HPE6-A86 HPE Network Switching Associate Exam Topics and Questions

This topic anchors the exam. It carries the largest weight and tests whether you can apply foundational concepts to real switching environments, not just recite definitions. The cost comes when you confuse layer boundaries or misread how protocols interact under load. Expect questions that ask you to diagnose a misconfiguration or choose the correct technology for a stated requirement.

– The OSI stack and physical media

You need to map symptoms to the correct layer and recognise which media type suits a given distance, speed, or environment. The OSI model appears in scenario stems where a problem sits at one layer but the candidate is offered fixes that target another. Layer 1 media questions turn on cable category limits, fibre types, and maximum segment lengths. Knowing that 10GBASE-T requires Cat 6a over longer runs, or that multimode fibre cannot cover the distance single-mode can, decides the answer when a deployment brief lists conflicting requirements. The exam does not ask you to draw the stack; it asks you to use it as a diagnostic filter.

– Ethernet, VLANs, and broadcast domains

Layer 2 questions focus on frame handling, VLAN membership, and broadcast scope. You must recognise how untagged and tagged ports behave, how a broadcast domain stops at a VLAN boundary, and why flooding occurs when the MAC table lacks an entry. Scenarios describe traffic that does not reach its destination or reaches too many destinations, and the correct answer hinges on VLAN assignment or port mode. Link aggregation appears here as well: you need to know that it bundles links into a single logical channel, increasing throughput and providing redundancy without creating a loop. Misunderstanding which frames are permitted on a trunk or how LACP negotiates the bundle will cost marks.

– IP addressing, routing, and ARP

Layer 3 coverage includes subnet calculation, default gateway behaviour, and ARP resolution. Questions present an IP plan with overlapping subnets, a host that cannot reach another network, or an ARP table that shows unexpected entries. You must calculate whether two addresses belong to the same subnet, decide if a route is missing, and recognise when ARP fails because the gateway is unreachable. Routing questions are basic but precise: static routes, default routes, and the difference between a connected and a learned route. The exam assumes you can subnet in your head and will not supply a calculator or extra time.

– Transport protocols, management tools, QoS, security, and redundancy

Layer 4 questions ask you to distinguish TCP from UDP in a given application context. Management protocols appear in scenarios where you must choose the secure option or identify which protocol fetches a configuration file. TFTP, FTP, SFTP, Telnet, and SNMPv2 are all in scope; you need to know which runs over UDP, which encrypts, and which is read-only. QoS is tested as a concept: why it matters in converged voice and data networks, and how priority queuing prevents packet loss for real-time streams. Basic security setup means recognising how to restrict management access and apply port security. STP, RSTP, and VSF appear in questions about loop prevention and stack behaviour; you must know what each technology prevents and how it changes failover time.

How Identify, describe, and apply foundational networking architectures and technologies is tested

At twenty-four percent, this topic supplies nearly a quarter of the paper. Items combine two or three concepts in a single stem: a VLAN misconfiguration that also involves a routing problem, or a QoS requirement that intersects with link aggregation. The examiners test application, not recall. You are given a network diagram, a set of symptoms, and four options that look plausible until you check them against layer interaction or protocol behaviour. Candidates lose marks by choosing the fix that addresses the wrong layer, by miscalculating a subnet boundary, or by confusing STP with VSF. The weight means you cannot afford to skip subnetting practice or assume that VLAN tagging will be straightforward. Every sub-topic here appears multiple times across the paper, often blended with material from later topics.

Where the first topic tested networking foundations, this one tests product knowledge specific to HPE Aruba Networking. You need to distinguish one switch family from another, match a feature set to a deployment scenario, and choose the correct management tool for a given task. The cost lies in confusing software capabilities with hardware limits, or assuming that every switch supports every feature.

– Product features and management options

You must recognise which HPE Aruba Networking switches are stackable, which support PoE budgets sufficient for high-density wireless deployments, and which are designed for the access layer versus the distribution or core. Management options include local CLI access, web GUI, and cloud-based control. Questions present a requirement such as zero-touch provisioning or centralised monitoring, and you select the product or management path that meets it. The exam does not ask for part numbers, but it does expect you to know that some models offer modular uplinks while others have fixed ports, and that this distinction affects scalability and redundancy design.

– Software and hardware differentiators

Software capabilities include stacking technologies like VSF, advanced routing features, and support for dynamic segmentation. You need to know which features require a software licence, which are included in the base image, and which are available only on certain hardware families. Hardware differentiators cover backplane capacity, port density, power budget, and form factor. A scenario might describe a branch site with limited rack space and a requirement for full Layer 3 routing; you must pick the switch that combines compact size with the necessary software feature set. Confusing a hardware limitation with a software restriction is a common trap.

– Management tool sets

HPE Aruba Networking switches can be managed via CLI, web interface, scripts, SNMP, Aruba Central, a mobile app, and REST APIs. Each tool suits a different use case: CLI for rapid troubleshooting, Central for multi-site orchestration, API for automation. Questions describe an operational requirement and ask which tool is most appropriate. You must know that SNMP is read-write but limited in granularity, that the mobile app offers quick status checks but not full configuration, and that scripting and API access require authentication and correct syntax. The exam assumes you understand the trade-off between ease of use and control depth.

How Identify, describe, and differentiate HPE Aruba Networking products' and solutions' functions and features is tested

At twenty-one percent, this topic appears in one in five questions. Items present a deployment brief or a feature requirement and ask you to select the correct product, software capability, or management tool. The examiners test differentiation: two switches may look similar, but one supports stacking and the other does not, or one includes a feature in the base licence while the other requires an upgrade. Candidates lose marks by choosing a product that lacks the necessary hardware or by recommending a management tool that cannot perform the stated task. The weight means you must study the product line in detail, not just the switching concepts. Knowing that Aruba Central handles cloud-based orchestration but cannot replace CLI access for all tasks, or that VSF stacking differs from chassis-based architecture, decides multiple answers.

Configuration tasks form the core of this topic. You are expected to know the command syntax, the order of steps, and how to verify that the change took effect. The risk is highest when you skip validation or apply commands in the wrong sequence, leaving the switch unreachable or the network partitioned.

– Initial setup and management access

You must configure hostname, IP address for management, default gateway, and user accounts with appropriate privilege levels. Questions present a switch that is unreachable after initial setup, and you identify the missing or incorrect command. Common traps include forgetting to assign the management VLAN an IP address, placing the management interface in the wrong VLAN, or failing to enable SSH while disabling Telnet. You also need to know how to set the system time, configure NTP, and restrict management access by source IP. The exam assumes you can type commands from memory and recognise syntax errors in a configuration snippet.

– Layer 2 technologies

VLAN creation, port assignment, and trunk configuration are tested alongside RSTP or MSTP setup. You must know how to create a VLAN, assign ports as tagged or untagged members, configure a trunk with allowed VLANs, and enable spanning tree with the correct mode. Link aggregation requires you to configure LACP on both ends of the bundle and verify that the links are active. LLDP configuration involves enabling the protocol and reading neighbour information to confirm physical topology. Questions show a partial configuration and ask what is missing, or they present output from a show command and ask you to interpret it.

– Layer 3 technologies and validation

Configuring IP addressing means assigning addresses to VLANs or routed interfaces, enabling IP routing, and adding static or default routes. You need to recognise when a switch requires a routing protocol versus static routes, and how to verify that routes appear in the routing table. Validation commands include show vlan, show running-config, show ip route, show lacp, and show spanning-tree. The exam tests your ability to read output and confirm that the configuration matches the requirement. A common mistake is assuming the configuration is correct because the command was accepted, without checking that the interface is up or the route is active.

How Install, configure, set up, and validate wired network solutions is tested

This topic accounts for twenty-two percent of the exam, making it the second-heaviest. Items present a configuration task or a partial config and ask you to complete it, correct it, or validate it. You may be shown a switch output and asked to identify the problem, or given a set of requirements and asked to choose the correct sequence of commands. The examiners test both syntax and logic: a command may be syntactically correct but applied to the wrong interface or VLAN. Candidates lose marks by confusing tagged and untagged port modes, by enabling RSTP on a subset of ports instead of globally, or by forgetting to save the configuration. The validation sub-topic is particularly punishing because it assumes you know which show command reveals the relevant state and how to interpret the output without a reference guide.

Troubleshooting questions test your ability to diagnose a fault, isolate the layer where it occurs, and choose the correct fix. The weight is smaller than configuration, but the items are harder because they require you to integrate knowledge from every earlier topic. A single question may involve VLANs, routing, spanning tree, and management access all at once.

How Troubleshoot, operate, and maintain HPE Aruba Networking solutions is tested

At seventeen percent, this topic supplies roughly one in six questions. Items describe a fault condition such as intermittent connectivity, slow throughput, or a host that cannot reach a gateway. You are given partial output from show commands or a network diagram, and you select the most likely cause or the correct diagnostic step. The examiners test your ability to eliminate incorrect hypotheses quickly. Candidates lose marks by jumping to a fix without confirming the symptom's layer, by choosing a tool that cannot reveal the necessary information, or by misreading command output. Troubleshooting tools include ping, traceroute, show commands for interface status and statistics, LLDP neighbour discovery, and log review. You must know which tool answers which question: ping tests reachability, traceroute reveals the path, show interfaces counts errors, and logs record state changes. The exam assumes you will not waste time running irrelevant commands.

Management and monitoring cover operational tasks that keep the network running after deployment. This includes firmware upgrades, configuration backups, log monitoring, SNMP setup, and user account administration. The entire sixteen percent sits in a single sub-topic, so the questions span a wide range of administrative procedures. The cost comes when you follow a procedure out of order or choose a management protocol that lacks the necessary security or functionality for the task at hand.

How Manage and monitor HPE Aruba Networking solutions is tested

This topic contributes sixteen percent of the exam, and every question addresses an operational best practice. Items ask you to choose the correct method for backing up a configuration, the safest procedure for upgrading firmware without causing an outage, or the right SNMP configuration to allow read-write access from a management station. You may be asked to interpret log messages, identify the cause of a recurring alert, or decide which monitoring tool provides the required visibility. The examiners test your understanding of risk: some procedures can be performed during business hours, others require a maintenance window, and some should never be done remotely without console access. Candidates lose marks by selecting a backup method that does not preserve the full configuration, by upgrading firmware without verifying compatibility, or by enabling SNMP write access without restricting the source IP. The single sub-topic means the questions are diverse, covering everything from password policy to syslog server configuration, so you cannot afford to skip any part of the administrative command set.