HP0-Y27: DEPLOYING HP ENTERPRISE WIRELESS NETWORKS

HP0-Y27: DEPLOYING HP ENTERPRISE WIRELESS NETWORKS HP Networking Exam Preparation Guide

HP0-Y27: DEPLOYING HP ENTERPRISE WIRELESS NETWORKS HP Networking Exam Preparation Guide Overview Requirements for successful completion This guide helps you study for the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam. You can benefit from this guide whether you are attempting to expand your existing HP certification or you have a background with the former H3C or Cisco products and want to get certified with HP. To pass the HP0-Y27 exam, you must demonstrate expertise in radio frequency (RF) design and wireless technologies. You must be able to apply this knowledge by implementing an HP MultiService Mobility (MSM) solution, including configuring advanced guest solutions, WLANs secured with 802.1X, Mobility Traffic Manager (MTM), Layer 3 roaming, and Quality of Service (QoS). You must also be able to configure HP RF Manager to protect against wireless threats. In addition, you must be able to follow a standard troubleshooting process to identify and correct wireless performance and authentication problems. 2

Table of Contents Overview... 2 Table of Contents... 3 Why take this exam?... 4 HP Master ASE Wireless Networks Implementer V1 certification... 4 Path 1... 4 Path 2... 4 Path 3... 4 How to study for the exam... 5 Study tips based on your certification... 6 HP ASE Wireless Networks [2011] certification... 6 HP Master ASE Wireless Networks [2011] certification... 6 Master ASE HP ProCurve Campus LANs or HP Master ASE Network Infrastructure [2011] certification. 7 CCIE Wireless certification... 7 Attend recommended ILTs... 7 Topics covered... 8 Format offered... 8 More information... 8 Review the HP Wireless LAN Technologies WBT... 8 Topics covered... 8 Format offered... 8 Obtain hands-on experience... 9 Refer to additional materials... 9 How to take the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam... 9 Exam content... 9 Comments on the exam... 11 Tips for taking HP exams... 11 Register... 12 Sample questions... 12 Conclusion... 16 Appendix: Answers to the sample questions... 17 3

Why take this exam? When you pass this exam, you earn the HP Master Accredited Solutions Expert (ASE) Wireless Networks Implementer V1 certification, which is the highest certification credential that HP offers for wireless networking. This achievement certifies that you can design, integrate, and support secure network solutions for large and complex enterprise wireless networks using HP MSM devices and HP RF Manager. HP Master ASE Wireless Networks Implementer V1 certification HP provides three paths to achieve the HP Master ASE Wireless Networks Implementer V1 certification, as outlined below. The requirements are dependent upon which achievements you currently hold. (Some form of previous certification is required; if you do not have any of the certifications listed in Table 1 on the following page, you should first obtain the HP ASE Wireless Networks Implementer V1 certification.) Path 1 This path is designed for networking professionals who have one of the following certifications: HP ASE Wireless Networks [2011] certification HP ASE Wireless Networks Implementer V1 certification (when it is available in the fall of 2012) Candidates who currently have the HP Master ASE Wireless Networks [2011] certification also have the HP ASE Wireless Networks [2011] certification and, therefore, should use this path. If you meet one of these criteria, you must pass the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam. Path 2 This path is designed for networking professionals who have one of the following certifications. Master ASE HP ProCurve Campus LANs [2010] HP Master ASE Network Infrastructure [2011] If you meet one of these criteria, you must pass the following exam: Deploying HP Enterprise Wireless Networks (HP0-Y27) exam Implementing HP Wireless Networks (HP0-Y33) exam By completing this path, you will also be granted the HP ASE Wireless Networks [2011] certification and HP AIS Network Infrastructure [2011] (when applicable). When the HP ASE Wireless Networks Implementer V1 certification is available in the fall of 2012, you will be granted this certification, rather than the HP ASE Wireless Networks [2011] certification. Path 3 This path is designed for networking professionals who have the following certifications. CCIE Wireless If you meet one of these criteria, you must pass the following exam: Deploying HP Enterprise Wireless Networks (HP0-Y27) exam By completing this path, you will also be granted the HP ASE Wireless Networks [2011] certification and HP AIS Network Infrastructure [2011] (when applicable). When the HP ASE Wireless Networks Implementer V1 certification is available in the fall of 2012, you will be granted this certification, rather than the HP ASE Wireless Networks [2011] certification. Table 1 summarizes these requirements. 4

Requirements for HP Master ASE Wireless Table 1: Exam based on current achievement Current achievements Path 1 Path 2 Path 3 HP ASE Wireless Networks [2011] HP ASE Wireless Networks Implementer V1* Master ASE HP ProCurve Campus LANs [2010] HP Master ASE Network Infrastructure [2011] CCIE Wireless** Proctored exam Implementing HP Wireless Networks (HP0-Y33) X X Proctored exam Deploying HP Enterprise Wireless Networks (HP0-Y27) X X X X X *HP ASE Wireless Networks Implementer V1 will be available in the fall of 2012. **Proof of current credential status must be provided to HP. CCIE specialties such as Voice, Security, or Routing and Switching do not apply toward HP Master ASE Wireless Networks Implementer V1 certification. Who should take the exam? Every candidate for the HP Master ASE Wireless Networks Implementer V1 must take the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam. Although anyone can take the exam, most successful candidates have at least three to five years of real-world experience implementing and maintaining complex enterprise wireless networks. Successful candidates prepare for the test in a variety of ways. This guide describes some of these ways and provides references to materials that you can use to prepare for the exam. NOTE Although anyone can take the exam, passing it helps you achieve certification only if you have one of the achievements listed in Table 1. If you are a new candidate, you should obtain the HP ASE Wireless Networks [2011] certification first. (When the HP ASE Wireless Networks Implementer V1 certification is available in the fall of 2012, you should first obtain that certification.) How to study for the exam The Deploying HP Enterprise Wireless Networks (HP0-Y27) exam tests you on topics that are covered in the HP Enterprise Wireless Networks instructor-led training (ILT). It also covers aspects of implementing HP MSM wireless solutions in which a Master ASE Wireless Networks candidate should have expertise. Although the ILT is recommended for all candidates no matter what their current achievements, the course is not required nor does it guarantee that you will pass the exam. In addition to attending the course, you must study and practice on your own and draw on your real-world experience in implementing and troubleshooting wireless networks. The exam certifies that you have the knowledge and skills necessary for the Master ASE Wireless Networks Implementer V1 certification the highest certification HP offers for wireless networking. As a result, the exam includes complex and demanding questions, reflecting the challenging nature of the tasks that the Master ASE professional faces in managing real-world, complex wireless networks. Read the sections that follow to assess your options for preparing for the exam. Even if you do not intend to complete the recommended training, you should examine the topics covered because the exam will test you on your mastery of these topics. Note that this exam may touch on more topics than those covered in the training. 5

Study tips based on your certification To begin, you might want to review recommendations for studying based on your current skills: HP ASE Wireless Networks [2011] Master ASE HP ProCurve Campus LANs or HP Master ASE Network Infrastructure [2011] CCIE Wireless Each section below focuses on study recommendations for each certification. HP ASE Wireless Networks [2011] certification The Deploying HP Enterprise Wireless Networks (HP0-Y27) exam covers some concepts that were introduced at the ASE level. To pass the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam, however, you must be able to demonstrate that you have an in-depth understanding of these concepts. For example, at the ASE level you learned about 802.11a/b/g/n and basic radio technologies. You also learned how to implement basic guest solutions on MSM devices. The Deploying HP Enterprise Wireless Networks (HP0-Y27) exam requires you to apply what you know about 802.11 and radios technologies: you must plan RF coverage and capacity to meet specific customer requirements. You must also be able to conduct a site survey that ascertains if your wireless network design actually meets the stated customer requirements. In addition, you must know how to implement more complex guest solutions, such as those that use subscription services and Web pages stored on an external Web server. You must also have expertise in concepts and technologies not touched on at the ASE level. For example, you must be able to implement MTM to control how wireless traffic is distributed onto the wired network and to provide Layer 3 roaming. You must also know how MTM can be used with other features such as teaming. Further, you must be able to implement an end-to-end QoS solution that prioritizes time-sensitive or bandwidthintensive traffic as it is transmitted from the wireless network to the wired network and back again. In addition, you must be able to configure and manage RF Manager to protect a network against wireless threats. Finally, you must be able to isolate and resolve wireless performance issues particularly those caused by poor RF planning, interference, and obstacles. You must also know how to correct authentication misconfigurations. To learn more about ways to prepare for the exam, continue reading, beginning at: Attend recommended ILTs. HP Master ASE Wireless Networks [2011] certification The Deploying HP Enterprise Wireless Networks (HP0-Y27) exam covers some concepts that were tested for the HP Master ASE Wireless Networks [2011] certification. For example, you must be able to plan RF coverage and capacity to meet specific customer requirements and understand the QoS standards that are implemented on wireless and wired networks. You must also be able to configure and manage RF Manager to protect a network against wireless threats. However, there are some significant differences between the certification requirements for HP Master ASE Wireless Networks [2011] and HP Master ASE Wireless Networks Implementer V1. The primary difference is that the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam tests your knowledge and skill-level with the HP MSM devices. To pass the test, you should have experience configuring and managing a wireless network based on MSM devices as well as RF Manager. In addition, the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam includes troubleshooting questions. (For the HP Master ASE Wireless Networks [2011] certification, troubleshooting was covered on a separate exam.) The troubleshooting questions focus on resolving RF performance issues and authentication issues in a wireless network. You should review the causes of poor performance and practice identifying and resolving such issues. To learn more about ways to prepare for the exam, continue reading, beginning at: Attend recommended ILTs. 6

Master ASE HP ProCurve Campus LANs or HP Master ASE Network Infrastructure [2011] certification To pass the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam, you must demonstrate knowledge of advanced wireless technologies, such as planning wireless cells, detecting interference, identifying obstacles, and conducting site surveys. You must also understand the factors involved in planning and implementing wireless bridges, including the Fresnel zone and the earth s bulge. Because you might not have the necessary background in wireless technologies, HP strongly suggests that you consider first preparing for and taking the Implementing HP Wireless Networks (HP0-Y33). (The HP0-Y33 exam is another requirement for the HP Master ASE Wireless Network Implementer V1 certification.) The training for the HP0-Y33 exam prepares you for the HP Enterprise Wireless Networks course, which is the ILT recommended to help you prepare for the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam. To pass the HP0-Y27 exam, you will need to learn more about the HP MSM devices and HP RF Manager. You should take the recommended HP Enterprise Wireless Networks ILT to learn more about these devices and practice using them in a safe lab environment. You should also try to obtain as much out-of-class, hands-on experience with the HP MSM devices and RF Manager as possible. To learn more about ways to prepare for the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam, continue reading, beginning at: Attend recommended ILTs. CCIE Wireless certification Your background in wireless technologies should help you answer some questions on Deploying HP Enterprise Wireless Networks (HP0-Y27) exams. However, you should assess what topics you might need to review. For the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam, for example, you need to know how to plan wireless cells, detect interference, identify obstacles, and conduct site surveys. You must also understand the factors involved in planning and implementing wireless bridges, including the Fresnel zone and the earth s curvature. You must then be able to troubleshoot issues that lead to slow transmission speeds and authentication problems on a wireless network. Although your general knowledge of wireless technologies will help you answer some questions, you must also know how to configure and manage HP MSM Controllers, APs, and RF Manager. Specifically, you must know how to implement advanced guest solutions, WLANs secured by 802.1X, MTM, teaming, and QoS on the MSM devices. You must also know how to set up and manage RF Manager to protect both the wireless and wired network. HP recommends that you attend the HP Enterprise Wireless Networks, which is the ILT associated with the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam. This course will help you become familiar with the MSM devices and RF Manager and obtain as much hands-on practice as possible. To learn more about ways to prepare for the exam, continue reading, beginning at: Attend recommended ILTs. Attend recommended ILTs The five-day HP Enterprise Wireless Networks training (rev. 12.21 or later) provides instruction on designing, implementing, securing, and troubleshooting a wireless network using HP MSM devices and RF Manager. This course takes you through all aspects of designing a wireless network, from the initial site inspection to final site survey. It then focuses on advanced guest solutions, 802.1X authentication with an external RADIUS server, MTM, and QoS. It also covers securing the wireless network with RF Manager and troubleshooting performance and authentication issues. You can register for this course in The Learning Center of your HP Partner Portal, which is the HP Learning Management System for HP customers and partners. You will require an HP Learner ID to register for a class. (Although it only takes a few minutes to request the ID, the process of activating it may take up to several days.) Please obtain this ID and then register for classes at least one week in advance. Costs and scheduling vary according to region. 7

Topics covered After attending this course, you will be able to: Assess a company s requirements and design an appropriate RF network deployment (for user access or a wireless bridge) Perform a site survey Configure HP MSM devices to support: o o o o o Advanced guest solutions 802.1X authentication with an external RADIUS server Traffic distribution with MTM Layer 3 roaming Quality of Service (QoS) Configure HP RF Manager to secure the network against wireless threats such as rogue devices, Honeypots, DoS attacks, and so on Troubleshoot RF performance issues and authentication problems Format offered 5-day instructor-led course with 35% lecture and 65% hands-on labs and participant-centered activities More information If you are interested, the course datasheet discusses HP Enterprise Wireless Networks in more detail. It is available at http://h17007.www1.hp.com/us/en/training/certifications/technical/mase-wirelessnetworks.aspx. Review the HP Wireless LAN Technologies WBT You might have already completed the HP Wireless LAN Technologies WBT, which is delivered by an industry expert and delves into wireless technologies. However, if you have not taken this WBT or if you have not taken the WBT recently, you should review it again before taking the test. In particular, you should study the sections on roaming and wireless design including conducting site surveys, planning wireless bridges, and handling multipath distortion or hidden nodes. This WBT is freely available through the Learning Center of your HP Partner Portal. You will need to register for the WBT, which requires an HP Learner ID. Note that, while it only takes a few minutes to request the ID, the process of activating it up may take several days. Please do not wait until the last minute. Topics covered The WBT teaches you about these concepts: WLAN radio technologies IEEE 802.11n primer WLAN quality of service (QoS) WLAN roaming WLAN security WLAN network design Format offered The WBT is a four-hour, self-paced course. At the end of the WBT, you take a test to assess what you have learned. 8

Obtain hands-on experience All HP exams are designed for networking professionals with on-the-job experience, but this exam in particular requires such experience. For example, if a technology is mentioned in the ILT, you are expected to know how to implement that technology in more detail than the Learner Guide notes provide. You must be able to examine configurations on HP MSM Controllers and HP RF Manager and understand the functionality indicated by that configuration. You are expected to recognize when interference (both 802.11 and non-802.11) and obstacles are causing issues on a wireless network and be able to recommend solutions. You are also expected to be able to identify and resolve authentication issues. Refer to additional materials In addition to testing you on the topics specifically covered in the HP Enterprise Wireless Networks ILT, the HP0-Y27 exam assesses your ability to manage all aspects of HP MSM wireless devices. Therefore, you might want to refer to HP MSM devices solution guides and documentation to study topics with which you are less familiar. You can search for these materials at http://www.hp.com/networking/support. How to take the Deploying HP Enterprise Wireless Networks (HP0-Y27) exam Table 2 provides details about the exam. Note that this is a proctored exam, which you must complete at a scheduled time and authorized location. You will not be allowed to take any reference materials with you. Table 2: HP0-Y27 exam details Parameter Description Number of items 60 Item types Exam time Passing score Additional guidelines Multiple choice (single response) Multiple choice (multiple responses) Matching 2 ½ hours (150 minutes) 75 percent (45 correct answers) No online or hard copy reference material will be allowed at the testing site. Exam content The following table lists the general objectives for the exam and the specific objectives used in the course modules. The exam measures your understanding of the content covered by these objectives. You can use these objectives as an outline to guide your study and to check your readiness for the exam. 9

Table 3: HP0-Y27 exam content HP0-Y27 Sections/Objectives 15% Solution Planning and Design 33% Solution Implementation Assess customer needs, including the customer s goals, current environment, and issues. o Assess a company s purpose for implementing a wireless network and determine the specific requirements for using it. Create designs which meet customer requirements and needs, which have been qualified in the planning state. o Determine the requirements for radio frequency (RF) coverage and capacity and plan the wireless cells to meet those requirements. o Design and implement a solution for wireless guest access that features HP MSM products and a centralized NOC. o Plan how to distribute users traffic onto the wired network based on customer requirements. Configure devices. o Set up subscription services on an MSM Controller. o Configure an external RADIUS server to authenticate guests and apply appropriate access controls. o Enable the MSM Controller to work with an external Web server to provide secure, customized access for guests. o Ensure that MTM interacts correctly with RADIUS-based VLAN assignments. o Configure MTM on a single controller to distribute traffic according to plan. o Configure MTM on multiple controllers in a mobility domain to distribute traffic according to plan. Implement required security devices (such as RF Manager). o Describe HP RF Manager Controller s role in securing a wireless network. o Plan the deployment of sensors. o Install HP RF Manager and complete the initial setup. o Use RF Manager to locate and quarantine rogue APs. o Set up intrusion prevention with RF Manager to enforce a company s security policy. Validate wireless coverage, roaming, and capacity results compared to design using tools and best practices. 10

HP0-Y27 Sections/Objectives 27% Solution Optimization 20% Solution Troubleshooting 5% Solution Management Optimize small- to medium-sized wireless network infrastructures for SMB and commercial customers. Optimize large, complex, multi-site unified wired/wireless networks for corporate customers. Assess sensitive traffic and determine appropriate tools for optimizing traffic flow (using QoS). o Determine which traffic requires priority handling and which QoS mechanisms clients support. o Determine which values are available for QoS settings, based on the particular QoS protocol in use. o Plan QoS to ensure that time-sensitive traffic receives priority handling through the entire pathway between a wireless device and the destination device. Optimize and scale wireless network designs (coverage area, site survey, RF planning, RF optimization). o Plan, prepare, and conduct a site survey. Troubleshoot small- to medium-sized wireless network infrastructures for SMB and commercial customers. o Determine the cause of issues with wireless performance. o Find sources of interference and either remove them or redesign RF coverage to avoid them. o Manage hidden nodes, clients that fail to roam properly, legacy clients, and other special situations. o Identify why 802.1X authentication to an external RADIUS server fails and resolve the problem. o Isolate and resolve issues with guest authentication to an external Web page, an external RADIUS server, or both. o Determine how to resolve the issue when users cannot receive IP addresses. Troubleshoot small- to medium-sized networks, including WAN/wireless connections to remote sites. Utilize specific tools appropriate for troubleshooting wireless networks and mobility infrastructures. o Use information collected by HP MSM products, as well as third-party tools, to analyze signal and interference. Review and take action on alerts and log files (mitigation steps, scripted responses, escalation, and so on). Comments on the exam During the exam, participants can make specific comments about the items (such as accuracy, appropriateness to audience, and so on). HP welcomes these comments as part of our efforts to continually improve our certification program. Tips for taking HP exams Rather than emphasize simple memorization, HP exams attempt to assess whether or not you have the knowledge and skills that a networking professional requires on the job. Therefore, many questions feature exhibits or scenarios. As you see, you will have an average of two minutes and thirty seconds per question. Some questions will take less time, and some will require more. Before you answer a question, take the time to read the question and all of the options carefully. If the question indicates that it features one or more exhibits, study the exhibits and reread the question. Make sure to select 11

the answer that correctly responds to the question that is asked. Avoid selecting an answer that includes some correct and some incorrect information. Instead, identify and select the answer that it completely correct. If the question asks for more than one answer, remember to select each correct answer. You do not receive partial credit for a partially correct answer. Register To register for this exam, visit the PearsonVUE website at: http://www.pearsonvue.com/hp You will need an HP Learner ID and a PearsonVUE ID. You can also access links to register for this exam when you view information about them on The Learning Center: http://www.hp.com/go/expertone Sample questions Use these questions to help to assess whether you are prepared to take the exam. An appendix at the end of this guide provides answers and explanations. 1. You have deployed a wireless network for a large convention center. This network was designed to carry both video traffic and data traffic. After a few months, the convention center CIO contacts you, complaining that the quality of service (QoS) is poor. When you visit the site and conduct some tests, you discover that a large number of collisions are occurring. You think that you have a hidden node problem caused by stations that do not roam easily. What is one step you can take to solve this problem? a. Configure QoS to grant higher priority to video traffic, decreasing the chance that lower priority packets will collide with them. b. Increase the APs transmit power to provide a better signal for stations. c. Increase the RTS threshold on the AP. d. Lower the APs transmit power to encourage the stations to roam. 2. A sensor has just detected a new AP sending traffic on the wired network. The AP uses these settings: SSID = Employees Security = WPA (802.1X with AES) The AP is detected passing the client s traffic on VLAN 20 (10.1.20.0/24). A client that was Uncategorized is now associated with the AP. Examine the settings shown for RF Manager in the exhibits below (assume other settings are at the defaults). What action does RF Manager take? a. It quarantines the AP only. b. It quarantines the client only. c. It quarantines the AP and the client. d. It quarantines neither the AP nor the client. 12

Figure 1: Exhibit 1 for question 2 RF Manager AP Auto-classification policy Figure 2: Exhibit 2 for question 2 RF Manager Authorized 802.11 SSID template 13

Figure 3: Exhibit 3 for question 2 RF Manager Authorized WLAN Setup > Select No Wi-Fi Networks Figure 4: Exhibit 4 for question 2 RF Manager Client Auto-classification policy 14

Figure 5: Exhibit 5 for question 2 RF Manager Intrusion Prevention Policy 3. A network administator is configuring an HP MSM solution for a hotel chain that wants to charge guests for Internet access. The company plans to use the WorldPay payment service. What is one task that the network administrator must complete? a. Add a site access rule that permits the WorldPay server to contact the controller on port 8090. b. Add a site access rule that permits unauthenticated guests to access the WorldPay server. c. Set up proxy settings for the WorldPay web site on the MSM Controller s Web content page. d. Configure the correct WorldPay site in the controller s login-url attribute. 4. A network administrator is configuring an HP MSM solution to implement Mobility Traffic Manager (MTM) with a team. The exhibit illustrates the controllers that will form the mobility domain. The administrator configures IP address 10.1.1.254 as the primary controller. Which describes the result? Figure 6: Exhibit 1 for question 4 Sample network a. The mobility domain cannot form because you must specify an actual IP address on an MSM controller. b. The mobility domain forms and provides high availability for the primary controller function. 15

Conclusion c. The mobility domain cannot form because, in a hybrid team and single controller solution, the single controller must always act as primary controller. d. The mobility domain forms and provides high availability for each subnet supported on either the team or the single controller. HP wishes you success in the HP ExpertONE Program and in passing the exam for which you are preparing. 16

Appendix: Answers to the sample questions This section provides answers and explanations for the sample questions. 1. You have deployed a wireless network for a large convention center. This network was designed to carry both video traffic and data traffic. After a few months, the convention center CIO contacts you, complaining that the quality of service (QoS) is poor. When you visit the site and conduct some tests, you discover that a large number of collisions are occurring. You think that you have a hidden node problem caused by stations that do not roam easily. What is one step you can take to solve this problem? a. Configure QoS to grant higher priority to video traffic, decreasing the chance that lower priority packets will collide with them. b. Increase the APs transmit power (one db at a time) to provide a better signal for stations. c. Increase the RTS threshold on the AP. d. Lowe the APs transmit power (one db at a time). Explanation: The question describes a hidden node problem caused by stations that do not roam when their signal is too low. The transmissions collide, decreasing performance of all traffic. It s particularly noticeable on video traffic. Raising the priority for certain traffic does nothing to improve performance in this situation. Implementing QoS gives high priority traffic an advantage in being transmitted first. However, these mechanisms still rely on other stations detecting the transmissions and not transmitting at the same time. Therefore, answer a is incorrect. Answer b is incorrect because the problem is not that the stations cannot detect the AP s signal but that they cannot detect each other s signals. In fact, raising APs transmit power might exacerbate this situation because it allows stations that are even further apart from each other to associate with the same AP. Answer c is incorrect because RTS actually helps resolve hidden node problems. To use this mechanism, you would decrease the RTS threshold. Answer d offers the best solution. By turning down the APs power a bit, you can help prevent stations that are far away from each other from associating with the same AP. The stations can associate with the closer AP instead. 2. A sensor has just detected a new AP sending traffic on the wired network. The AP uses these settings: SSID = Employees Security = WPA (802.1X with AES) The AP is detected passing the client s traffic on VLAN 20 (10.1.20.0/24). An client that was Uncategorized is now associated with the AP. Examine the settings shown for RF Manager in the exhibits below (assume other settings are at the defaults). What action does RF Manager take? a. It quarantines the AP only. b. It quarantines the client only. c. It quarantines the AP and the client. d. It quarantines neither the AP nor the client. Explanation: To determine the action taken by RF Manager, you must first determine how the AP is categorized. From Exhibit 2, you know that the AP complies with the Authorized WLAN policy: The policy s authorized SSID is Employees, and the AP uses this SSID. The policy allows WPA or WPA2 (802.11i) for security, 802.1X for authentication, and TKIP or AES (CCMP) for encryption. The AP s security settings comply. The policy allows traffic on any VLAN. The location s No Wi-Fi Networks settings always take precedence over the allowed networks in the Authorized WLAN policy, so you must check the settings in Exhibit 3 and make sure that wireless traffic is allowed on subnet 10.1.20.0/24. The exhibit shows that traffic is allowed on this subnet. Therefore, the AP is Potentially Authorized. 17

RF Manager never automatically reclassifies Potentially Authorized APs as Authorized (an administrator must do so). Therefore, the AP remains Potentially Authorized. As you can see in Exhibit 4, RF Manager does not reclassify the client; it remains Unclassified. You now simply need to examine Exhibit 5, the intrusion prevention policy, to see how RF Manager responds to Potentially Authorized APs and to Uncategorized Clients that connect to Potentially Authorized APs. As you see, the Potentially Authorized AP is quarantined (fourth check box under Rogue APs), but the Uncategorized Client is not (no policy for this type of connection). Answer a is correct. Note that answer d is not correct because RF Manager does not quarantine the client itself. Sensors do disrupt the client s connection to the Potentially Authorized AP, but the client can connect to another AP. Figure 7: Exhibit 1 for question 2 RF Manager AP Auto-classification policy 18

Figure 1: Exhibit 8 for question 2 RF Manager Authorized 802.11 SSID template Figure 2: Exhibit 9 for question 2 RF Manager Authorized WLAN Setup > Select No Wi-Fi Networks Figure 3: Exhibit 10 for question 2 RF Manager Client Auto-classification policy 19

Figure 4: Exhibit 11 for question 2 RF Manager Intrusion Prevention Policy 3. A network administator is configuring an HP MSM solution for a hotel chain that wants to charge guests for Internet access. The company plans to use the WorldPay payment service. What is one task that the MSM administrator must complete? a. Add a site access rule that permits the WorldPay server to contact the controller on port 8090. b. Add a site access rule that permits unauthenticated guests to access the WorldPay server. c. Set up proxy settings for the WorldPay web site on the MSM Controller s Web content page. d. Configure the correct WorldPay site in the controller s login-url attribute. Explanation: Option b is correct because the unauthenticated guests must be able to communicate directly with the WorldPay server. Therefore, the controller s site access list must permit this access. Option a is incorrect because the site access list applies to access-controlled user traffic only (not to traffic from the WorldPay server). Option c does not describe a valid functionality on the MSM Controller. Option d is incorrect because the login-url attribute specifies the URL for an external login page in which users submit their credentials; the MSM Controller can include subscription options in its own login page and then direct the guests to the WorldPay server to complete the subscription. The login-url attribute is unrelated to subscription services so it does not have to be completed. 20

4. A network administrator is configuring an HP MSM solution to implement Mobility Traffic Manager (MTM) with a team. The exhibit illustrates the controllers that will form the mobility domain. The administrator configures IP address, 10.1.1.254 as the primary controller. Which describes the result? Figure 5: Exhibit 1 for question 4 Sample network a. The mobility domain cannot form because you must specify an actual IP address on an MSM controller. b. The mobility domain forms and provides high availability for the primary controller function. c. The mobility domain cannot form because, in a hybrid team and single controller solution, the single controller must always act as primary controller. d. The mobility domain forms and provides high availability for each subnet supported on either the team or the single controller. Explanation: Option b is correct. When using the MTM and teaming features together, you specify the team as the primary controller. The controllers can then form a mobility domain. Options a and c are incorrect because they state that the mobility domain will not form. Option d is incorrect because highavailability for the subnets depends on other factors that you cannot verify based on the configuration information provided. For example, if the standalone controller is the only controller that supports some subnets and that controller fails, the users will no longer be able to connect to the subnet. To learn more about HP networking, visit www.hp.com/networking Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. HP0-Y27: Deploying HP Enterprise Wireless Networks Exam Preparation Guide / April 2012