Aruba Certified Mobility Professional 6.4 ACMP_6.4 Questions

1. Which dual radio access point models support concurrent operations in the 2.4Ghz band as well as the 5Ghz band? (Choose three)

2. Which of the following APs do NOT support dual radio operations? (Choose two)

3. An AP135 has been configured with 3 SSIDs supported on both 2.4Ghz and 5Ghz bands.

How many GRE tunnels will be created between the AP 135 and the controller?

4. Centralized licensing is not in use on an Aruba based network which has a Master and three local controllers. No APs terminate on the Master controller. Roles and Firewall policies need to be created and applied, hence PEF-NG license is required.

On which controller should the license be installed?

5. What information do you need to generate a feature license key for an Aruba controller?

6. What are the PEF-NG license limits based on?

7. Which of the following licenses are consumed by Mesh APs advertising an SSIDs?

8. The permanent licenses on the controller will be deleted with the use of which command?

9. A network administrator wants to terminate VPN sessions on a local controller in the DMZ.

Which statement is true about the PEF-VPN license?

10. What is the best practice regarding licensing for a backup master to support Master Redundancy in a network without centralized licensing?

11. Which of the following licenses can be included in the licensing pool for centralized licensing? (Choose three)

12. By default Centralized licensing messages between master and local controllers are sent ___________________.

13. Which of the following will occur if a master license server fails with no standby server present? (Choose two)

14. A evaluation License is valid for a maximum of ________?

15. The following licenses have been installed on these controllers: Master-1: 8 AP licenses Local-2 : 8 AP licenses Local-3 : 5 Evaluation AP Licenses Local-4 : 10 Factory installed AP licenses Central Licensing is enabled.

What is the AP Pool capacity on the Central License Server?

16. Centralized licensing is not enabled in a network of 1 Master and 2 Local controllers, what should be the license count on all controllers to terminate 8 APs on each Local controller and support Local redundancy?

17. Which may be applied directly to an VLAN interface? (Choose three)

18. When creating a firewall rule on an Aruba controller, which parameter is optional?

19. What are valid methods of blacklisting a device? (Choose three)

20. What is the blacklist default time?

21. An administrator creates a WLAN with an unmodified default AAA profile.

What is the default role the user is placed in?

22. What is the first role a user is given when a user associates to an open WLAN?

23. Which of the following could be used to set a user's post-authentication role or VLAN association? (Choose two)

24. Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)

25. Which netdestination aliases are built into the controller? (Choose three)

26. What are aliases used for?

27. Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choose two)

28. What is true about Global Session ACL? (Choose two)

29. When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

30. The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).

Which is the default use of this statement in an Aruba controller configuration?

31. The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (src­nat).

Which is a use of this statement in an Aruba configuration?

32. Review the following truncated output from an Aruba controller for this item.

(example) #show rights logon

access-list List

----------------

Position Name Location

-------- ---- --------

1 logon-control

2 captiveportal

logon-control

-------------

Priority Source Destination Service Action

-------- ------ ----------- ------- ------

1 user any udp 68 deny

2 any any svc-icmp permit

3 any any svc-dns permit

4 any any svc-dhcp permit

5 any any svc-natt permit

captiveportal

-------------

Priority Source Destination Service Action

-------- ------ ----------- ------- ------

1 user controller svc-https dst-nat 8081

2 user any svc-http dst-nat 8080

3 user any svc-https dst-nat 8081

4 user any svc-http-proxy1 dst-nat 8088

5 user any svc-http-proxy2 dst-nat 8088

6 user any svc-http-proxy3 dst-nat 8088

Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.

What will happen?

33. Refer to the following configuration segment for this item.

ip access-list session anewone

user network 172.16.1.0 255.255.255.0 any permit

user host 172.16.1.1 any deny

user any any permit

An administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, which statements best describe this policy? (Choose two)

34. Refer to the following configuration segment for this item.

netdestination "internal"

no invert

network 172.16.43.0 255.255.255.0 position 1

range 172.16.11.0 172.16.11.16 position 2

!

ip access-list session "My-Policy"

alias "user" alias "internal" service_any permit queue low

!

A user frame is evaluated against this firewall policy with the following attributes:

Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80

Referring to the above file segment, how will the frame be handled by this firewall policy?

35. ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user any any permit

host 10.1.1.1 host 10.2.2.2 any deny

A user sends a frame with the following attributes:

Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25

Based on the above Mobility Controller configuration file segment, what will this policy do with the user frame?

36. ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user host 10.1.1.1 any deny

user any any permit

Referring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choose two)

37. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication fails and user authentication passes, which role will be assigned?

38. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication passes and user authentication fails, which role will be assigned?

39. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication fails and user authentication fails, which role will be assigned?

40. What can NOT be configured from the Aruba controller configuration wizards?

41. An administrator is setting up a factory default controller. No new AP groups were created.

When adding a WLAN SSID in the Campus WLAN wizard what AP group is available?

42. The reusable Aruba Controller wizards are accessible in what way?

43. The Controller wizard enables which of the following controller clock configurations? (Choose three)

44. When configuring ports in the Controller wizard, which of the following are NOT configuration options? (Choose two)

45. By default, which CLI based remote access method is enabled on Aruba controllers?

46. An Aruba controller can be accessed with which CLI based remote access methods? (Choose two)

47. As an admin/root user, what other type of role-based management users can be created on Aruba controllers?

48. Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba Controllers?

49. Referring to the above screen capture, if an administrator desires to change a specific AP into a Spectrum Monitor without assigning the AP to a new group, which menus could be used?

50. A customer forgot all passwords for a controller.

What method could you use to reset the passwords?

51. With CPSec disabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

52. In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which other element?

53. When an 802.11 client roams what device decides when to move the client to another AP?

54. The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1. All controllers are configured with the wireless user VLAN 201. A wireless user associates with AP 1. Only L2 mobility is enabled.

Which elements will know about this association?

55. Which command will show all client association history?

56. With CPSec enabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

57. A client Roams from one Local controller-1 to another Local controller-2. The controllers are in different subnets and L3 Mobility is enabled.

How is the client traffic sent back to Local-controller-1?

58. A network needs to implement L3 roaming. On the Master Controller, the administrator, enabled IP mobility, created a Domain and created the HAT table with all the IP addresses of the local controllers. He then enabled Mobility on the VAPs.

The configuration was then saved. L3 Mobility is still not working, what could be the cause? (Choose two)

59. By default, how long will an AP scan a single channel when ARM is enabled?

60. Which actions does ARM (Adaptive Radio Management) perform? (Choose two)

61. Which of the following metrics does the ARM feature use to calculate the optimal channel and power level for Access Points? (Choose two)

62. How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHz radios of Aruba APs?

63. Which of the statements below are TRUE regarding ARM's Spectrum Load Balancing feature? (Choose two)

64. What is the function of Band Steering?

65. What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

66. Which of the following statements is true of Spectrum Mode?

67. Which ARM feature addresses the issue of sticky clients by moving clients to associate to APs with better 802.11 signal quality?

68. Aruba Client Match does NOT use which of the following parameters to determine the best AP for a client connection?

69. What is the function of Station Handoff Assist, if enabled?