ARUBA

1 What is one setting that a network administrator can configure for user roles in Aruba Solution?. maximun sessions. sourceNAT. DHCP pool.

2 What is a role fulfilled by an aruba Mobility Master?. it manages VLAN and routing configuration for multiple Mobility Controllers (MCs). it terminates control tunnels for Aruba APs. It provides an advanced Web portal for onboarding Bring Your Own Device (BYOD) devices. It forwards and routes traffic for wireless users across multiple sites.

3 A company has Mobility master (MM)-based solution. How does a Mobility Controller (MC) behave if it losses contact with all MM nodes?. The MC maintains only licenses that have been locally installed on it. The MC retains its current licenses for 30 days. The MC contacts Aruba Activate and uses the licensing limits defined there. The MC loses all licenses and cannot support APs or clients.

4 An Aruba remote AP(RAP) operates in split-tunnel mode. How does AP forwards traffic?. It sends traffic desired to the corporate network in an IPsec tunnel to a Central Mobility Controller (MC) , and it bridges other traffic locally. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC).

5 Which improvement does ArubaOs 8 offer for the client Match feature?. It offloads client balancing deceisions to local controller. It enables the application of unique CM rules for specific client types. It checks the compliance posture for Bring Your Own Device BYOD endpoints to improve security.

6 For which use case should network administrators set up Aruba access points (Aps) as multi-zone Aps?. The company has MM-based solutions that requires Aps to terminate to multiple controllers that reside in different domains. The company has some devices that support both 5GHz and 2.4GHz, and the APs must operate in both frequency bands. The company has multiple small branch offices where APs at each branch office must forward internet traffic locally and corporate traffic over a secure tunnel to a centralized mobility controler MC.

7 A company currently uses 802.11ac Wave 1 as a wireless solution. They want to upgrade to 802.11ac Wave 2. Which new feature will now be available with this upgrade?. Multi-user MIMO (MU-MIMO). band steering. multiple spatial streams. 40MHz channek bonding.

8 A company has Aruba solution and wants to provide guest with wireless access. The company wants to assign guest IP addresses in subnets that exist only with in the aruba solution. Which feature should network administratos set up so guests can send traffic on the internet without changes to the company routing solutions?. Create destination NAT rules for the guest role. Set up a dynamic default gateway on the Mobility Controllers (MCs. Enable NAT on the VLAN assigned to the guest WLAN. Enable policy-based routing for the guest traffic.

9 A customer has a large campus thet requires 400 Aruba 335 Aps, to support a total of 20,000 wireless users and 1.2Gbps traffic. Although the customer wants two controllers for reduandacy, each controller must be able to support all of the Aps and usres on its own. 7210. 7024. 7240. 7030.

10 PENDIENTE A company has an Aruba Solution that is monitored by AirWave. Several users have recurring connectivity and performance issues with their wireless clients. How can network administrators use AirWave to monitor these clients more easily. Use the client> tags windows to tag the clients for periodic checks and analysis. run device summary reports and filter for the client MAC addresses withinthe report. specify the clients as watched clients and view the tables and graphs for these clients. click the down icon in the Air Wave banner to quickly see a list of issues with client connections.

11 A company has a Mobility Master (MM)-based solution with guest WLAN. During the captative portal redirection, users who access a non-HTTPS Website see the error hown in the exhibit. Replace the default server certificate for mobility controllers with a certificate signed by a trusted CA. Enable automatic CPSec certificate deployment. Replace the default Mobility Master certificate with a certificate that has the correct hostname. Reconfigure the guest WLAN to use EAP methods that rely on passwords rather than certificates.

12 A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution manage 10 Mobility Controller (MC) appliances that will control a total of 400 Aps. How should the network administrator install the AP licences?. 400 AP Licenses on the MM and no licences on the MC. 40 AP licenses on the MM. 800 AP licenses on each MC. 800 AP licenses on the MM and 40 AP licenses on each MC.

13 PENDIENTE A network administrator reduces an AP radio transmit power from 18 dBm to 15 dBm. This is a loss of 3 dBms. What is the current power as a percentage of the original power?. 10%. 33%. 50%. 83%.

29 Network administrator use the wizard to créate WLAN that uses WPA2-Enterprise security to RADIUS server at 10.27.83.04. They do not manually change any settings. RADIUS server. Mobility Controller. AP. Mobility Master.

30 .A Company current uses instant APs (IAP). All managed by virtual controller. The Company expects to doublé in size within the next 16 months. The network manager wants to purshase additional APs to service the incressed traffic load. The network manager also wants to deploy a mobility controller (MC) to manager all APs. How should the networks administrator adapt the current IAP to de controller architecture?. Managed both the MCs and IAP clusters with Mobility Master (MM). Managed both the MCs and IAP clusters with Aruba Central. Convert the IAP to Campus APs, controller the new MCs. Configure the IAP to estabilish CPSec tunnels to the new MCs.

37 what is a valid way to deploy an aruba mobility master (MM). as a vistual appliance on a server that meets the recommended hardware requirements. as a subscription-based service through the aruba cloud.

36 A network administrator sets up the exam_employees WLAN on an Aruba solution with a default role of guest, as shown in the exhibit. to which users does the guest role apply. user who fail authentication. user who seccessfully authenticate and are assigned to the default role by the RADIUS server. user who seccessfully authenticate and are not assigned a different role by the RADIUS server.

35 An Aruba Mobility Master (MM)-based solution has a WLAN that uses WPA2-Enterprise security. A test login on a wireless client fails. How can a network administrator determine whether the RADIUS server rejected the credentials or another issue occurred?. View Technical Support information for the MM. Ping the IP address configured as the RADIUS server. Use the MM AAA Server Test Diagnostic tool. Use the tools in the MM Dashboard > Security window.

34 A network administrator configures this policy. use tha correct service alias in the -- user any svc-dhcp permit-- rule. change --user-- to --any-- in the -- user any scv-dhcp permit-- rule.

33 which IEEE standard provides the highest trasmission rates in the 5.0 GHz frequency band?. 802.11a. 802.11ac. 802.11g. 802.11n.

28 A network administrator creates a guest WLAN on an Aruba Mobility Manager (MM). The exhibits show some of the settings for the WLAN. The administrator does not change the policies for those roles. How does the firewall control guest clients when they first connect to the WLAN?. It permits them to send any DHCP traffic and DNS and web traffic to the Internet. It redirects web traffic destined to the private network to a login portal. It permits them to send any DHCP and DNS and it redirects all web traffic to a login portal. It permits them to send any DHCP and RADIUS traffic. It redirects all web traffic destined to the Internet to a login portal and drops web traffic destined to the private network. It does not permit them to send any traffic until they are authenticated.

31 A company has an Aruba Mobility Master (MM)-based solution and needs a new WLAN for the corporate campus. A network administrator completes the creation of this WLAN, as shown in Exhibit 1. When the administrator tries to test a connection to the WLAN in various locations, the WLAN sometimes shows up in the list of WLANs on the client but sometimes does not. The administrator can see the WLAN in the list, as shown in Exhibit 2. The Mobility Master (MM) does not have an active PEFNG license. The WLAN is configured as a hidden SSID. The configuration is not deployed to the Mobility Controller (MC). The WLAN is configured at a lower level in the Managed Network hierarchy.

32 PENDIENTE What is an advantage for a network administrator to use AIRWave over a Mobility Master (MM)?. scan Wireless client settings and brings those settings in compliance with corporate security policies. ability to monitor and manage a Mobility controller(MC) to configuee the wlan. Provides realtime firewall hits for client network troubleshooting. ability to gather and analyze historical user data, and monitor client association and network usage trends.

38 PENDIENTE A network administrator examines a list of 2.4GHz clients with low performance in the Mobility Master (MM) dashboard. Which property for a client should pose a concern as a potential performance issue?. Radio PHY of HT 20MHz. Max speed of 72Mbps. SNR of 18. Usage of 10 MB.

39 a company an aruba wireless solution for the firts time in which deployment is clustering supported. deployment as mobility masters MMs. deployment in master local mode. deployment in 7000 series standalone mode. deployment as a standalone VMC.

40 whast is one difference between an aruba firewall access control rule and an application rule?. an application rule cannot use the packet source and destination IP addresses as part of its match criteria. an application rule can filter traffic at a higher layer beyond the TCP of UDP port. an application rule cannot apply different actions to different types of traffic sent to the same destination. an application rule can filter non-IP Traffic, as well as IPv4 and IPv6 traffic.

41 A company wants to provide wireless access for visitors with their Aruba solution. Which configuration feature enables the guest to access the wireless network without authentication?. use of internal captive portal with email registration. addition of custom rules to control access for unauthenticated guests. use of internal captive portal with authentication. redirection of guests to an external captive portal that provides encryption services.

42 a company has a mobility master MM solution that MANAGES MOBILI CONTROLLERS MCs in several groups. the company has several webCC licenses and wants to reserve these licenses for MCs in the sunnyvale group only. associate the MAC addresses for the sunnyvale MCs with the licenses when they are generated. install the licenses on the MM and allocate them to a dedicated local pool for the sunnyvale group. install the licenses directly on the MCs in the sunnyvale group, and activate the licenses locally.

43 Which role must AP 1 play?. mesh point AP. mesh portal AP. remote AP RAP. instant AP IAP.

44 The exhibit shows the AAA profiles for a WLAN on an Aruba solution. This WLAN uses 802.1x to authenticate users to a REDIUS server. A user successfully authenticates with 802.1x, but the RADIUS server does not send a role How does the Aruba firewall handle the role assignment for this user. It applies teh aruba VSA role employee. it does not assign a role. it assings the logon role.

45 If the decrypt-tunnel forwarding mode is selected in an employee WLAN, where is the user traffic decrypted?. at the switch. at the AP. at the controller. at the RADIUS server.

46 a company has many 7220 controllers in its Aruba Wireless architecture, a network administrator wants to use the traffic analysis deshboard in order to monitor which type of application are being used by wireless users. what is required for this implementation?. the solution must have active PEFNG licnses. WLANs must use thge decrypt-tunnel forwarding option. AirMatch and clientmatch must be enabled.

47 Which Aruba Controller supports a maximum of 512 APs?. Aruba 7210. Aruba 7030. Aruba 7240. Aruba 7010.

48 what is required for a WLAN that uses WPA2-Enterprise security. a Web server to host a login portal. a policy to allow unauthenticated users to receive RADIUS. RADIUS server or servers. a shared password to secure access to the WLAN.

49 An Aruba solution has a WLAN that uses WPA2-personal security, How are encryption keys managed for wireless trafiic in this WLAN. Keys are derived from the preshared key configured on the WLAN and on each wireless client. Keys are dynamically generated and distributed securely during each wireless user authentication process. The MM generates and distributes keys to clients and access points (APs). Administrators configure identical key strings on the Mobility Controllers (MCs) and wireless client 802.1X settings.

50 A network administrator monitors an Aruba Mobility Controller with Aruba AirWave and sees the configuration status is Error. What should the administrator conclude?. AirWave checks the controller configuration and detects a syntax error. AirWave determines that the controller configuration does not match the template for its group. AirWave has a communication issue with the controller and cannot check the configuration. AirWave detects a mismatch with the controller configuration and software version.

51 A company has a Mobility Master (MM)-based solution. A network administrator wants to monitor the types of applications in use in the wireless network. Which dashboard page in the MM interface should the administrator visit?. Security. Performance. Traffic Analysis. Network.

25 An AP operates on channel 6, Which device causes the most significant and consistent interference with the signal?. AP operating on channel 11. wireless security camera operating on channel 8. cellular phone. weather radar.

24 when an Aruba solution uses AirMatch, which device generates the channel and power plan for an Ap. the mobility master MM. the Air Wave management platform. the mobility controller MC for the AP. the AP itself.

14. An Aruba Mobility Master MM-based solution has two Virtual MM nodes, a primary and a backup node . the solution must support 30 Virtual Mobility controllers VMCs that will support a total of 960 APs. Which VMC licenses mett the needs and DO NOT unnecessarity exceed them ?. one 50 VMC license MC-VA-50. two 1000 VMC license MC-VA-1000. two 50 VMC license MC-VA-50. one 1000 VMC license MC-VA-1000.

15 a company has Aruba mobility master MM-basedsolution under which circumstance will an AP radio change channel without the use of the mobility master MM. when the MM detects that a different channel has significantly better quality. when the AP detects a large amount of interefrence on its channel. when tha mobility controller MC detects arogue AP on the channel. when the match rules indicate that nearby clients do not support the current channel.

16 PENDIENTE A network administrator needs to specify a RADIUS server for an employee WLAN on an Aruba solution. What must the administrator enter in the Shared key field?. the password defined as the preshared key for the WLAN on the Mobility Master (MM) and on authorized wireless clients. the password configured in a user account with administrative rights on the RADIUS server. the password configured for RADIUS clients on the RADIUS server. the password defined for authorized wireless clients on the RADIUS server and also distributed to authorized wireless clients.

23 A company has an Aruba solution with a guest Wlan named exam_guests a network administrator creates the wizard and does not change any of the default roles... etc. guest-logon. guest. exam_guest-guest-logon. authorized.

22 A network administrator wants to assign an authentication server group to the WPA2-Enterprise WLAN. Which profile should the administrator modify?. Virtual AP. SSID. AAA. L2 Authentication.

21 What is one reason for a network administrator to visit the Dashboard > Usage window on an Aruba Mobility Master (MM)?. to check license usage and determine the need for additional licenses. to analyze short terms trends in network usage by client, AP, and application. to view system usage statistics for the MM and troubleshoot potential issues. to generate reports about traffic patterns and network usage over the past several months.

20 A company has an Aruba Mobility Master (MM)-based solution. Where can network administrators look to monitor the health status of all controllers, APs, and clients?. the top banner. the MM Maintenance pages. the Performance dashboard. the Potential Issues dashboard.

19 An Arubasolition runs ArubaOS 8 and uses a standalone controller architecture. Which feature con administrators use to optimize the channel and power plan for the APs. ARM. AppRF. Rule Based Client match. AirMatch.

17 PENDIENTE A WLAN in an Aruba Mobility Master (MM)-based solution enforces Enterprise-WPA2 security and uses the tunnel forwarding mode. The company has an external RADIUS server. Mobility Controller (MC). wireless client. access point (AP). Mobility Master (MM).

18 PENDIENTE a company has an aruba selution that supports an employee WLAN how can network administrators control in which subnets users recalve IP Addresses?. configure firewall policies that permit the dsired subnet, and add them to the initial role for the WLAN. assigh switch ports connected to APs to VLANs associated with the desired subnets. in teh WLAN settings configure user role rules with the desired subnet addresses as match criteria. set the VLANs associated with desired subnets in the WLAN settings.

53 PENDIENTE what is one difference between WPA an WPA2 encryption. WPA encryption uses symmetric keys, and WPA2 encryption uses asymmetric keys. WPA encryption acts at Layer 3, and WPA2 encryption acts at Layer 2. WPA encryption works only with preshared key (PSK) authentication, and WPA2 encryption works with both PSK and 802.1X. WPA encryption uses TKIP by default, and WPA2 encryption uses AES by default.

54 PENDIENTE How does WPA2 protect wireless user traffic in the air?. It provides data integrity with AES and no data privacy. It provides both data integrity and privacy with AES. It provides data privacy with TKIP and no data integrity. It provides data integrity with TKIP and data privacy with AES.

55 PENDIENTE A network administrator configures a guest WLAN on an Aruba Mobility Master (MM)-based solution. The exhibits show some of the settings for this WLAN. Which settings must the administrator configure on each Mobility Controller (MC) at the device level for this configuration to function properly?. a portal page. VLAN 99 IP settings. CPSec certificates. an IPsec preshared key.

56 PENDIENTE A company has a Mobility Master (MM)-based solution with an employee WLAN Several users report that they can connect to the WLAN, but they cannot access all of the resources that they should. Where should the network administrator look in the MM interface to find the roles to which these users are actually assigned?. Configuration > Policies & Roles. Dashboard > Security. Dashboard >Clients. Configuration >WlANs > Profiles > AAA Profile.

57 PENDIENTE Which settings can a Mobility Master (MM) deploy to Mobility Controllers (MCs) but master controllers CANNOT deploy to local controllers?. radio profiles. AAA profiles. WLAN settings. VLAN settings.

58 PENDIENTE What is an example of a layer 2 wireless threat that a wireleless intrusion detection system WIDS should detect?. RF Jamming. Spyware. 802.11 association floods. bluetooth interference.