HP HPE6-A70 Exam

An Aruba solution uses AirMatch with the default AirMatch profile settings. A network administrator sees that a scheduled optimization was completed, but a plan was not deployed. Based on the exhibit, why did this occur?. A. The cost of the new plan exceeds the amount allowed by the feature license. B. The new plan did not offer significantly improved quality. C. The solution uses master-local mode. D. ARM is disabled in the radio profile, so AP radios are considered frozen.

Network administrators need to set up a WLAN that uses WPA2 encryption and authenticates users with a preshared key (PSK) that is the same for all users. Administrators do not see where they should specify the option for the preshared key. What should the administrators do?. A. Click Personal in the slide bar. B. Click the + icon in the Authentication server section. C. Return to the first page in the wizard and select the guest option. D. Configure an L3 authentication profile after the WLAN wizard is complete.

What is a reason for a company to choose to deploy an Aruba 7024 Mobility Controller (MC) rather than an Aruba 7010 MC?. A. to support 802.11ac Aps rather than only 802.11n APs. B. to support more wireless users. C. to support more POE devices directly connected to the MC. D. to support a faster firewall throughput rate.

A company wants to provide wireless access for guests with their Aruba solution. Which configuration feature requires the customer to purchase PEFNG licenses?. A. redirection of guests to an external captive portal. B. provision of DHCP services to unauthenticated guests. C. addition of custom rules to control access for authenticated guests. D. customization of the internal captive portal login page.

A company has an Aruba Mobility Master (MM)-based solution. A network administrator wants to collect and analyze information about clients and access points (APs) over extended periods of time. What should the administrator do to achieve this goal?. A. Add Aruba AirWave to the solution. B. Run a Traffic Analysis report on the MM. C. Make sure that MM has sufficient AppRF licenses. D. Enable archival from the MM interface Maintenance windows.

The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?. A. to create filter rules in order to control wireless user access to this application. B. to download a report about the usage of this application over time. C. to see more details about this application, such as a list of aggregated sessions. D. to see the break down for only roles, destinations, WLANs and devices that use this application.

What is a requirement for the Dashboard > Traffic Analysis window on the Aruba Mobility Master (MM) to show data?. A. Airmatch and ClientMatch must be enabled. B. The solution must have active PEFNG licenses. C. Firewall policies must include application filtering rules. D. WLANs must use the decrypt-tunnel forwarding option.

How can network administrators upgrade AirMatch on an Aruba Mobility Master (MM)?. A. Upgrade Client Match as part of a global software upgrade, and upgrade AirMatch separately as a loadable service module (LSM). B. Upgrade Client Match and AirMatch separately as loadable service modules (LSMs). C. Upgrade AirMatch and Client Match through a global software upgrade. D. Upgrade AirMatch as part of a global software upgrade, and upgrade Client Match separately as a loadable service module (LSM).

An AP operates on channel 6. Which device causes the most significant and consistent interference with the signal?. A. cellular phone. B. weather radar. C. wireless security camera operating on channel 8. D. AP operating on channel 11.

Based on the exhibit, what is the maximum number of APs that this Mobility Master (MM) solution can support?. 0. 1. 32. 500.

A network administrator needs to create an Aruba firewall rule that permits wireless users to receive DHCP settings when they first connect to the Aruba solution. What are the correct source and destination aliases for the rule?. A. source = any and destination = user. B. source = any and destination = any. C. source = user and destination = user. D. source = user and destination = any.

How can network administrator provide high availability for APs deployed in an Aruba Mobility Master (MM)-based architecture?. A. Establish clusters of Mobility Controllers (MCs). B. Configure MM to provide backup AP tunnel termination in case of controller failure. C. Deploy all licenses locally yo APs, so that they can continue to function if they lose contact with their controller. D. Configure APs to convert to controller-less Instant AP mode during controller failure.

A WLAN in an Aruba Mobility Master (MM)-based solution enforces Enterprise-WPA2 security and uses the tunnel forwarding mode. The company has an external RADIUS server. Which device exchanges RADIUS packets with the RADIUS server?. A. Mobility Controller (MC). B. wireless client. C. access point (AP). D. Mobility Master (MM).

A network administrator adds several new APs to an Aruba solution that uses AirMatch. The administrator does not want to change the channel for the existing APs, but wants the new APs to receive a provisional plan for their channels and power. What should the administrator do to meet this goal?. A. Run an on-demand quick AirMatch optimization. B. Run an on-demand incremental AirMatch optimization. C. Temporarily enable ARM on the existing and new APs, while AirMatch scheduling remains enabled. D. Temporarily disable AirMatch scheduling, and then enable ARM on the existing and new APs.

What is the minimum space between channels in the 2.4GHz range to prevent overlap?. A. 1 channel. B. 3 channels. C. 5 channels. D. 7 channels.

Which task can an Aruba Air Monitor (AM) perform?. A. Analyze wireless traffic patterns at the application level. B. Optimize RF through the AP channel and transmit power plans. C. Analyze RF signals to determine the cause of non-802.11 interference. D. Help to detect rogue APs in the environment.

A Mobility Controller (MC) runs ArubaOS 8. What is a valid reason for an administrator to set the MC to master-local mode?. A. The company already has a partially hierarchical deployment based on the 6.x code and wants to keep the current architecture. B. The company needs to manage third-party network infrastructure devices with the use of the master controller interface. C. The company wants a deployment architecture that allows administrators to configure all MC settings from a single location. D. The company requires a centralized licensing architecture that provides global license pools.

A network administrator wants to implement MAC filtering for the wireless network of a local financial firm to ensure that only employees can access the wireless network. What is a potential weakness of this solution?. A. MAC filters cannot be applied with WPA2 encryption. B. Authorized MAC addresses are visible in plaintext in the air and can be easily spoofed. C. Many popular clients do not have the capability to connect to WLANs that use MAC filters. D. MAC filters offer no protection against authorized users who try to connect unauthorized devices.

Which type of authentication server should administrators select to authenticate users to a ClearPass server?. A. Windows. B. RADIUS. C. TACACS+. D. LDAP.

A network administrator wants to use unique digital certificates installed on user devices to authenticate wireless users. Which EAP method should the RADIUS server and clients support?. A. PEAP and MS-CHAPv2. B. EAP-TLS. C. EAP-TTLS and MS-CHAPv2. D. LEAP.

A company has an Aruba solution. The company wants to host a guest login portal with this solution, and the login portal must gie guests the option to create their own login accounts. How can a network administrator help meet these criteria?. A. Choose the Internal captive portal with email registration option for the guest WLAN. B. Make sure to create a guest provisioning account for the guest WLAN. C. Disable authentication in the captive portal profile for the guest WLAN. D. Choose ClearPass or the other external captive portal option for the guest WLAN.

A network administrator needs to configure firewall rules for three roles: Finance Sales Employee Several rules apply to both the Employee and Sales roles, but not to the Finance role. What is the simplest way to configure these rules?. A. Define the Employee and Sales roles as internal roles, and then configure the rules as global rules for internal users. B. Apply these rules as a subnet-based policy, and then ensure that only Employee and Sales users are assigned IP addresses in that subnet. C. Select either the Employee or Sales role, and then configure these rules within the global policy. D. Create a policy with these rules, and then apply that policy to the Employee and Sales roles.

An Aruba Mobility Master (MM)-based solution has a WLAN that uses WPA2-Enterprise security. A test login on a wireless client fails. How can a network administrator determine whether the RADIUS server rejected the credentials or another issue occurred?. A. View Technical Support information for the MM. B. Ping the IP address configured as the RADIUS server. C. Use the MM AAA Server Test Diagnostic tool. D. Use the tools in the MM Dashboard > Security window.

What does an Aruba Mobility Master (MM) do before it deploys a configuration to a Mobility Controller (MC)?. A. It encrypts the configuration to be deployed and backs it up to a secure archive. B. It obtains the current configuration, encrypts it, and backs it up to a secure archive. C. It synchronizes the configuration with templates on Aruba AirWave. D. It removes any commands that are not supported on that MC or have dependency errors.

The exhibit shows output from a Mobility Master (MM) dashboard. What does the health status indicate?. A. It takes the AP about twice as long to send data to the client as expected if all transmissions succeeded. B. About half of the heartbeats the client sends reaches the Mobility Manager (MM). C. The maximum data rate that 802.11ac supports is about twice as high as the data rate the client uses. D. The client device only complies with about half of the rules in the endpoint health policy.

A network administrator creates the role employees and adds the rule to it: user any any permit The first several wireless clients assigned to the employees role are assigned IP addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees role are then assigned IP addresses in the 10.10.20.0/24. When the Aruba firewall matches traffic from these clients to the user any any permit rule, what does it do?. A. It drops traffic from wireless clients in both the 10.10.0/24 subnet and 10.10.20.0/24 subnet. B. It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet as long as the packet has a source IP. C. It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops the traffic from wireless clients in the 10.10.10.0/24 subnet. D. It permits the traffic from wireless clients in the 10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet.

A company has an Aruba solution. A network administrator wants to prevent wireless users from accessing shopping web sites with a bad reputation. What should the administrator set up to deny such traffic?. A. an AppRF engine. B. application filters in the Traffic Analysis dashboard. C. firewall access control rules that specify HTTP and HTTPS services. D. firewall application rules.

An Aruba solution supports a WLAN that uses WPA2-Enterprise security. Exhibit 1 shows the AAA policy for the WLAN. Users are supposed to be assigned to different roles after authentication. Network administrators test a connection with the employee user account. Exhibit 2 shows the status for the client after this test. What is a possible reason for the issue shown in Exhibit 2?. A. The shared key configured for the ClearPass server is incorrect. B. The RADIUS server is not correctly set up to send a user role for the employee account. C. MAC authentication is enabled on the WLAN, and the test device does not have an authorized address. D. The administrators entered the wrong password for the employee account.

A company has a single Aruba Mobility Master (MM)-based solution with two Mobility Controllers (MCs). Network administrators want APs in building 1 to support a WLAN but do not want APs in building 2 to support the WLAN. How can administrator ensure that they can enforce this rule as they set up the WLAN in the Mobility Master (MM) Interface?. A. Place APs in different buildings in different AP Groups. B. Assign APs in different buildings to different MM nodes. C. Configure APs in different buildings to use different frequency bands. D. Assign different radio profiles to APs in different buildings.

What is one difference between captive portal authentication and 802.1X authentication?. A. 802.1X authentication always authenticates the wireless client, while captive portal authentication always authenticates the wireless user. B. 802.1X authentication occurs at Layer 2, while captive portal authentication occurs at Layer 3. C. 802.1X authentication must use an LDAP server, while captive portal authentication can use a RADIUS server or an LDAP server. D. 802.1X authentication is typically implemented without encryption, while captive authentication is often combined with WPA or WPA2.

A company deploys a wireless network in a typical office environment with many surfaces where the signal can bounce. Which 802.11 technology uses the characteristics of this environment to increase wireless speeds?. A. Channel bonding. B. Multiple Input Multiple Output (MIMO). C. Transmit Power Control (TPC). D. QAM modulation.

What describes the behavior for this WLAN?. A. APs in the default group broadcast the SSID. Clients can connect to the WLAN on APs in the default group only. B. No APs broadcast the SSID. Clients cannot connect to the WLAN until administrators activate it. C. No APs broadcast the SSID. Clients can connect to the WLAN on APs in the default group only. D. APs in the default group broadcast the SSID. Clients can connect to the WLAN on APs in any group.

Assume that administrators accept the default forwarding mode for WLANs. How does wireless user traffic flow in a master-local architecture, and how does it flow in a Mobility Master (MM) architecture?. A. In the master-local architecture, all traffic is tunneled to the master controller to handle. In a MM architecture, all traffic is tunneled to the MM to handle. B. In both architectures, APs forward corporate user traffic locally and tunnel guest user traffic to a Mobility Controller (MC) to handle. C. In both architectures, traffic is tunneled to a Mobility Controller (MC) to handle. D. In the master-local architecture, traffic is tunneled to a local Mobility Controller (MC) to handle. In a MM architecture, all traffic is tunneled to the MM to handle.

A network administrator sets up the Exam_Employees WLAN on an Aruba solution with a default role of guest, as shown in the exhibit. To which users does the guest role apply?. A. users who successfully authenticate and are assigned to the default role by the RADIUS server. B. users who successfully authenticate and are not assigned a different role by the RADIUS server. C. users who have connected to the SSID, but have not yet attempted authentication. D. users who fail authentication.

Which settings can a Mobility Master (MM) deploy to Mobility Controllers (MCs) but master controllers CANNOT deploy to local controllers?. A. radio profiles. B. WLAN settings. C. Interface settings. D. AAA profiles.

A company has an Aruba Mobility Master (MM)-based solution. Where can network administrators look to monitor the health status of all controllers, APs, and clients?. A. the top banner. B. the MM Maintenance pages. C. the Performance dashboard. D. the Potential Issues dashboard.

A network administrator creates an employee WLAN on an Aruba solution that uses WLAN WPA2- Enterprise security and an external RADIUS server. When the administrator tests the WLAN, the test client receives limited connectivity and cannot access any resources, but the RADIUS server shows that the user authenticated successfully. What should the administrator check as a possible source of this issue?. A. the connectivity between the AP that the client is associated to and the MC. B. the firewall role and policy that apply to this user. C. the certificate on the RADIUS server. D. the connectivity between the Master Controller (MC) for the client and the RADIUS server.

How does a high-gain omni-directional antenna compare to a typical omni-directional antenna?. A. it provides more multi-user spatial streams. B. it provides more coverage in the horizontal direction than in the vertical direction. C. it provides more single-user spatial streams. D. it provides more coverage in both the horizontal and vertical directions.

A company has an Aruba solution and wants to provide guests with wireless access. The company wants to assign guests IP addresses in subnets that exist only within the Aruba solution. Which feature should network administrators set up so guests can send traffic on the Internet without changes to the company routing solution?. A. Enable NAT on the VLAN assigned to the guest WLAN. B. Set up a dynamic default gateway on the Mobility Controllers (MCs). C. Create destination NAT rules for the guest role. D. Enable policy-based routing for the guest traffic.

A company plans to deploy a Mobility Master (MM). The MM will manage 50 Mobility Controller (MC) appliances that will control a total of 700 APs, and 10 Virtual Mobility Controllers (VMCs) that will control a total of 200 APs. How many MM licenses does the company require?. A. 60. B. 210. C. 900. D. 960.

Which class of controller is more appropriate in a branch installation with up to 64 APs?. A. 7008. B. 7030. C. 7205. D. 7210.

A company has an Aruba Mobility Master (MM)-based solution that runs ArubaOS 8 and uses the default AirMatch and Client Match settings. The ARM profile has been disabled for 5GHz radios. How are channel and transmit power settings managed for these radios?. A. with legacy ARM. B. with Rule Based Client Match. C. with legacy Client Match. D. with AirMatch.

A network administrator creates a guest WLAN on an Aruba Mobility Master (MM). The exhibit shows some of the settings for the WLAN. How should the network administrator handle the Auth server settings?. A. Add an authentication server with the LDAP type and the IP address of the company AD server. B. Add an authentication server with the LDAP type and IP address 10.10.10.10. C. Add an authentication server with the RADIUS type and IP address 10.10.10.10. D. Add an authentication server with the RADIUS type and the IP address of the company AD server.

A network administrator needs to use Aruba AirWave to view statistics for an AP’s 802.11ac radio. How can the administrator update the information on-demand rather than wait the typical interval?. A. Click Poll Controller Now. B. Click the 802.11ac link. C. Log out of the interface and log back in. D. Refresh the browser.

A company has an Aruba solution. The company wants to support a guest WLAN with the internal captive portal, but the company also wants to develop their own custom portal pages. What correctly describes the level of customization that the internal captive portal supports?. A. The internal captive portal must use the default pages without modification, but administrators can upload pages developed externally. B. Administrators can modify the default internal captive portal pages, but cannot upload pages developped externally. C. Administrators can modify the default internal captive portal pages or upload pages developped externally. D. The internal captive portal must use the default pages without modification, and administrators cannot upload pages developped externally.

A company has a Mobility Master (MM)-based solution. How does a Mobility Controller (MC) behave if it loses contact with all MM nodes?. A. The MC loses all licenses and cannot support APs or clients. B. The MC retains its current licenses for 30 days. C. The MC contacts Aruba Activate and uses the licensing limits defined there. D. The MC maintains only licenses that have been locally installed on it.

Which Mobility Master (MM) dashboard should an administrator access to view a list of rogue and interfering APs?. A. Potential issues. B. Security. C. Performance. D. Network.

A company has a Mobility Master (MM)-based solution with an employee WLAN Several users report that they can connect to the WLAN, but they cannot access all of the resources that they should. Where should the network administrator look in the MM interface to find the roles to which these users are actually assigned?. A. Configuration > Policies & Roles. B. Dashboard > Security. C. Dashboard >Clients. D. Configuration >WlANs > Profiles > AAA Profile.

Network administrators use the wizard to create a WLAN that uses WPA2-Enterprise security to a RADIUS server at 10.21.98.55. They do not manually change any settings. Which device determines the EAP type that the wireless clients must support?. A. Mobility Master (MM). B. Mobility Controller (MC). C. RADIUS server. D. AP.

What is a key difference between an Aruba Air Monitor (AM) and an Aruba Spectrum Analyzer (SA)?. A. An AM detects threats such as rogue APs, while an SA analyzes RF conditions. B. An AM detects rogue APs and provides data services to clients, while an SA only detects rogue APs. C. An AM scans on only one 802.11 frequency band, while an SA scans on both 802.11 frequency bands. D. An AM both detects wireless intrusion attempts and mitigates them, while an SA only detects wireless intrusion attempts.

A company has an Aruba Mobility Master (MM)-based solution with a WLAN that assigns users to VLANs 10–19. The company wants the Aruba solution to act at Layer 3 to route wireless user traffic. What must network administrators configure to permit the solution to forward traffic correctly?. A. VLAN 10–19 interfaces and proper IP settings on the MM nodes. B. trunk ports that support VLANs 10–19 on the managed Mobility Controllers (MCs). C. VLAN 10–19 interfaces on the Mobility Controllers (MCs) as the default gateway for wireless users. D. trunk ports that support VLANs 10-19 on the MM nodes.

A network administrator has installed PEF licenses in the global pool of a Mobility Master (MM) solution. When the administrator tries to configure roles and policies, an error indicates that the PEF licenses must be installed. What should the administrator do to correct this issue?. A. Ensure the PEF licenses were installed at the Managed Network and not at the MM level. B. Enable Building 1 as a local license pool. C. Enable the PEF feature in the Global Usage window. D. Activate the PEF licenses through an Aruba Activate account.

What is one difference between how administrators can use the Mobility Master (MM) Interface as compared to the AirWave Management Platform?. A. AirWave shows trends for the past several minutes, while MM shows historical data. B. MM shows trends for the past several minutes, while AirWave shows historical data. C. AirWave shows the current signal level for the client connection, while MM does not show RF statistics. D. MM shows user and role information associated with clients, while AirWave does not.

Which authentication server option would the network administrator choose to authenticate a wireless user directly against an Active Directory (AD) domain controller without NPS or IAS?. A. LDAP server. B. RFC 3576 server. C. TACACS server. D. RADIUS server.

A network manager wants to implement an Aruba wireless solution that accommodates 802.1X with EAP-TLS. All wireless users will utilize Active Directory (AD) accounts to authenticate. Which device will the authenticator forward the authentication requests to in this type of solution?. A. APs. B. RADIUS server. C. Mobility Controller (MC). D. Mobility Master (MM).

A network administrator configures an Aruba Mobility Master (MM)-based solution to provide wireless access to employees. The solution must meet these criteria: Authenticate users to a network RADIUS server Enforce different Aruba firewall rules based on the user department How can the administrator meet these criteria in the simplest way?. A. Have the RADIUS server assign users in different departments to different VLANs. Apply firewall policies based on IP ranges. B. Have the RADIUS server send different roles for users in different departments. Apply role-based firewall policies. C. Create multiple zones on the MM. Assign different departments and sets of firewall policies to different zones. D. Create a different WLAN and SSID for each department. Apply different firewall policies to each WLAN.

An Aruba Remote AP (RAP) operates in split-tunnel mode. How does the AP forward traffic?. A. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller. B. It sends traffic designed to the corporate network in an IPsec tunnel to a central Mobility Controller (MC), and it bridges other traffic locally. C. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC). D. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally.

Which APs operate in an autonomous or standalone mode?. A. remote APs (RAPs). B. spectrum analyzers (SAs). C. mesh points (APs). D. instant AP (IAP) clusters.

Which feature is unique to 802.11ac Wave 2 access points?. A. band steering. B. multiple spatial streams. C. 40MHz channel bonding. D. multi-user MIMO (MU-MIMO).

What are two criteria that distinguish different Aruba Mobility Controller (MC) models from each other?. A. firewall speed and ability to act as a standalone controller or not. B. number of supported users and firewall throughput. C. number of supported APs and ability to support 802.11ac APs or not. D. number of supported users and ability to support 802.11ac APs or not.

A customer has a large campus that requires 400 Aruba 335 APs to support a total of 10,000 wireless users and 12Gbps of traffic. Although the customer wants two controllers for redundancy, each controller must be able to support all of the APs and users on its own. Which Aruba Mobility Controller models meet the customer requirements and DO NOT unnecessarily exceed them?. A. Aruba 7024 controllers. B. Aruba 7210 controllers. C. Aruba 7240 controllers. D. Aruba 7030 controllers.

What is a role fulfilled by an Aruba Mobility Master (MM)?. A. It forwards and routes traffic for wireless users across multiple sites. B. It terminates control tunnels for Aruba APs. C. It provides an advanced Web portal for onboarding Bring Your Own Device (BYOD) devices. D. It manages VLAN and routing configuration for multiple Mobility Controllers (MCs).

A company has an Aruba solution. Client 1 is assigned to the users1 role, and client 2 is assigned to the users2 role. The exhibits show current firewall rules for those roles. The network1 alias used to be 10.1.1.0/24, but the network administrator now changes the network1 alias to 172.16.1.0/24. Client 1 and Client 2 both send a packet destined to 172.16.1.10. How does the firewall handle these packets?. A. It permits the packet from Client 1 and denies the packet from Client 2. B. It permits both packets. C. It denies the packet from Client 1 and permits the packet from Client 2. D. It denies both packets.

What is a valid way to help the APs discover devices that can control them?. A. Set up an Aruba Central subscription, and ensure that APs can reach the Internet. B. Enable CPSec, and ensure the Mobility Master (MM) and Mobility Controllers (MCs) trust the Aruba certificates installed on the APs at the factory. C. Specify the Mobility Master (MM) IP address in DHCP option 43 on the network DHCP server. D. Map the Mobility Controller (MC) IP addresses to the aruba-master name on the network DNS server.

What is one reason for a network administrator to visit the Dashboard > Usage window on an Aruba Mobility Master (MM)?. A. to check license usage and determine the need for additional licenses. B. to analyze short terms trends in network usage by client, AP, and application. C. to view system usage statistics for the MM and troubleshoot potential issues. D. to generate reports about traffic patterns and network usage over the past several months.

A company wants to provide wireless access for visitors with their Aruba solution. Which configuration feature enables the guest to access the wireless network without authentication?. A. use of internal captive portal with email registration. B. addition of custom rules to control access for unauthenticated guests. C. use of internal captive portal with authentication. C. use of internal captive portal with authentication.

An Aruba solution runs ArubaOS 8 and uses a mobility master architecture. Which feature can network administrators use to balance wireless devices across APs on different channels?. A. AirMatch. B. Client Match. C. AppRF. D. ARM.

A company has a Mobility Master (MM)-based solution. A network administrator wants to monitor the types of applications in use in the wireless network. Which dashboard page in the MM interface should the administrator visit?. A. Security. B. Performance. C. Traffic Analysis. D. Network.

A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution will manage 20 Mobility Controller (MC) appliances that will control a total of 800 APs. How should the network administrator install the AP licenses?. A. 40 AP licenses on the MM. B. 400 AP licenses on the MM. C. 800 AP licenses on each MC. D. 800 AP licenses on the MM and 40 AP licenses on each MC.

Network administrators use the Aruba Mobility Master (MM) wizard to create a WLAN and do not manually alter any of the profiles for that WLAN. The exhibits show some of the settings for the WLAN. Some wireless users cannot successfully connect to the WLAN. Network administrators attempt to connect on their own machines with a test account, and the connection is successful. They attempt to connect with the same account on user clients, and the connection fails. Which issue could prevent authentication from completing correctly?. A. The user clients have unauthorized MAC addresses, so the RADIUS server rejects the authentication even though the username and password are correct. B. The user clients do not trust the RADIUS server certificate and are configured not to prompt users to trust new certificates. C. Some access points (APs) are not configured as clients on the RADIUS server, so user clients connected to them cannot authenticate. D. The RADIUS server has reached the maximum number of RADIUS clients that it can support, so it rejects new wireless clients.

A network administrator configures a guest WLAN on an Aruba Mobility Master (MM)-based solution. The exhibits show some of the settings for this WLAN. Which settings must the administrator configure on each Mobility Controller (MC) at the device level for this configuration to function properly?. A. an IPsec preshared key. B. CPSec certificates. C. a portal page. D. VLAN 99 IP settings.

Which pre-defined role allows DHCP, DNS, and internal captive portal redirection for a guest WLAN?. A. exam_guest-guest-logon. B. authorized. C. guest-logon. D. guest.

Which deployment option for Aruba Controllers is new to ArubaOS 8?. A. deployment as virtual appliances. B. deployment in standalone mode. C. deployment in master-local mode. D. deployment as branch office controller.

A company has an Aruba Mobility Master (MM)-based solution and needs a new WLAN for the corporate campus. A network administrator completes the creation of this WLAN, as shown in Exhibit 1. When the administrator tries to test a connection to the WLAN in various locations, the WLAN sometimes shows up in the list of WLANs on the client but sometimes does not. The administrator can see the WLAN in the list, as shown in Exhibit 2. A. The Mobility Master (MM) does not have an active PEFNG license. B. The WLAN is configured as a hidden SSID. C. The configuration is not deployed to the Mobility Controller (MC). D. The WLAN is configured at a lower level in the Managed Network hierarchy.

A company has a Mobility Master (MM)-based solution. There is a hardware issue with the MM appliance, and, as result, all connectivity is lost between the appliance and the network. The network manager is concerned about how this will impact licensing. How will the Mobility Controller (MC) be affected?. A. The MC maintains its current licenses for 30 days. B. The MC maintains only licenses that have been locally installed on it. C. The MC contacts Aruba Activate and uses the licensing limits defined there. D. The MC loses all licenses and cannot support APs or clients.

What is one difference between how a network administrator can monitor clients in the Mobility (MM) interface and in the AirWave Management Platform?. A. AirWave shows trends for the past several minutes, while MM shows longer trends. B. AirWave combines information from more sources, such as RADIUS authenticating servers and APs. C. AirWave shows the current signal level for the client connection, while MM does not show RF statistics. D. MM shows user and role information associated with clients, while AirWave does not.

A company has a Mobility Master (MM)-based solution with a guest WLAN. Users can connect to the WLAN, but they receive the error shown browser rather than see login page. Exhibit 2 shows the status for one of the guest clients. What is one issue that could cause the errors described?. A. The firewall blocks DHCP traffic between the guest clients and the DHCP server. B. The DHCP pool for guests does not assign users a DNS server address. C. The MM and Mobility Controllers (MCs) have invalid certificates. D. The Captive Portal is not enabled for the role to which these clients are assigned.

A network administrator examines a list of 2.4GHz clients with low performance in the Mobility Master (MM) dashboard. Which property for a client should pose a concern as a potential performance issue?. A. Radio PHY of HT 20MHz. B. Max speed of 72Mbps. C. SNR of 18. D. Usage of 10 MB.

If the decrypt-tunnel forwarding mode is selected in an employee WLAN, where is the user traffic decrypted?. A. at the switch. B. at the AP. C. at the controller. D. at the RADIUS server.

A company currently uses Instant APs (IAPs), all managed by a virtual controller. The company expects to double in size without the next 18 months. The network manager wants to purchase additional APs to service the increased traffic load. The network manager also wants to deploy a Mobility Controller (MC) to manage all APs. How should the network administrator adapt the current IAPs to a controlled architecture?. A. Manage both the MCs and IAP clusters with Aruba Central. B. Configure the IAPs to establish CPSec tunnels to the new MCs. C. Manage both the MCs and IAP clusters with a Mobility Master (MM). D. Convert the IAPs to Campus APs controlled by the new MCs.

A WLAN in an Aruba Mobility Master (MM)-based solution uses WPA2-Enterprise security. This WLAN currently authenticates users to Active Directory (AD), and users log in with their Windows domain credentials. Network administrators now want to authenticate the Windows clients as well, based on the client Computer Names. What should the administrators do on MM to achieve this goal?. A. Set up Machine Authentication on the WLAN. B. Set up Mac Authentication on the WLAN. C. Bind individual Mobility Controllers (MCs) to AD at the device level. D. Import the computer names from AD to the MM internal database.

When an Aruba solution uses AirMatch, which device generates the channel and power plan for an AP?. A. the AirWave Management Platform. B. the Mobility Master (MM). C. the Mobility Controller (MC) for the AP. D. the AP itself.

A network administrator creates a guest WLAN on an Aruba Mobility Manager (MM). The exhibits show some of the settings for the WLAN. The administrator does not change the policies for those roles. How does the firewall control guest clients when they first connect to the WLAN?. A. It permits them to send any DHCP traffic and DNS and web traffic to the Internet. It redirects web traffic destined to the private network to a login portal. B. It permits them to send any DHCP and DNS and it redirects all web traffic to a login portal. C. It permits them to send any DHCP and RADIUS traffic. It redirects all web traffic destined to the Internet to a login portal and drops web traffic destined to the private network. D. It does not permit them to send any traffic until they are authenticated.

The alias in the rule shown in the exhibit is network 10.1.1.0/24. A wireless client is assigned IP address 10.1.2.10/24 and the “admins” role. The wireless client at 10.1.2.10 attempts to initiate a Web session with a server at 10.1.1.2. A wired client at 10.1.1.3 attempts to initiate an SSH session with the wireless client at 10.1.2.10. How does the Aruba firewall handle these attempts?. A. The firewall drops the traffic from the wireless client. The firewall drops the traffic from the wired client. B. The firewall permits the traffic from the wireless client, but drops the return traffic from the server. The firewall drops the traffic from the wireless client. C. The firewall permits the traffic from the wireless client and also permits the return traffic from the server. The firewall permits the traffic from the wired client and also permits the return traffic from the wireless client. D. The firewall permits the traffic from the wireless client and also permits the return traffic from the server. The firewall drops the traffic from the wired client.

An Aruba solution has a WLAN that uses WPA2-Enterprise security. How are encryption keys dynamically managed for the wireless users?. A. The MM generates and distributes keys to clients and access points (APs). B. Administrators configure identical key strings on the Mobility Controllers (MCs) and wireless client 802.1X settings. C. Keys are generated and distributed securely during each wireless user authentication process. D. Keys are derived from the preshared key configured on the WLAN and on each wireless client.

A network administrator wants to assign an authentication server group to the WPA2-Enterprise WLAN. Which profile should the administrator modify?. A. Virtual AP. B. SSID. C. AAA. D. L2 Authentication.

A network administrator monitors an Aruba Mobility Controller with Aruba AirWave and sees the configuration status is Error. What should the administrator conclude?. A. AirWave checks the controller configuration and detects a syntax error. B. AirWave determines that the controller configuration does not match the template for its group. C. AirWave has a communication issue with the controller and cannot check the configuration. D. AirWave detects a mismatch with the controller configuration and software version.

How does WPA2 protect wireless user traffic in the air?. A. It provides data integrity with AES and no data privacy. B. It provides both data integrity and privacy with AES. C. It provides data privacy with TKIP and no data integrity. D. It provides data integrity with TKIP and data privacy with AES.

What is one networking setting that a network administrator can configure for roles in an Aruba solution?. A. DHCP pool. B. ClientMatch rules. C. source NAT. D. bandwidth limit.

A network administrator creates a user account on an Aruba Mobility Master (MM) with the guestprovisioning role. Which task does this user have the rights to perform?. A. set up portal pages. B. create guest user accounts. C. monitor guest clients. D. create guest WLANs.

What is required for a WLAN that uses WPA2-Enterprise security?. A. a Web server to host a login portal. B. a shared password to secure access to the WLAN. C. RADIUS server or servers. D. a policy to allow unauthenticated users to receive RADIUS.

A company has a Mobility Master (MM)-based solution with a guest WLAN. During the captive portal redirection, users who access a non-HTTPS Website see the error shown in the exhibit. How can a network administrator prevent this error?. A. Enable automatic CPSec certificate deployment. B. Replace the default Mobility Master certificate with a certificate that has the correct hostname. C. Replace the default server certificate for mobility controllers with a certificate signed by a trusted CA. D. Reconfigure the guest WLAN to use EAP methods that rely on passwords rather than certificates.

A network administrator reduces an AP radio transmit power from 18 dBm to 15 dBm. This is a loss of 3 dBms. What is the current power as a percentage of the original power?. A. 10%. B. 33%. C. 50%. D. 83%.

Which IEEE standard provides the highest transmission rates in the 2.4GHz frequency band?. A. 802.11a. B. 802.11ac. C. 802.11g. D. 802.11n.

A company plans to deploy a Mobility Master (MM). The MM will manage 50 Mobility Controller (MC) appliances that will control a total of 680 APs, and 10 Virtual Mobility Controllers (VMCs) that will control a total of 160 APs. How many MM licenses does the company require?. A. 60. B. 210. C. 900. D. 960.

A network administrator uses a wireless intrusion detection system (WIDS) to detect 802.11 association floods. At which layer do these attacks occur?. A. Layer 1. B. Layer 2. C. Layer 3. D. Layer 7.

Which task can an Aruba Spectrum Monitor (SM) perform?. A. Analyze wireless traffic patterns at the application level. B. Optimize RF through the AP channel and transmit power plans. C. Analyze RF signals to determine the cause of non-802.11 interference. D. Help to detect rogue APs in the environment.

A network administrator needs to specify a RADIUS server for an employee WLAN on an Aruba solution. What must the administrator enter in the Shared key field?. A. the password defined as the preshared key for the WLAN on the Mobility Master (MM) and on authorized wireless clients. B. the password configured in a user account with administrative rights on the RADIUS server. C. the password configured for RADIUS clients on the RADIUS server. D. the password defined for authorized wireless clients on the RADIUS server and also distributed to authorized wireless clients.

What is the difference between WPA and WPA2 encryption?. A. WPA encryption uses symmetric keys, and WPA2 encryption uses asymmetric keys. B. WPA encryption acts at Layer 3, and WPA2 encryption acts at Layer 2. C. WPA encryption works only with preshared key (PSK) authentication, and WPA2 encryption works with both PSK and 802.1X. D. WPA encryption uses TKIP by default, and WPA2 encryption uses AES by default.

A company has an Aruba Mobility Master (MM)-based solution. Where can a network administrator look to find a list of alerts about a variety of issues on the MM or managed devices?. A. the Potential Issues dashboard. B. the top banner. C. the MM Maintenance pages. D. the Performance dashboard.

A network administrator adds a global rule in the area shown in the exhibit. Where does the global rule take effect?. A. It immediately applies only to the guest role, as part of the final policy applied to the role. Administrators cannot apply the rule to other roles. B. It immediately applies to the guest role and other roles, as part of the first policy applied to the role. C. It immediately applies to the guest role and other roles, as part of the final policy applied to the role. D. It immediately applies only to the guest role and other roles, as part of the first policy applied to the role. Administrators can choose to apply the rule to other roles.

Which task can an Aruba Air Monitor (AM) perform?. A. Analyze wireless traffic patterns at the application level. B. Optimize RF through the AP channel and transmit power plans. C. Analyze RF signals to determine the cause of non-802.11 interference. D. Prevent client connections to rogue APs.

Which improvement does ArubaOS 8 offer for the Client Match feature?. A. It checks the compliance posture for Bring Your Own Device (BYOD) endpoints to improve security. B. It enables the application of unique CM rules for specific client types. C. It checks client behavior against a wider array of rules to detect more DoS attacks and intrusion attempts. D. It offloads client load balancing decisions to local controllers.

A company deploys an Aruba wireless solution for the first time. In which deployment is clustering supported?. A. deployment as Mobility Masters (MMs). B. deployment as a standalone VMC. C. deployment in 7000 Series standalone mode. D. deployment in master-local mode.

Which Aruba controller supports a maximum of 512 APs?. A. Aruba 7010. B. Aruba 7030. C. Aruba 7210. D. Aruba 7240.

Users to which this policy applies are unable to receive IP addresses with DHCP. How should the administrator fix the issue?. A. Change user to any in the user any svc-dhcp permit rule. B. Move the user any svc-dhcp permit rule to the bottom of the list. C. Remove the deny rule from the policy. D. Use the correct service alias in the user any svc-dhcp permit rule.

A network administrator examines a list of 2.4GHz clients with low performance in the Mobility Master (MM) dashboard. Which property for a client should pose a concern as a potential performance issue?. A. Radio PHY of HT 20MHz. B. Max speed of 72Mbps. C. Goodput data rate of 12 Mbps. D. Usage of 10 MB.

What is an example of a Layer2 wireless threat that a wireless intrusion detection system (WIDS) should detect?. A. 802.11 association floods. B. RF jamming. C. Bluetooth interference. D. spyware.

A company has an Aruba solution that is monitored by AirWave. Several users have recurring connectivity and performance issues with their wireless clients. How can network administrators use AirWave to minitor these clients more easily?. A. Specify the clients as Watched Cliesnts and view the tables and graphs for these clients. B. Click the Down icon in the Airwave banner to quickly see a list of issues with client connections. C. Use the Client > Tags windows to tag the client for periodic checks and analysis. D. Run Device Summary reports and filter for the client MAC addresses within the report.

An Aruba Mobility Master (MM)-based solution has two Virtual MM nodes, a primary and a backup node. The solution must support 30 Virtual Mobility Controllers (VMCs) that will support a total of 960 APs. Which VMC licenses meet the needs and DO NOT unnecessarily exceed them?. A. two 1000 VMC licenses (MC-VA-1000). B. one 1000 VMC license (MC-VA-1000). C. two 50 VMC licenses (MC-VA-50). D. one 50 VMC license (MC-VA-50).

What is one difference between an Aruba firewall access controle rule and an application rule?. A. An application rule cannot use the packet source and destination IP addresses as part of its match criteria. B. An access rule can filter non-IP traffic, as well as IPv4 and IPv6 traffic. C. An access rule cannot apply different actions to different types of traffic sent to the same destination. D. An application rule can filter traffic at a higher layer beyond the TCP or UDP port.

An Aruba solution runs ArubaOS 8 and uses a standalone controller architecture. Which feature can administrators use to optimize the channel and power plan for the APs?. A. ARM. B. Rule Based Client Match. C. AirMatch. D. AppRF.

A company has an Aruba Mobility Master (MM)-based solution. Under which circumstance will an AP radio change channel without the use of the Mobility Master (MM)?. A. when the MM detects that a different channel has significantly better quality. B. when the Mobility Controller (MC) detects a rogue AP on the channel. C. when the AP detects a large amount of interference on its channel. D. when the Client Match rules indicate that nearby clients do not support the current channel.

A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution will manage 10 Mobility Controller (MC) appliances that will control a total of 400 APs. How should the network administrator install the AP licenses?. A. 40 AP licenses on the MM and no licenses on the MC. B. 400 AP licenses on the MM and no licenses on the MC. C. 800 AP licenses on each MC and no licenses on the MC. D. 800 AP licenses on the MM and 40 AP licenses on each MC.

Which role must AP1 play?. A. Instant AP (IAP). B. Mesh Point AP. C. Mesh Portal AP. D. Remote AP (RAP).

The exhibit shows the AAA profile for a WLAN on an Aruba solution. This WLAN uses 802.1X to authenticate users to a RADIUS server. A user successfully authenticates with 802.1X, but the RADIUS server does not send a role assignment. How does the Aruba firewall handle the role assignment for this user?. A. It does not assign a role. B. It applies the Aruba VSA role employee. C. It assigns the logon role. D. It assigns the authenticated role.

What is one setting that a network administrator can configure for user roles in an Aruba solution?. A. DHCP pool. B. ClientMatch rules. C. source NAT. D. Maximum session.

What is a valid way to deploy an Aruba Mobility Master (MM)?. A. as a subscription-based service through the Aruba cloud. B. as a role on a Mobility Controller 7030 that is deployed as a standalone controller. C. as a virtual appliance on a server that meets the recommended hardware requirements. D. as a role on a Mobility Controller 7240 that is deployed as a master controller.

A company has a Mobility Master (MM) solution that manages Mobility Controllers (MCs) in several groups. The company has several WebCC licenses and wants to reserve these licenses for MCs in the Sunnyvale group only. How can a network administrator achieve this goal?. A. Associate the MAC addresses for the Sunnyvale MCs with the licenses when they are generated. B. Make sure to be at the Managed Network > Sunnyvale level in the MM Interface when the licenses are installed. C. Install the licenses on the MM, and allocate them to a dedicated local pool for the Sunnyvale group. D. Install the licenses directly on the MCs in the Sunnyvale group, and activate the licneses locally.

A company has an Aruba solution that supports an employee WLAN. How can network administrators control in which subnets users receive IP addresses?. A. Set the VLANs associated with desired subnets in the WLAN settings. B. Configure firewall policies that permit the desired subnet, and add them to the initial role for the WLAN. C. In the WLAN settings, configure User role rules with the desired subnet addresses as match criteria. D. Assign switch ports connected to APs to VLANs associated with the desired subnets.

What is an advantage for a network administrator to use AirWave over a Mobility Master (MM)?. A. ability to gather and analyze historical user data, and monitor client association and network usage trends. B. scans wireless client settings and brings those settings in compliance with corporate security policies. C. ability to monitor and manage a Mobility Controller (MC) to configure the WLAN. D. provides realtime firewall hits for client network troubleshooting.

For which use case should network administrators set up Aruba access points (APs) as multi-zone APs?. A. The company has multiple small branch offices where APs at each branch office must forward internet traffic locally and corporate traffic over a secure tunnel to a centralized Mobility Controller (MC). B. The company has some devices that support both 5GHz and 2.4GHz, and the APs must operate in both frequency bands. C. The company requires high availability for its wireless services, and APs must be able to be controlled by more than one Mobility Controller (MC) in case a controller fails. D. The company has a Mobility Manager (MM)-based solution that requires APs to terminate to multiple controllers that reside in different administrative domains.

An Aruba solution has a WLAN that uses WPA2-Personal security. How are encryption keys dynamically managed for the wireless users?. A. The MM generates and distributes keys to clients and access points (APs). B. Administrators configure identical key strings on the Mobility Controllers (MCs) and wireless client 802.1X settings. C. Keys are generated and distributed securely during each wireless user authentication process. D. Keys are derived from the preshared key configured on the WLAN and on each wireless client.

A company has a Mobility Master (MM)-based solution. A network administrator wants to monitor data transfer speed ranges of all currently connected clients. Which dashboard page in the MM interface should the administrator visit?. A. Security. B. Performance. C. Traffic Analysis. D. Network.

A company has many 7220 controllers in its Aruba wireless architecture. A network administrator wants to use the Traffic Analysis dashboard in order to monitor which type of applications is being used by wireless users. What is required for this implementation?. A. Airmatch and ClientMatch must be enabled. B. The solution must have active PEFNG licenses. C. Firewall policies must include application filtering rules. D. WLANs must use the decrypt-tunnel forwarding option.

A company currently uses 802.11ac Wave 1 as a wireless solution. They want to upgrade to 802.11ac Wave2. Which new feature will now be available with this upgrade?. A. band steering. B. multiple spatial streams. C. 40MHz channel bonding. D. multi-user MIMO (MU-MIMO).

A company has an Aruba solution with a guest WLAN named exam_guest. A network administrator creates the guest WLAN with the wizard and does not change any of the default roles. The authentication server does not send particular role assignments for authorized users. The company wants to deny guest access to specific IP rnages after the guests authenticate. For which role should the administrator create the rule to deny this traffic?. A. exam_guest-guest-logon. B. authorized. C. guest-logon. D. guest.

Which IEEE standard provides the highest transmission rates in the 5.0GHz frequency band?. A. 802.11a. B. 802.11ac. C. 802.11g. D. 802.11n.

A customer has a large campus that requires 400 Aruba 335 APs to support a total of 20,000 wireless users and 12Gbps of traffic. Although the customer wants two controllers for redundancy, each controller must be able to support all of the APs and users on its own. Which Aruba Mobility Controller models meet the customer requirements and DO NOT unnecessarily exceed them?. A. Aruba 7024 controllers. B. Aruba 7210 controllers. C. Aruba 7240 controllers. D. Aruba 7030 controllers.

The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?. A. to see the break down for only the roles, destinations, WLANs, and devices that use this application. B. to download a report about the usage of this application over time. C. to create filter rules in order to control wireless user access to this application. D. to set up bandwidth rule in order to control wireless user access to this application.

Which role must AP 1 play?. A. Remote AP (RAP). B. Mesh Portal AP. C. Instant AP (IAP). D. Mesh Point AP.