Refer to the exhibit. The administrator expects the AP to connect to a cluster, but the AP fails to
connect. The administrator examines the configuration of an AP from apboot mode shown in the
exhibit. What can the administrator determine about the configuration of the AP? The AP is configured to terminate on a non-cluster Mobility Controller. The AP is configured as a RAP to terminate on a stand-alone controller. The AP is configured as a RAP to terminate on a Mobility Master. The AP is configured to terminate on a Mobility Controller in a cluster.
Refer to the exhibit. An administrator implements the MultiZone feature. The administrator sets up
five zones as shown in the exhibit:
- Zone A has six controllers that form a cluster.
- Zone B has three controllers that from a cluster.
- Zones C, D, and E have a single standalone controller each.
A total of 13 VAPs are created across the five zones. A zone needs to accept RAP connections
form branch offices. All zones have the same AP Group name. One of the zones will not accept
connections from the MultiZone APs.
Which could be a cause of this problem? A. RAPs are used in the configuration. B. The number of zones exceeds the maximum limit of four zones. C. AP Group names are different for each zone. D. The number of VAPs exceeds the maximum limit of 12 VAPs.
An administrator creates service-based policies for AirGroup on the Mobility Master (MM).
The administrator can define location-based policy limits based on which information? A. AP names, AP groups, controller names, and controller groups B. AP Fully Qualified Location Names (FQLNs) and controller Fully Qualified Domain Names(FQDNs) C. AP names, AP groups, and AP Fully Qualified Location Names (FQLNs) D. Controller names, controller groups, and controller Fully Qualified Domain Names (FQDNs).
A branch office location has two buildings: an office and a small warehouse that are within 20
meters of each other. A RAP at the branch office provides connectivity to the corporate office
network. This RAP is also configured as a Remote Mesh Portal (RMP). Which solution should the
administrator implement to provide connectivity between the office and small warehouse buildings
at the branch office location? A. Deploy a Remote Mesh Portal in the warehouse building to connect to the Remote Mesh
Portal in the office building. B. Deploy a Remote Mesh Point AP in the warehouse building to connect to the Remote Mesh
Portal in the office building. C. Deploy an ArubaOS-Switch in the warehouse building with tunneled node to connect to the
Remote Mesh Portal in the office building. D. Deploy a Mesh Point AP in the warehouse building to connect to the Remote Mesh Portal in
the office building.
An administrator needs to authenticate users connected to an ArubaOS-Switch. The Aruba
Mobility Controller (MC) authenticates the user and assigns user roles to wired users. Which
mode should the administrator configure on the MC? A. Per-user tunneled node B. Per-port tunneled node C. VLAN tunneled node D. Split-tunneled node.
An administrator wants to add a new folder in AirWave. Where would the administrator perform this action? A. in AMP Setup B. in AP/Devices C. in Groups D. in Device Setup.
An administrator uses a ClearPass server to perform user authentication and download the role
configuration that should be applied to the user's session. The server is associated to an AAA
profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the
default role. What must the administrator do to ensure that the role is downloaded and used? A. Enable download role for CPPM in the VAP's WLAN profile. B. Enable server derivation in the ClearPass' RADIUS configuration. C. Enable server derivation in the server group. D. Enable server derivation in the AAA Server Group.
An administrator deploys an Aruba wireless solution comprised of:
- a pair of Mobility Masters (MMs)
- multiple Mobility Controllers (MCs) and virtual Mobility Controllers
(VMCs)
- an AirWave server
- a ClearPass server
The Aruba Mobility solution runs ArubaOS 8.X.
Which component in this environment globally defines and deploys VLANs for wireless users? A. Mobility Controller or Virtual Mobility Controller B. AirWave server C. Mobility Master D. ClearPass server.
A cluster has two Aruba 7240 Mobility Controllers (MCs) and two Aruba 7220 Mobility Controllers
(MCs). How is the cluster leader elected if all controllers have the default priority? A. The 7240 controller with the highest MAC address is elected. B. The controller with the highest IP address is elected. C. The controller with the highest MAC address is elected. D. The 7240 controller with the lowest IP address is elected.
Which protocol is used between Aruba Mobility Controllers (MC) and ArubaOS-Switches to
negotiate tunneled node? A. GRE B. IPSec C. SNMP D. PAPI.
An administrator configures AirGroup policies to define which Apple services are visible and
available to wireless users in a campus WLAN. However, the policies are not being enforced.
Where must the administrator enable the AirGroup functionality on the Mobility Master (MM) so
that the policies will be in effect? A. At the Mobility Master hierarchy B. At the controller level in the Managed Network hierarchy C. At the Access Points level in the Managed Network hierarchy D. At the global Managed Network hierarchy.
An administrator wants to deploy Zero Touch Provisioning (ZTP) with Activate. The controllers
run ArubaOS.8.x.
Which Aruba architecture should the administrator deploy? A. Master-Local B. Standalone C. AirWave D. Mobility Master-Mobility Controller.
An administrator manages an AirWave Management Platform (AMP). The AMP server receives
many SNMP traps from managed devices, but no alerts are generated on the AMP for certain
critical traps. Which rule should the administrator create to cause the AMP server to generate an
alert based on receipt of a critical SNMP trap from an Aruba Mobility Controller (MC)? A. AMON rule B. SNMP trap rule C. Trigger rule D. Alert rule.
An administrator wants to implement the MultiZone feature in a company's network to segregate
corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster
managed by a Mobility Master (MM), and guest traffic will have the same APs establish
connections to a standalone controller at the company's DMZ.
Given this scenario, what is true about the implementation of Multizone? A. A management session is established only with the primary zone, but data sessions are
established to all zones. B. Only the primary zones can reboot, upgrade, or provision MultiZone APs. C. The primary and data zones must be in the same L2 subnet. D. A MultiZone AP can initially connect to any zone to obtain its configuration.
An administrator creates a User Rule for role derivation on the Mobility Master (MM). Which client
information can an administrator specify to identify that a particular user should be assigned a
different role from the initial role? A. IP address B. VLAN C. MAC address D. Profiling information.
An administrator wants to implement bandwidth limits for guest users to restrict their Internet
usage. On the Mobility Master (MM), where would the administrator define these limits? A. User role B. Firewall policy C. AAA policy D. 802.1X policy.
An administrator wants to use AirWave to manually add devices on the network. Where should
the administrator perform this action? A. in AMP Setup B. in APs/Devices C. in Groups D. in Device Setup.
An administrator configures Unified Communications and Collaboration (UCC) heuristics mode on
an Aruba Mobility Master (MM). What should be modified in order to send items such as VoIP
sessions and monitored information about adds, updates, deletions, and periodic snapshots of
those VoIP sessions on the MM or the Aruba Mobility Controller (MC)? A. OpenFlow Controller profile B. Mgmt Config profile C. Skype ALG Configuration profile D. OpenFlow profile.
An administrator wants to simulate network traffic and analyze results in an Aruba wireless
network to test components such as WPA-2, DHCP, and other protocols. Which Aruba solution
implements these functions? A. Clarity Live B. AirWave VisualRF C. AirWave RAPIDS D. Clarity Synthetic.
Refer to the exhibits.
Exhibit 1: WLAN VAP configuration
Exhibit 2: Microsoft NPS server configuration
Exhibit 3: Server group configuration for the VAP.
An employee authenticates with the username employee and the correct password. However,
once the user authenticates, an administrator notices that the employee is assigned the
authenticated role and not the desired employee role. What should the administrator do to solve this problem? A. Add a new server group rule on the controller. B. Associate the user to the employee group in Microsoft NPS. C. Change the server group name on the controller. D. Reference the employee role in the WLAN VAP on the controller.
An administrator implements machine authentication in an 802.1X profile. Which user role will be
assigned to the user's session if machine authentication fails, but the 802.1X user authentication
passes for a user who connects? A. 802.1X default user role B. Machine authentication initial user role C. 802.1X initial user role D. Machine authentication default user role.
In a cluster-controller environment, which Aruba component in a network builds a cache table of
mDNS records that can be used to help user devices access Apple Bonjour services? A. the Mobility Master B. any Aruba Mobility Controller C. the Mobility Controllers that are cluster members D. the Mobility Master and cluster members.
An administrator wants to implement a Live Upgrade (in-service upgrade) of a cluster in an Aruba
wireless solution. Which ArubaOS feature does the Mobility Master (MM) use to ensure RF
redundancy, so that when one or more APs are rebooted there is no loss of wireless coverage for
users? A. AirMatch B. Mobility Controller load balancing C. AP image preload D. AP image verification.
Refer to the exhibit. An administrator configures a split-tunnel policy to be used by RAPs at
branch offices. Under the Configuration section on the Mobility master (MM) shown in the exhibit,
where should the administrator configure the split-tunnel mode so that it can be deployed to the
RAPs? A. WLAN B. Roles & Policies C. Access Points D. Services.
Which ArubaOS CLI command can an administrator execute to determine if AP load balancing is
enabled in a cluster? A. show aaa cluster essid B. show lc-cluster group-membership C. show switches D. show ap active.
What must an administrator configure in order for the ClearPass server to execute a RADIUS
Change of Authorization (CoA) to Aruba Mobility Controllers (MCs) in a cluster? A. Active and Standby AAC with clustering B. VRRP IP on each cluster member C. IPSec High Availability (HA) between two cluster members D. Primary and backup LMS IP addresses.
An administrator configures a network scan set in AirWare to scan a subnet to discover new
switches. The scan completes and AirWave successfully uses the SNMP credentials to validate
SNMP access. However, SSH access fails and the administrator must manually configure the
SSH credentials used for all of these devices.
To prevent this problem in the future, what should the administrator complete prior to running the
network scan? A. Define the SSH communication parameters under the Group's Manage section. B. Define a scan credentials set that includes the SSH communication parameters. C. Define the SSH communication parameters under the AP/Device's Manage section. D. Define the SSH communication parameters for the Default Credentials under Device Setup
section.
Which Aruba AP mode constantly scans the radio environment to gather IDS and RF
information? A. Spectrum AP B. RAP C. Mesh Portal D. Air Monitor.
An administrator needs to apply a patch to an Aruba environment to implement improvements for
AirMatch. What is the Aruba recommended approach for this process without a reboot? A. Upgrade the AirMatch Loadable Service Module (LSM) on each Mobility Controller. B. Upgrade the AirMatch Loadable Service Module (LSM) on the Mobility Master. C. Upgrade the ArubaOS by the use of Live Upgrades (in-service upgrades). D. Create controller partitions to minimize downtime.
An administrator creates a mesh cluster profile and has defined the RF band and cluster name.
What else must the administrator configure in the profile? A. IPSec B. CPSec C. WPA hexkey or passphrase D. Mesh portal IP address(es).
An administrator implements a per-port tunneled node configuration for an Aruba Mobility
Controller (MC) that runs ArubaOS 8.x. The controller performs both MAC and 802.1X
authentication.
What must the administrator specify on the controller to allow for 802.1X authentication to succeed? A. Define External RADIUS servers in the AAA profile. B. Enable L2 Authentication Fail Through in the AAA profile. C. Define MAC addresses in the local database for the 802.1X users. D. Enable server roles in the AAA profile.
An administrator configures a port on a RAP through the association of an AAA profile with
802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops
attached. The administrator notices that when users connect wirelessly to the RAP, a user role
correctly restricts their traffic. But, when users connect with their wired desktops, they have full
access to corporate resources.
What must the administrator do to restrict desktop usage based on the users' role assignment? A. Apply a server-derived role privacy to the RAP port. B. Identify the RAP port as untrusted. C. Implement ACLs on the RAP port. D. Implement per-user tunnel node on the RAP.
Which Aruba Mobility Controller (MC) administrative role should an administrator assign to a
receptionist so that they can create and manage guest accounts? A. guest-provisioning B. receptionist C. guest-operator D. network-operations.
Refer to the exhibit. An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An external RADUIS AAA server authenticates clients associated with the Active User Anchor Controller (A-UAC), where the NAS IP address sent from Controller B is 10.254.1.2.
By default, what happens to the user's session when it is handed over to the Standby UAC (SUAC) after a failover? A. The user's session remains active and RADIUS messages can still be processed between the
S-UAC and AAA server. B. The user's session remains active, but the AAA server cannot implement RADIUS Change of
Authorization (CoA). C. The user's session is disconnected and has to reconnect, and no record of this process is
stored on the AAA server. D. The user's session is disconnected and has to reconnect, but the S-UAC automatically
updates the NAS-IP address on the AAA server to record the event.
An administrator configures an ArubaOS-Switch for per-user tunneled node. Which protocols
does the switch use to establish and maintain a connection with the Aruba Mobility Controller (MC)? (Select two.) A. GRE B. SSL C. PAPI D. IPSec.
Refer to the exhibit. An administrator wants to centralize administrative access to the Aruba Mobility Controllers (MC) and Mobility Master (MM). ClearPass is set up and the preferred authentication protocols is TACACS+. Where should the administrator perform this configuration in the MM hierarchy shown in the exhibit? A. At the Managed Network level B. At the two campus levels C. At both the Mobility Master and Managed Network levels D. At the controller levels.
An administrator inherits an Aruba Mobility Controller (MC) that has an unknown username and
password. Which credentials should the administrator enter to reset the administrative access? A. Username: backdoor; Password: @ruba B. Username: admin; Password: admin C. Username: password; Password: forgetme! D. Username: Aruba; Password: Reset!.
An administrator configures the MultiZone feature for a company network, where a mobility
cluster is the primary zone and a standalone controller in the company's DMZ represents a
secondary data zone. The administrator configures two AP Groups and respective VAPs for the
zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish
connections to both zones, the administrator notices that no data connections are established to
the data zone.
What must the administrator do to fix this problem? A. Configure the same AP Groups and VAPs on the standalone controller, and associate the
MultiZone APs to both groups. B. Configure the same AP Group in the data zone as it is in the primary zone, and configure the
VAPs in the data zone. C. Have the MultiZone APs initially boot from the standalone controller in the data zone. D. Create different AP groups and VAPs on the Mobility Master and standalone controllers, and
associate the MultiZone APs to both groups.
An administrator creates new pre-and post-authentication roles for a new WLAN. For which profile should the administrator assign these new roles under the Managed Network section? A. Server Groups B. Virtual AP C. 802.1X D. AAA profile.
An administrator currently manages an L2 cluster with Aruba Mobility Controllers (MCs) that run ArubaOS 8.x. What happens when the administrator enables AP load balancing? A. AP load balancing occurs when the rebalance and unbalance thresholds are met. B. Users must re-authenticate if they are moved from one controller to another because load
balancing is performed. C. Balancing of users is based on a hash of their IP address. D. AP load balancing is triggered based on the amount of user traffic that users generate.
An administrator implements clustering on Aruba Mobility Controllers (MCs) that run ArubaOS
8.x. An AP is connected to a cluster member. The administrator accidentally powers off the AP.
How does the AP determine that it should failover to an alternate controller in the cluster? A. The Mobility Master notifies the AP. B. The AP detects a PAPI failure. C. The cluster leader notifies the AP. D. The Standby AAC notifies the AP.
An administrator implements a standalone controller that runs ArubaOS 8.x. Which feature should
the administrator configure to optimize the RF operation for the company's WLAN? A. AirMatch B. Clustering C. ARM D. Zones.
An administrator creates a cluster of four Mobility Controllers (MCs). When the administrator
verifies the cluster operation, the administrator notices that it is operating as an L3-connected
cluster. What should the administrator do to ensure that the cluster operates as an L2-connected
cluster? (Choose two.) A. Include all IP addresses in the same subnets shared by the Mobility Controllers. B. Exclude all VLANs that are not trunked to each Mobility Controller. C. Verify VLAN configuration on the switch trunks that interconnects the Mobility Controllers. D. Configure a separate VRRP group for each cluster member. E. Ensure that the controller IP addresses are in the same subnet.
An administrator has ArubaOS-Switches that support tunneled node. The administrator wants to tunnel all user traffic from the Ethernet ports on the switches, and have the controllers authenticate the user traffic and apply the appropriate user role. Which implementation meets these requirements? A. Role-based tunneled node with the controllers configured for standalone mode B. Role-based tunneled node with the controllers configured in a cluster C. Per-port tunneled node with the controllers configured for standalone mode D. Per-port tunneled node with the controllers configured in a cluster.
An administrator manages an Aruba wireless network. ClearPass is used to centralize AAA
functions. The administrator wants to implement server role derivation. Which information will the
ClearPass server return in regards to the user role assignment? A. RADIUS VSA User-Role B. Aruba VSA Firewall-Role C. Aruba VSA Aruba-User-Role D. RADIUS VSA Firewall-Role.
What are the responsibilities of a cluster leader in a cluster of Aruba Mobility Controllers (MCs)?
(Choose two.) A. To identify primary and secondary Mobility Controllers for APs B. To create a table to determine how a wireless client maps to a cluster member C. To identify a backup cluster leader for redundancy D. To manage the configuration of cluster members E. To automatically load balance clients if the load across cluster members changes.
Which RAP WLAN operation mode should an administrator configure if the SSID should only be
advertised if controller connectivity is lost? A. Standard B. Persistent C. Backup D. Always.
Refer to the exhibit. Two Aruba Mobility Controllers (MC) are managed by a Mobility Master (MM) in a non-cluster deployment as shown in the exhibit.
The C1 controller is connected to AP1 and AP2.
The C2 controller is connected to AP3 and AP4.
VLAN mobility is enabled in the VAPs of both AP Groups.
Both C1 and C2 support the same VLANs.
User1's wireless device supports BSS Fast Transitioning and is currently connected to AP1.
What happens if User1 roams across the network and the user's device associates to AP3? A. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and reobtain a new IP address. B. User1's traffic is terminated on the C2 controller, and they will not have to re-authenticate but will need to obtain a new IP address. C. User1's traffic is terminated on the C2 controller, and they will have to re-authenticate and can keep their original IP address. D. User1's traffic is tunneled to the C1 controller, where they will not have to re-authenticate and can keep their original IP address.
Refer to the exhibit. What can an administrator determine from this Aruba device output? A. A switch is connected to a standalone Mobility Controller. B. An AP is connected to a Mobility Controller in a cluster. C. An AP is connected to a standalone Mobility Controller. D. A switch is connected to a Mobility Controller in a cluster.
Where would an administrator define the split-tunneling mode for a RAP located at a branch office? A. the Firewall policy on the RAP B. the AAA policy on the controller C. the Firewall policy on the controller D. the VAP profile on the controller.
Refer to the exhibit. A user uses a wireless client for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session? A. The user is configured for PEAP, but the WLAN profile implemented EAP-TLS. B. The AP has reached the limit for number of users connected to the radio. C. The user misconfigured the Windows Managed Network Settings profile. D. The user is associated with a failed 802.1X/EAP authentication.
An administrator supports an Aruba wireless solution that uses ClearPass to implement server role assignment. A user reports that they are not able to access the correct department resources. The administrator determines from the connected controller that the user is associated to the login user profile instead of the department user profile.
What should the administrator examine on the ClearPass server to determine the Aruba VSA User Role value that ClearPass returns to the controller? A. Accounting B. Event Viewer C. Audit Viewer D. Access Tracker.
Which configuration command enables an Aruba Mobility Controller (MC) to send AMON messages to an AirWave System? A. auth-server B. snmp-server C. mgmt-server D. tunneled-node-server.
A company network implements Skype for Business, where voice and video calls, desktop
sessions, and file sharing sessions need to be prioritized. These applications are used across a
wireless network, implemented with Aruba APs and Aruba Mobility Controllers (MC) that run
ArubaOS 8.x. Which Unified Communications and Collaboration (UCC) deployment mode should
an administrator recommend for this customer? A. WMM-only B. SDN API C. Zones D. Heuristics.
In a VPN that uses certificate-based authentication, which component must be configured on the
Mobility Master (MM) to allow a RAP to successfully connect to a Mobility Controller (MC)? A. RAP VPN username and password B. WLAN and new RAP group C. RAP IPSec pre-shared key D. RAP whitelist.
An administrator manages an Aruba wireless solution, deployed in a company with locations
across the world. In one country, the local government organization that controls wireless
transmissions increases the maximum EIRP allowed for certain channels. Which component
does the administrator need to update on the Mobility Master (MM) to accommodate this change? A. the Controller port configuration B. the regulatory-cert file C. the AP system profile D. the AP Group configuration.
An administrator wants to temporarily deny login access who fail 802.1x authentication functions three or more times. Which process will the administrator need to configure? A. EAP termination B. blacklisting C. captive portal D. fail through.
Refer to the exhibit. The administrator expects the AP to connect to a cluster, but the AP fails to
connect. The administrator examines the configuration of an AP from apboot mode shown in the
exhibit. What can the administrator determine about the configuration of the AP? A. The AP is configured to terminate on a non-cluster Mobility Controller. B. The AP is configured as a RAP to terminate on a stand-alone controller. C. The AP is configured as a RAP to terminate on a Mobility Master. D. The AP is configured to terminate on a Mobility Controller in a cluster.
Refer to the exhibit.
Controllers are configured in a cluster as shown in the exhibit. These are the network details.
- A Mobility Master (MM) managers the cluster.
- The cluster contains two controllers: C1 and C 2. AP1 and AP2 use C1 as their Active AP Anchor Controller (A-AAC), with C2 as their Standby AAC (SAAC).
- AP3 and AP4 use C2 as their A-AAC with, C1 as their S-AAC.
User1 establishes a wireless connection via AP1, where the Active User Controller (U-UAC) assigned is C1, with C2 as the standby. What happens when User1 roams the wireless network and eventually their session is handled by AP3? A. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C1. B. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C1. C. The AP3's A-AAC switches to C2, and the user's A-UAC remains on C2. D. The AP3's A-AAC switches to C1, and the user's A-UAC remains on C2.
An administrator needs to add connectivity between two buildings that are within 15 meters of
each other on a company's campus. The administrator decides to implement Aruba's wireless
mesh feature between an AP in each building. How should the administrator deploy the two
APs to implement the mesh feature? A. one as a Remote Mesh Portal AP and one as a Remote Mesh Point AP B. one as a campus AP and one as a Mesh Point AP C. one as a Mesh Portal AP and one as a Remote Mesh Point AP D. one as a Mesh Portal AP and one as a Mesh Point AP.
An administrator configures AirGroup policies to define which Apple services are visible
and available to wireless users in a campus WLAN. However, the policies are not being
enforced. Where must the administrator enable the AirGroup functionality on the
Mobility Master (MM) so that the policies will be in effect? A. At the Access Points level in the Managed Network hierarchy B. At the controller level in the Managed Network hierarchy C. At the Mobility Master hierarchy D. At the global Managed Network hierarchy.
An administrator wants to reduce downtime of the wireless network when controllers are
upgraded. Which Aruba OS feature should the administrator implement to reduce the amount of
downtime the Aps will experience at the time of the upgrade process? A. Centralized upgrades B. AP apboot mode bypass C. AP image preload D. AP fast start.
An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller's local database.
The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.
Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate postauthentication policy can be applied to these tablets? A. Server-derived roles B. User-derived rules C. AirMatch D. AP fingerprinting.
Which Aruba AP mode constantly scans the radio environment to gather IDS and RF information? A. Spectrum AP B. RAP C. Air Monitor D. Mesh Portal.
An administrator creates a mesh cluster profile and has defined the RF band and cluster name.
What else must the administrator configure in the profile? A. WPA hexkey or passphrase B. CPSec C. IPSec D. Mesh portal IP address(es).
An administrator wants to temporarily deny login access who fail 802.1x authentication functions three or more times. Which process will the administrator need to configure? A. EAP termination B. fail through C. captive portal D. blacklisting.
On the Aruba Mobility Master (MM), when is an AP configured to act as Mesh Portal or Mesh Point? A. when the mesh radio profile is created B. when the mesh cluster profile is created C. at the time of the AP's apboot mode CLI D. when the APs are provisioned.
A group of users on the same floor of a campus residence experience connectivity problems continuously throughout the morning. The administrator suspects that it is a L1 problem with physical interference.
What can the administrator do to find the cause of this problem? A. Access RAPIDS data from AirWave's RAPIDS section. B. Access RAPIDS data from AirWave's dashboards, under Home. C. Access a controller's spectrum analysis data from AirWave's dashboards, under Home. D. Access a controller's spectrum analysis data directly from AirWave with Quick Links.
An administrator inherits an Aruba Mobility Controller (MC) that has an unknown username and password.
Which credentials should the administrator enter to reset the administrative access? A. Username: Aruba; Password: Reset! B. Username: admin; Password: admin C. Username: backdoor; Password: @ruba D. Username: password; Password: forgetme!.
An administrator implements per-user tunneled node that involves ArubaOS Switches and Aruba Mobility Controllers (MCs).
What always happens when a wired client connects to the network? A. Wired users map to an AAA profile on the controller. B. The tunnel fails unless VMCs are used. C. The switch performs user authentication. D. All switch traffic is tunneled to the controller.
An administrator wants to determine if an IPSec session is established. In order to tunnel and protect the GRE data traffic between a RAP and an Aruba Mobility Controller (MC). Which MC command provides this information? A. show rap-wml B. show tunneled-node C. show crypto ipsec sa D. show crypto isakmp sa.
A guest establishes an authenticated wireless session to an Aruba Mobility Controller (MC). The controller uses a ClearPass server for all AAA functions.
Which AAA component disconnects the user when the guest exceeds their allowed duration?
A. RADIUS Change of Authorization B. Active Directory Session Limits C. RADIUS Authorization Profile D. SNMP Disconnect.
An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet? A. split-tunnel B. route:src-nat C. route:dst-nat D. permit.
An administrator deploys an Aruba Mobility Controller 7005 to a branch office. The administrator accidentally disables the console port on the controller. Which controller command should the administrator use to re-enable the console part? A. mgmt-user console B. console enable C. console reset D. no mgmt-user console-block.
An administrator defines credentials in the Mobility Master> Configuration> System section to configure a Mobility Master (MM). The administrator then accesses AirWave and adds the MM in Monitor-Only mode. The administrator expects AirWave to automatically discover the Aruba Virtual Mobility Controllers (VMCs) also managed by the MM, but does not see these under APs/Devices> New section in AirWave.
What should the administrator do to solve this problem? Enable Automatic Device Authorization for the Group the Mobility Master belongs to in AirWave Define AirWave communication parameters for the Virtual Mobility Controllers on the Mobility Master, and then scan for the Virtual Mobility Controllers in AirWave Define the AirWave communication parameters on the Virtual Mobility Controllers, and then scan for the Virtual Mobility Controllers in AirWave Define AirWave communication parameters for the Virtual Mobility Controllers on the Mobility Master, and have AirWave repoll the Mobility Master.
Which forwarding mode is used for a WLAN if a RAP needs to decrypt all user traffic and forward it locally? Split-tunnel Bridge Decrypt-tunnel Tunnel .
Refer to the exhibit. What is true about the configuration shown in the exhibit? This is an ArubaOS-Switch configured for per-user tunneled node This is an ArubaOS controller configured for per-user tunneled node This is an ArubaOS controller configured for per-user tunneled node. This is an ArubaOS-Switch configured for per-port tunneled node .
An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.
Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?
Tunnel Decrypt-tunnel Bridge Split-tunnel.
An administrator has a standalone controller that runs ArubaOS 8.x software and wants to upgrade it to a newer release. The upgrade will be performed from the front panel of the physical controller. The administrator places the new software in the root directory of a USB drive. On the controller’s LCD panel, no image is found.
What is the cause of this problem?
The image must be placed in the /Upgrade subdirectory The image must be placed in the /Images subdirectory The image must be placed in the /ArubaImage subdirectory The upgrade must be performed from the controller’s WebUI.
Refer to the exhibit.
An administrator configures policies to allow RAPs to connect to the corporate office and remote users to access resources.
Which function does the VPN address pool serve in this situation? Assigns a DHCP address pool for the RAP. Assigns an inner IP address to the RAP used within the VPN Assigns a public IP address that the RAP should use on its internet port Assigns IP addresses for remote users.
An administrator creates a user role that department A in a company uses. Various other roles exist for other departments. All employees connect to the same ESSID, which authenticates to an external AAA server.
How should the administrator configure to assign the appropriate roles to the employees? implement default roles implement server-derived roles implement user roles implement AAA profile roles.
Refer to the exhibit.
An administrator wants to verify the operation of MultiZone in a network. The administrator uses the command show ap debug multizone to generate the output shown in the exhibit.
Based on the output, which statement is true? Zone 1 is the primary zone, and zone 0 is the data zone. The primary zone has limited the data zone to one WLAN. The maximum VAPs in the MultiZone is 15 The MultiZone APs are in a cluster.
An administrator wants to implement the MultiZone feature in a company’s network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company’s DMZ.
What is true about the implementation of MultiZones in this scenario?
The MultiZone feature must be enabled in the data zone. The primary zone maintains full control of AP management and configuration. The primary and data zones must be in the same L2 subnet. A MultiZone AP can initially connect to any zone to obtain its configuration.
An administrator deploys an AP at a branch office. The branch office has a private WAN circuit that provides connectivity to a corporate office controller. An Ethernet port on the AP is connected to a network storage device that contains sensitive information. The administrator is concerned about sending this traffic in clear-text across the private WAN circuit.
What can the administrator do to prevent this problem? Redirect the wired port traffic to an AP-to-controller GRE tunnel Convert the campus AP into a RAP Enable AP encryption for wired ports Enable IPSec encryption on the AP’s wired ports.
An administrator wants to dynamically upgrade AppRF on Aruba Mobility Controllers (MC) in a cluster. The administrator does not want to reboot the system at the time of the upgrade.
What should the administrator use for this upgrade? Aruba image Upgrade Profiles Loadable Service Module (LSM) Cluster Upgrade Manager.
Refer to the exhibit.
What is true about the operation of the Aruba Mobility Controller (MC) shown in the exhibit? The Mobility master is in disaster recovery mode and will push changes to a Managed Controller The disaster recovery mode is enabled, and no changes will be forwarded to the Mobility Master The disaster recovery mode is disabled, and changes will be sent to the Mobility Master The disaster recovery mode is enabled, and changes will be sent to the Mobility Master.
What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture? The Mobility Master can push a full configuration to a Mobility Controller. ARM must be used to optimize wireless performance. The APs can terminate on both Mobility Masters and Mobility Controllers. Any controller can perform local configurations.
An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile? ClearPass Group Server matching rules Server Group Server Load Balancing.
An administrator suspects that the network drops frames between a wireless client and an Aruba Mobility Controller (MC). The administrator wants to examine the frames between the AP and the controller to determine if any frames are missing.
Which solution allows the administrator to use a protocol analyzer to examine the contents of the 802.11 frames between the AP and controller? Implement bridge mode Implement decrypt-tunnel mode Implement GRE mode Implement split-tunnel mode.
Refer to the exhibit.
A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session? The AP has reached the limit for number of users that are allowed to connect to the radio The controller cannot reach the AAA server to perform the authentication The user is configured for PEAP, but the WLAN profile on the controller implemented EAP-TLS The user misconfigured the Managed Network Settings profile in Windows.
Refer to the exhibit.
Which controller connection with the Aruba as the cluster leader? Controller A Controller B Controller C Controller D.
An administrator needs to support Unified Communications and Collaboration (UCC) in a company’s network. The network infrastructure requires the OpenFlow protocol to support SDN-capable applications.
Which controller topology meets these requirements?
Zones Standalone Mobility Controller Mobility Master-Mobility Controller Master-Local.
An administrator makes a configuration change on a Mobility Master (MM) that causes a Managed Controller to lose connectivity with the MM. The MC attempts auto roll-back, but this fails.
How should the administrator recover from this problem? Access the CLI of the MC and execute the no command to revert the changes Access the CLI of the MC and identify the previous configuration file the MC should use Reboot the MC to force auto-roll back to occur Access the CLI of the MC, execute the disaster-recovery command, and undo the changes.
An administrator purchases a pair of Mobility Masters (MM) and wants to deploy 16 Virtual Mobility Controllers (VMCs).
What is the minimum number of clusters that the administrator needs to implement to support the number of VMCs?.
1 2 4 8.
Refer to the exhibit.
An administrator implements AP licensing on a Mobility Master (MM). atorator
Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses in CampusC are allocated.
* Each campus is responsible to purchase its own AP licenses.
* There are 900 AP licenses deployed in the global pool.
* There are three dedicated pools.
* From the global pool, 300 AP licenses are assigned to each dedicated pool.
What can the administrator do to add capacity for CampusA in alignment with campus policies? Allow CampusA to share from the CampusC pool. Add 100 more AP licenses and assign them to the CampusA pool. Move 100 licenses from the CampusC pool to the global pool. Add 100 more AP licenses to the global pool.
Refer to the exhibit.
What can the determined from the command shown in the exhibit? All the controllers run in standalone mode MM2 is the Mobility Master VRRP is used for Mobility Master redundancy All the controllers run in a cluster.
An AP connects to a controller. Then, the AP loses power and reboots.
Which parameters will the AP remember and use from its initial connection? (Select two.) AP group
Server IP
Mobility Master IP
AP IP address and subnet mask
AirWave server name.
An administrator mistakenly configures the wrong VLAN setting on a managed controller’s interface. This causes the controller to lose management access to the Mobility Master (MM).
Which mechanism will then attempt to restore the previous working configuration on the managed controller?
disaster recovery auto-rollback restore config bulk configuration.
An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.
Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?
Whitelist the RAP’s IP address on the MC Define the RAP’s IPSec pre-shared key in Activate Whitelist the RAP’s certificate on the MC Configure a VPN address pool in Activate.
Refer to the exhibit.
The administrator expects the AP to connect to a cluster, but the AP fails to connect. The administrator examines the configuration of an AP from apboot mode shown in the exhibit.
What can the administrator determine about the configuration of the AP?
The AP is configured to terminate on a non-cluster Mobility Controller The AP is configured as a RAP to terminate on a stand-alone controller The AP is configured as a RAP to terminate on a Mobility Master The AP is configured to terminate on a Mobility Controller in a cluster.
Which IEEE standard should user devices support to implement Fast BSS Transition when a network implements wireless roaming (mobility)? 802.11r 802.11f 801.11m 802.11i.
An administrator adds local administrative accounts to manage the Aruba Mobility Controllers (MCs). Which role should be assigned to an administrator who needs to only generate reports and monitor WLANS and ports?
Location-api-management
AP-provisioning Network-operations
Root .
An administrator implements the Aruba AitGroup feature to accommodate the Apple Bonjour service. In this implementation, which protocol advertises devices such as printers, computers, and their services?
LLDP Multicast DHCP Multicast DNS Broadcast DNS.
An administrator wants to implement a cluster of Aruba Mobility Controllers (MCs). Which guideline should be followed? Implement Virtual Mobility Controllers and Mobility Controllers in the cluster to provide scalability Verify that all the controllers run the same release of software
Purchase a cluster license to enable clustering Implement High Availability (HA) AP Fast Failover for redundancy.
An administrator supports a cluster of four Aruba Mobility Controllers (MCs) with management addresses of 10.1.100.101, 10.1.100.102, 10.1.100.103, and 10.1.202.181. The administrator can an administrator this cluster, reboots it and accesses apboot mode. The administrator executes the printenv command.
Which AP parameter contains the IP addresses of the cluster members that the AP should use to connect to the cluster? Nodelist Servername Master_ip Cfg_lms.
Where on the Mobility Master (MM) can an administrator configure the VIA connection profile? L2 Authentication L3 Authentication AAA Profiles
User Roles.
An administrator wants to implement bandwidth limits to restrict employee access to high-risk web sites. On the Mobility Master (MM), where would the administrator define these limits?
802.1X policy
User role
Firewall policy
AAA policy.
Refer to the exhibit.
The branch office RAP shown in the exhibit provides secure wireless employee access. Because of security concerns, the company’s security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP’s Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannot access Internet resources on Port 3.
How can the administrator provide guest users Internet access?
Implement ClientMatch to handle the employee and guest user traffic correctly Implement the MultiZone feature on the RAP Configure a bridge role for the wired RAP port Create a guest VAP that allows wired RAP port access.
An administrator supports a RAP at a branch office. A user's device that is attached to the Ethernet port is assigned an 802.1X AAA policy and is configured for tunneled node.
How is the user's traffic transmitted to the corporate office? It is not encapsulated by GRE and not protected with IPSec It is encapsulated by GRE and protected with IPSec It is not encapsulated by GRE but is protected with IPSec It is encapsulated by GRE and not protected with IPSec.
Which VPN component must be configured on the Mobility Master (MM) to allow a RAP to use the built-in certificate to successfully connect to a Mobility Controller (MC)?
IP Address pool VPN
username and password
IPSec pre-shared key
CPSec auto-whitelist.
.
Which protocol do Mobility Controllers (MCs) use to detect a failed Mobility Master (MM)?
PAPI SNMP VRRP IPSec.
An administrator needs to modify a VAP used for a branch office RAP. The VAP’s operating mode is currently defined as backup and uses tunnel mode forwarding. The administrator wants to implement split-tunnel forwarding mode in the VAP.
Which WLAN operating mode must the administrator define for the VAP before the tunnel forwarding mode can be changed to split-tunnel?
Persistent Standard Trusted Always.
An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user.
However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.
Which two items should the administrator verify that might be the cause of this problem? (Choose two.) Enablement of user roles on the controller Spelling of the role on the ClearPass server Server-derived role assignment on the ClearPass server Role existence on the Managed Network Order assignment that the controller uses to select a user role.
Under which AirWave Management Platform (AMP) section should an administrator navigate to see the connection status between the AMP and managed device shown in the exhibit? Folders Aps/Devices VisualRF Device Setup.
An administrator configures a server group with two AAA servers. During the authentication process, the first server sends a RADIUS reject message in response to an authentication request.
What should the administrator implement to ensure that the authentication is also attempted with the second AAA server in the group? EAP termination Machine authentication EAP load balancing VRRP server groups.
A network administrator creates the role employees and adds the rule to it:
user any any permit
The first several wireless clients assigned to the employees role are assigned IP addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees role are then assigned IP addresses in the 10.10.20.0/24.
When the Aruba firewall mathces traffic from these clients to the user any any permit rule, what does it do?
It drops traffic from wireless clients in both the 10.10.0/24 subnet and 10.10.20.0/24 subnet It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops the traffic from wireless clients in the 10.10.10.0/24 subnet It permits the traffic from wireless clients in the 10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet as long as the packet has a source IP.
An administrator wants to implement a cluster of five Aruba Mobility Controllers (MCs) for a network deployment. Which solution would work for this deployment? 70xx controllers 72xx controllers and Virtual Mobility Controllers 72xx controllers Virtual Mobility Controllers.
An administrator implements a cluster of four Aruba Mobility Controllers (MCs) managed by a Mobility Master (MM).
An AP Group is configured with two VAPs and deployed to an AP that will connect to the cluster. Each AP contains two radios.
How many GRE tunnels will be built from the AP to the Active AP Anchor Controller (AAAC)? 2 4 5 8.
Which methods can be used to configure RAP redundancy when connected to two redundant Aruba Mobility Controllers (MCs) in the DMZ? (Select two.) Virtual IP address of the two controllers. Active and Standby AAC. Primary and backup LMS IP addresses. IPSec High Availability (HA) between two cluster members. AirWave direction to RAPs redundant Mobility Controllers.
|
