
    Correct answer: B

    Rising CRC and input errors together with link flaps point to the physical path, such as a damaged cable, patch cord, or connector. VLAN, gateway, and DNS problems produce logical symptoms and do not normally create error counters on the link.

  4. Question 10

    Clients in one VLAN can reach each other on the same switch, but clients on the other switch in that VLAN cannot be reached. Other VLANs work across the same trunk. What is the most likely cause?

    1. AThe laptops are configured with the wrong DNS server, so they cannot resolve the names of their peers
    2. BThe VLAN is missing from the allowed VLAN list on one side of the trunk, so its frames are dropped there
    3. CThe browser cache on the clients holds an old session, which blocks access to the peers in that VLAN
    4. DThe application server was recently upgraded, so its certificate no longer matches what the clients expect
    Show answer and explanation
    Correct answer: B

    When one VLAN is missing from the allowed list on a trunk, only that VLAN's frames are dropped across the link while other VLANs keep working. DNS, browser cache, and certificate problems are higher-layer issues that cannot explain a Layer 2 path failing for one VLAN only.

  5. Question 11

    A user can ping a server by its IP address, but the same server cannot be reached by its hostname. Which area should be checked first?

    1. AThe wireless channel plan on the access points in the building the user works in
    2. BThe spanning tree root bridge placement in the wiring closet that serves the user's desk area
    3. CThe physical length of the cable between the user's desk and the wall outlet
    4. DThe name resolution settings, such as the DNS servers the client uses and their records
    Show answer and explanation
    Correct answer: D

    Reachability by IP but failure by name points to DNS, so the client's resolver settings and the DNS records for the server are the first things to check. Wireless channels, spanning tree placement, and cable length affect general connectivity, which the working IP ping already rules out.

  6. Question 12

    After a VLAN mismatch is corrected on an access port, the engineer wants proof that the issue is resolved and that the change caused no new problems. What is the best approach?

    1. AConfirm the fix with the affected user, check related devices and logs, and document the change
    2. BClose the ticket as soon as the change is saved, because the configuration is now correct by definition
    3. CMake several unrelated changes while the window is open so that the team does not need to return later
    4. DAsk the affected user to confirm after a week, without checking any device status in the meantime
    Show answer and explanation
    Correct answer: A

    Validation means confirming with the affected user that the symptom is gone and checking related devices and logs for side effects, then documenting the change. Closing on save, making unrelated changes, or waiting without checking skips validation.

Operate the Solution (6 questions)

  1. Question 13

    An administrator must upgrade the firmware on the access points and switches at a busy campus. The business cannot tolerate a long outage. Which approach is best?

    1. ASkip the release notes and upgrade only the access points, since switches are rarely affected
    2. BUpgrade every device at once during the busiest hour so that any problems appear quickly
    3. CDelay the upgrade until the next hardware refresh so that no firmware changes are made in the meantime
    4. DSchedule a maintenance window, pilot the release on a small group first, and keep a rollback path
    Show answer and explanation
    Correct answer: D

    A staged upgrade in a maintenance window, starting with a pilot group and with a rollback path ready, limits the impact of a faulty release. Upgrading at peak time, skipping release notes, or deferring all firmware work are poor practices.

  2. Question 14

    Which practice gives a campus operations team the earliest warning of a degrading network?

    1. AChecking only the device serial numbers once a year against the original purchase order paperwork
    2. BWaiting for the quarterly audit to examine device logs for the first time since deployment
    3. CTurning off alert notifications to reduce the number of emails the operations team receives
    4. DReviewing alerts and health trends regularly so that problems are seen before users report them
    Show answer and explanation
    Correct answer: D

    Watching alerts and health trends lets operators spot a degrading link or device early, often before users complain. Infrequent log reviews, disabling alerts, and yearly serial checks give late warning or none at all.

  3. Question 15

    A user reports that a conference room port needs to move to a different VLAN. The change is small, but the network team follows change control. What is the best way to make and record the change?

    1. ALog in to the switch and make the change directly without a ticket, then tell the team at the next weekly meeting
    2. BMake the change in the management platform under a documented change request, then verify the port and user
    3. CAsk the user to sit in a different room that already has the correct VLAN, so no configuration change is needed
    4. DCopy the whole campus configuration to a new switch so the change happens automatically on that hardware
    Show answer and explanation
    Correct answer: B

    Even a small change should be made through the managed platform under a documented change request, which keeps an audit trail and lets the team verify the result. Undocumented edits, moving the user to another room, or copying a whole configuration skip change control and add risk.

  4. Question 16

    Why should a campus team update its network diagrams and address inventory after each change?

    1. ADiagrams matter only for the vendor's annual license renewal and have no operational value for the team
    2. BDocumentation replaces live monitoring, because a diagram shows the current state of every device
    3. CAccurate documentation speeds up troubleshooting and reduces the chance of duplicate addresses or wrong VLANs
    4. DKeeping diagrams current is required so that the platform can push firmware to devices automatically without any human review
    Show answer and explanation
    Correct answer: C

    Current documentation of VLANs, addresses, and topology speeds up troubleshooting and helps prevent conflicts after changes. Documentation does not replace live monitoring, and it does not control firmware distribution or licensing.

  5. Question 17

    Which three items belong in a firmware change plan? (Choose three.)

    1. AThe target firmware version and the device groups that will receive it
    2. BA documented rollback procedure in case the new release causes problems
    3. CSkipping the release notes so that the upgrade can begin sooner
    4. DA record of the front panel LED colors on each device in the data center
    5. EA pilot group that validates the release before the full rollout
    Show answer and explanation
    Correct answer: A, B, E

    A firmware plan states the target version and scope, a rollback path, and a pilot group to test first. Skipping release notes raises the chance of missing known issues, and recording LED colors does not reduce upgrade risk, so neither belongs in a sound plan.

  6. Question 18

    A network team wants historical event logs from all switches available for investigations after an outage. Which practice supports this goal?

    1. ARely only on each switch's local log buffer, which keeps every event indefinitely
    2. BDisable logging on access ports to keep the device CPU load low during business hours
    3. CForward device logs to a central syslog server or SIEM so they are retained beyond the local buffer
    4. DExport logs only after an outage has been resolved and the affected users have moved on to other work
    Show answer and explanation
    Correct answer: C

    A central syslog server or SIEM keeps event history beyond a switch's limited local buffer, which is needed for investigations after an outage. A local buffer does not keep events indefinitely, and disabling logging or exporting only after the fact loses the evidence.

Plan the Solution (6 questions)

  1. Question 19

    A campus team is replacing an aging access layer. Before drafting any new design, the engineer needs an accurate picture of what is installed and how it is used today. Which activity fits this step?

    1. ALoad the planned VLAN and SSID settings onto new hardware in a lab before the site visit
    2. BOrder extra licenses for every access point so the new design is not limited later
    3. CReplace all copper cabling with fiber uplinks in every wiring closet before reviewing anything else
    4. DDocument the existing switch models, access points, VLAN layout, uplink utilization, and PoE budgets
    Show answer and explanation
    Correct answer: D

    Analyzing the current environment means recording what exists and how it is used, such as hardware, VLANs, uplink load, and PoE capacity. Lab-loading the new design, buying licenses, or recabling are later steps or unjustified actions taken before the baseline is understood.

  2. Question 20

    What is the main purpose of a low-level design that follows an architect's high-level design?

    1. AIt defines the monitoring dashboards and alert thresholds for use after the network goes live in production
    2. BIt records business goals and the approvals needed before any hardware is purchased
    3. CIt replaces the architect's topology with a cheaper layout chosen by the installation crew
    4. DIt translates the architecture into details such as VLAN IDs, IP subnets, SSIDs, and port settings
    Show answer and explanation
    Correct answer: D

    A low-level design converts the architect's high-level intent into the concrete details an implementer needs, such as VLAN IDs, subnets, SSIDs, and port configuration. The other options describe business approval, unauthorized redesign, or operations work that is not part of the low-level design.

  3. Question 21

    A deployment team has a site visit booked and a change window that is only two nights long. Which preparation step most reduces risk during the cutover?

    1. AStage devices with target firmware and configuration, and document a rollback procedure beforehand
    2. BWait until users complain before deciding which access points need new settings
    3. CUpgrade every device to the newest firmware on cutover day without testing the release first
    4. DStart re-cabling the wiring closets during business hours so the change window covers only configuration changes
    Show answer and explanation
    Correct answer: A

    Staging devices and writing a rollback plan before the window keeps the cutover short and gives a known way back if something fails. Re-cabling during business hours, waiting for complaints, or upgrading untested firmware all add risk instead of reducing it.

  4. Question 22

    Which two items are most important to capture when analyzing an existing campus environment before a migration? (Choose two.)

    1. AThe planned SSID names for the replacement access points
    2. BCurrent PoE power budgets and the power drawn by devices on each existing switch port
    3. CThe reasons management approved the original network project
    4. DExisting VLAN, IP addressing, and routing design, including the services that depend on them
    5. EThe new vendor's feature roadmap for the coming year
    Show answer and explanation
    Correct answer: B, D

    PoE budgets and VLAN, addressing, and routing dependencies determine what the new design must support and what could break during migration. Intranet colors, requester names, and vendor brochures do not affect how the network is analyzed or migrated.

  5. Question 23

    An architect's high-level design requires 802.1X authentication on every wired access port. During site analysis, the engineer finds that several closet switches are older models that cannot support the required authentication features. What is the most appropriate next step?

    1. ARemove 802.1X from those ports in the low-level design without telling the architect, so that the installation stays on schedule
    2. BLeave those ports open with no access control, since the switches are in closets and the risk is considered low
    3. CAssume the older switches will support 802.1X after they are connected, and check the behavior during the cutover window
    4. DRecord the gap and raise it with the architect so that a replacement or approved alternative is agreed before rollout
    Show answer and explanation
    Correct answer: D

    The high-level design sets the requirements, so a hardware gap found during analysis has to go back to the architect for a decision on replacement or an approved alternative. Silently dropping a required control, assuming compatibility without checking, or leaving ports open all break the design.

  6. Question 24

    An installer is about to connect a new distribution switch to several access switches. The low-level design contains a table that maps each access switch hostname to its uplink port number and the matching port on the distribution switch. Why is this table included?

    1. AIt decides which switch receives the vendor license key, so that each uplink is counted only once for billing purposes
    2. BIt records the warranty dates of each switch so that replacement parts can be ordered before the coverage ends
    3. CIt defines the alert thresholds that the monitoring platform will use after the network has been placed into production
    4. DIt gives installers an exact cabling reference, so each uplink lands on the intended port and mistakes are easier to spot
    Show answer and explanation
    Correct answer: D

    A low-level design lists exact connections, which gives installers a reference to follow and makes miscabling easier to catch. License counting, alert thresholds, and warranty dates are administrative details and do not come from a cabling map.

Optimize the Solution (6 questions)

  1. Question 25

    Why should a team record baseline measurements before it optimizes a campus WLAN?

    1. AA baseline ensures that every access point uses the same transmit power setting regardless of local coverage needs or floor layout
    2. BA baseline lets the team skip the post-change test, because the initial numbers are assumed to be correct
    3. CA baseline is needed only for the vendor's warranty process and has no use while tuning the network
    4. DA baseline gives reference values, such as utilization and client counts, to compare each change against
    Show answer and explanation
    Correct answer: D

    A baseline captures starting values so that the effect of each tuning change can be measured and judged. Skipping the post-change test, using baselines only for warranties, and forcing uniform power are wrong because they ignore measurement and coverage design.

  2. Question 26

    A high-density lecture hall has many clients on the 2.4 GHz band, and the team sees heavy airtime use. Which change is a recognized WLAN best practice for this situation?

    1. ASet all access points to the same channel so that clients have one channel to roam across easily
    2. BRaise the transmit power on every radio to the maximum so clients stay connected to the nearest access point
    3. CDisable the lowest legacy data rates on the 2.4 GHz radios and enable band steering toward 5 GHz
    4. DEnable every legacy data rate so that older devices can connect at low speeds without restriction in the cell
    Show answer and explanation
    Correct answer: C

    Disabling the lowest legacy rates on 2.4 GHz and steering dual-band clients toward 5 GHz reduces wasted airtime and eases the crowded band. Maximum power, all legacy rates, and one shared channel increase interference and airtime use instead of reducing them.

  3. Question 27

    A team set the 2.4 GHz radios in a dense office to 40 MHz channel width to increase speed. Clients now report more retries and slower transfers in busy areas. Which change follows WLAN best practice?

    1. AKeep the 40 MHz width and raise the transmit power on every radio so that clients get a stronger signal
    2. BSet the 2.4 GHz radios to 20 MHz channels on non-overlapping channels planned for the floor layout
    3. CEnable every legacy data rate on the 2.4 GHz radios so that older devices can connect at the slowest speeds
    4. DUse the same channel on all 2.4 GHz radios so that clients can roam without changing channels during movement
    Show answer and explanation
    Correct answer: B

    Wide 2.4 GHz channels overlap heavily with neighboring cells, so 20 MHz channels placed on non-overlapping channels reduce co-channel interference. Higher power, one shared channel, or enabling all legacy rates increase interference or airtime use instead of reducing it.

  4. Question 28

    A team tuned a campus WLAN and compared results with its baseline. Average client throughput improved clearly, but roaming failures and authentication times both increased. What is the best conclusion?

    1. AThe change has a trade-off, so the team should review every baseline metric and then refine or revert the setting
    2. BThe change is a success, because throughput is the only measure that matters to the business and to its users
    3. CThe baseline is no longer valid and should be discarded, since the environment changed during tuning
    4. DThe roaming failures can be ignored, since they are usually caused by clients rather than by the network itself, so no action is needed
    Show answer and explanation
    Correct answer: A

    Comparing every key metric against the baseline reveals trade-offs, and a change that helps throughput while harming roaming and authentication needs refinement or rollback. Judging by one metric, discarding the baseline, or ignoring failures without investigation skips that comparison.

  5. Question 29

    Users connect laptops to access ports, and the team wants those ports to begin forwarding quickly after a link comes up, without waiting for spanning tree to converge. Which setting is appropriate for these edge ports?

    1. APortFast on every uplink between switches, so that redundant paths come up quickly when a link fails in the core
    2. BSpanning tree disabled on the entire switch, so that no port ever waits for convergence after a link change
    3. CPortFast on ports that connect only to end devices, such as PCs and phones, and not on switch-to-switch links
    4. DA higher spanning tree priority on the access ports, so that they move to forwarding without any listening delay at all
    Show answer and explanation
    Correct answer: C

    PortFast lets an edge port that connects to a single end device start forwarding sooner, and it must not be used on switch-to-switch links where loops are possible. Using it on uplinks, disabling spanning tree everywhere, or raising priority on access ports removes loop protection or does not speed up the port.

  6. Question 30

    A team is recording a WLAN baseline before a tuning project. Which approach makes the baseline useful for comparing results after the changes?

    1. AMeasure once on a quiet holiday morning, when the building is empty, and keep those figures as the permanent reference
    2. BRecord only the best single speed test result of the day, since the highest number reflects the network's real capability
    3. CUse the vendor's typical values for the building type, so the team does not have to measure its own network at all
    4. DMeasure at the same times of day and under similar client load, and record the test method so later tests match it
    Show answer and explanation
    Correct answer: D

    A baseline is useful only when later tests use the same conditions, such as time of day, load, and method. An empty-building snapshot, vendor typical values, or a single best-case speed test cannot show how users' network really behaves.