Quiz
Sem título
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (173)
1Which dual radio access point models support concurrent operatons in the 2.4Ghz band as well as the 5Ghz band?
(Choose three)- AAP-135
- BAP-92
- CAP-224
- DAP-93
- EAP-105
2Which of the following APs do NOT support dual radio operatons?(Choose two)
- AAP-93
- BAP-105
- CRAP 3WN
- DAP-224
- EAP-135
3An AP135 has been confgured with 3 SSIDs supported on both 2.4Ghz and 5Ghz bands. How many GRE tunnels will be created between the AP 135 and the controller?
- A3
- B4
- C6
- D7
- E8
4Centralized licensing is not in use on an Aruba based network which has a Master and three local controllers. No APs terminate on the Master controller. Roles and Firewall policies need to be created and applied, hence PEF-NG license is required
On which controller should the license be installed?- Aonly the local controllers since frewall policies are applied here
- BOnly the master controller since role and frewall policies are created here.
- Cthis isn't the correct license for this purpose, use PEF-VPN license
- Dthe master and all three local controllers
- Ethis is not needed because PEF-NG is part of base OS
5What informaton do you need to generate a feature license key for an Aruba controller?
- AThe controller's MAC address and the feature descripton.
- Bcontroller's MAC address and the certificate number
- Ccontroller's Serial Number and the feature descripton
- Dcontroller's Serial Number and the certificate number
- Econtroller's MAC address and Serial Number
6What are the PEF-NG license limits based on?
- AMaster Controller total user count
- BNumber of local controllers
- CNumber of users
- DOne license per controller
- ENumber of APs
7Which of the following licenses are consumed by Mesh APs advertsing an SSIDs?
- AAP license
- BMesh license
- CPEF-V license
- DNo license is required
- ERAP License
8The permanent licenses on the controller will be deleted with the use of which command?
- Areboot delete all
- Bwrite erase all
- CLicenses cannot be deleted once actvated
- Dwrite erase
- Edelete license
9A network administrator wants to terminate VPN sessions on a local controller in the DMZ. Which statement is true about the PEF-VPN license?
- AIt is only applied to the master controller
- Bis based on the number of APs
- CIt is distributed by the license server as needed
- DIt is only applied to the DMZ controller
- EOne license is needed on the master and the DMZ local
10What is the best practce regarding licensing for a backup master to support Master Redundancy in a network without centralized licensing?
- AOn the backup only one license of each type,is needed.
- BLicenses are pushed from the primary to the backup Master along with the confguraton
- CBackup master only requires the AP license
- DSupported limits and installed licenses should be the same on primary master and backup Master
- EThe Backup Master does not require licenses to support master redundancy
11Which of the following licenses can be included in the licensing pool for centralized licensing? (Choose three)
- AFactory default licenses
- BPEFV license
- CMaster Controller licenses
- DLocal Controller licenses
- EEvaluation licenses
12By default Centralized licensing messages between master and local controllers are sent ___________________.
- AIn the clear unencrypted since the master and local controllers already share IPSEC tunnels.
- BUsing CPSec
- CUsing IPSec site to site VPN tunnels
- DEncrypted using GRE
- EPAPI
13Which of the following will occur if a master license server fails with no standby server present? (Choose two)
- ALocal controllers will immediately remove all installed licenses
- BLocal controllers licenses will contnue to be valid for 30 days
- CAll licenses go back into the pool for redistributon
- DA Local Controller elects itself master license server
- ENo licenses will be sent to any new controllers that come online
14A evaluaton License is valid for a maximum of ________?
- A30 Days
- B60 Days
- C90 Days
- D6 Months
- E12 Months
15The following licenses have been installed on these controllersn
Master-1: 8 AP licenses
Local-2: 8 AP licenses
Local-3: 5 Evaluaton AP Licenses
Local-4 : 10 Factory installed AP licenses
Central Licensing is enabled. What is the AP Pool capacity on the Central License Server?- A16
- B8
- C21
- D31
- E26
16Centralized licensing is not enabled in a network of 1 Master and 2 Local controllers, what should be the license count on all controllers to terminate 8 APs on each Local controller and support Local redundancy?
- A16 AP license on all controllers
- B8 AP license on Master and 16 AP license on both locals
- C8 AP license on all controllers
- D1 AP license on Master and 16 AP license on both locals
- E16 AP licenses on the Locals
17Which may be applied directly to an VLAN interface? (Choose three)
- ARF Plan Map
- BAccess List (ACL)
- CAAA profles
- DRoles
- EFirewall Policy
18When creatng a frewall rule on an Aruba controller, which parameter is optonal?
- ADestnaton
- BLog
- CService
- DActon
- ESource
19What are valid methods of blacklistng a device? (Choose three)
- AManually
- BFirewall Policy
- CFirewall Rule
- DAuthentcaton Failures
- EData Rate Thresholds
20What is the blacklist default tme?
- A3600 seconds
- BNo default tme, it must be done manually
- C1 day
- D1800 seconds
- E30 seconds
21An administrator creates a WLAN with an unmodifed default AAA profle. What is the default role the user is placed in?
- Aguest-logon
- Bdefault-logon
- Cdefault-ap
- DAP-Role
- Elogon
22What is the first role a user is given when a user associates to an open WLAN?
- Athe inital role in the captve portal profle
- Bthe guest post authentcaton role
- Cthe inital role in the AAA profle
- Dthe role in the server group profle
- EThe inital role in the 802.1x profle
23Which of the following could be used to set a user's post-authentcaton role or VLAN associaton? (Choose two)
- AAAA default role for authentcaton method
- BServer Derivaton Rule
- CVendor Specifc Atributes
- DAP Derivaton Rule
- EThe Global AAA profle
24Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)
- ARoles are a set of authentcaton rules
- BPolicies are built from roles.
- CRoles are assigned to users
- DRoles are applied to interfaces
- EA user can belong to only one role at a tme
25Which netdestnaton aliases are built into the controller? (Choose three)
- Alogon
- Bany
- Cguest
- Dlocalip
- Euser
26What are aliases used for?
- Aimprove controller performance
- Bsimplify the configuraton process
- Cte IP addresses to ports
- Dassign rules to policies
- Eassign policies to roles
27Which of the following frewall rules allows a user to initate an ICMP session to other devices?(Choose two)
- Aany any svc-icmp permit
- Bmswitch any svc-icmp permit
- Cuser user svc-icmp permit
- Duser any svc-icmp permit
- Elocalip any svc-icmp permit
28What is true about Global Session ACL? (Choose two)
- AAny rules will apply to all users in the AP-group
- BWhen added it is in the frst positon in selected Role
- CAny rules will apply to all users in the controller
- DAny rules will apply to all users in the Network
- EIs in the frst positon in all roles
29When creatng a frewall rule what are valid choices for the Service/Applicaton feld? (Choose three)
- AInternet Category
- BApplicatons
- CProtocol
- DApplicatons Category
- EInternet Protocol
30The Aruba Policy Enforcement Firewall (PEF-NG) module supports destnaton network address translaton (dst-nat). Which is the default use of this statement in an Aruba controller confguraton?
- Aprovide a telnet connecton to the controller
- Bredirect HTTP sessions to Captve Portal
- Csource the IP addresses of users to specifc IP address
- Dredirect a SSH session to terminate on the controller
- Eredirect Access Points to another Aruba controller
31The Aruba Policy Enforcement Firewall (PEF) module supports source network address translaton (src-nat).
Which is a use of this statement in an Aruba confguraton?- Aprovide a single source IP address for users in a role
- Bredirect Captve Portal HTTP sessions
- Credirect Access Points to another Aruba controller
- Dprovide IP addresses to clients
- Eredirects clients to Aruba Firewall
32Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon
access-list List
----------------
Positon Name Locaton
-------- ---- --------
1 logon-control
2 captveportal
logon-control
-------------
Priority Source Destnaton Service Acton
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-nat permit
captveportal
-------------
Priority Source Destnaton Service Acton
-------- ------ ----------- ------- ------
1 user controller svc-htps dst-nat 8081
2 user any svc-htp dst-nat 8080
3 user any svc-htps dst-nat 8081
4 user any svc-htp-proxy1 dst-nat 8088
5 user any svc-htp-proxy2 dst-nat 8088
6 user any svc-htp-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthentcated user assigned to the logon role atempts to start an htp session to IP address 172.16.43.170.
What will happen?- Athe user will not reach the IP address because of the implicit deny any any at the end of the policy.
- Bthe user will not reach the IP address because of the policy statementnuser any svc-htp dst-nat 8080
- Cthe user's trafc will be passed to the IP address because of the policy statementnuser any svc-htp-proxy1 dst-nat
8088 - Dthe user's trafc will be passed to the IP address because of the policy statementnuser any svc-htps dst-nat 8081
- Ethe user's trafc will be passed to the IP address because of the policy statementnuser any svc-htp dst-nat 8080
33Refer to the following confguraton segment for this item.
ip access-list session anewone
user network 172.16.1.0 255.255.255.0 any permit
user host 172.16.1.1 any deny
user any any permit
An administrator wants users to have access to all destnatons except 172.16.1.1. Based on the above Aruba Mobility
Controller confguraton segment, which statements best describe this policy? (Choose two)- AThe two rules user network 172.16.1.0 255.255.255.0 any permit and user host 172.16.1.1 any deny need to be resequenced.
- BThe rule user network 172.16.1.0 255.255.255.0 any permit is redundant.
- CThe rule user host 172.16.1.1 any deny is redundant because of the implicit deny all at the end.
- DThe last statement user any any permit is not required
- EThe last statement should be any any any deny
34Refer to the following confguraton segment for this item.
netdestnaton "internal"
no invert
network 172.16.43.0 255.255.255.0 positon 1
range 172.16.11.0 172.16.11.16 positon 2
!i
p access-list session "My-Policy"
alias "user" alias "internal" service_any permit queue low
!
A user frame is evaluated against this frewall policy with the following atributesn
Source IPn 172.17.49.3 Destnaton IPn 10.100.86.37 Destnaton Portn 80
Referring to the above fle segment, how will the frame be handled by this frewall policy?- AThe frame will be forwarded because of the implicit permit all at the end of the frewall policy.
- BThe frame will be passed because there is no service specifed in the frewall policy.
- CThe frame will be dropped because there is no service specifed in the frewall policy.
- DThe frame will be dropped because of the implicit deny all at the end of the netdestnaton defniton.
- EThe frame will be dropped because of the implicit deny all at the end of the frewall policy.
35ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user any any permit
host 10.1.1.1 host 10.2.2.2 any deny
A user sends a frame with the following atributesn
Source IPn 10.1.1.1 Destnaton IPn 10.2.2.2 Destnaton Portn 25
Based on the above Mobility Controller confguraton fle segment, what will this policy do with the user frame?- AThe frame is accepted because of the statementnuser network 10.1.1.0 255.255.255.0 any permit.
- BThe frame is accepted because of the statementnuser any any permit.
- CThe frame is discarded because of the statementnuser host 10.1.1.1 host 10.2.2.2 deny.
- DThe frame is discarded because of the implicit deny all at the end of the policy.
- EThis is not a valid policy.
36ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user host 10.1.1.1 any deny
user any any permit
Referring to the above porton of a Mobility Controller confguraton fle, what can you conclude? (Choose two)- AAny trafc going to destnaton 172.16.100.100 will be permited.
- BAny trafc going to destnaton 10.2.2.2 will be denied.
- CThis is a session frewall policy.
- DThis is an extended Access Control List (ACL).
- EAny trafc going to destnaton 10.1.1.1 will be denied.
37The screen captures above show the 802.1X authentcaton profle and AAA profle setngs for a VAP.
If machine authentcaton fails and user authentcaton passes, which role will be assigned?- Aemployee
- Bguest
- Cdenyall
- Dlogon
- Eno role is assigned
38The screen captures above show the 802.1X authentcaton profle and AAA profle setngs for a VAP.
If machine authentcaton passes and user authentcaton fails, which role will be assigned?- Ano role is assigned
- Blogon
- Cguest
- Ddenyall
- Eemployee
39The screen captures above show the 802.1X authentcaton profle and AAA profle setngs for a VAP.
If machine authentcaton fails and user authentcaton fails, which role will be assigned?- Aemployee
- Bguest
- Cno role will be assigned
- DLogon
- ECaptve Portal
40What can NOT be confgured from the Aruba controller confguraton wizards?
- AController IP
- BUser frewall policy
- CRadius Servers
- DUser derivaton rules.
- EBoot Partition
41An administrator is setng up a factory default controller. No new AP groups were created. When adding a WLAN SSID in the Campus WLAN wizard what AP group is available?
- AThe air-monitors AP group
- BThe logon AP group
- CThe default AP group
- DThe inital AP group
- EThe Spectrum AP group
42The reusable Aruba Controller wizards are accessible in what way?
- AThrough the CLI, afer the inital CLI wizard has been completed
- BOnly on startup through the CLI
- CIn the Web UI under confguraton.
- DIn the Web UI under maintenance
- EMust be initalized from CLI frst
43The Controller wizard enables which of the following controller clock confguratons?(Choose three)
- AManual confguraton of date and tme
- BOnly GMT can be confgured
- CSet tme zone
- DDaylight savings tme
- ENTP to a tme server
44When confguring ports in the Controller wizard, which of the following are NOT confguraton optons?(Choose two)
- ATrusted
- BSpeed
- CLACP
- DInter-VLAN routng
- ETrunk
45By default, which CLI based remote access method is enabled on Aruba controllers?
- ATelnet, SSH and RSH
- BTelnet and SSH
- CSSH
- DTelnet
- ERSH
46An Aruba controller can be accessed with which CLI based remote access methods?(Choose two)
- ATelnet
- BRSH
- CSFTP
- DSSH
- ESCP
47As an admin/root user, what other type of role-based management users can be created on Aruba controllers?
- AMaintenance user
- BGuest provisioning user
- CReportng Generaton user
- DAirWave management user
- EAuditng-compliance user
48Which log type should be enabled to troubleshoot IPSec authentcaton issues on Aruba Controllers?
- ASystem Logs
- BIDS Logs
- CWireless Logs
- DManagement Logs
- ESecurity Logs
49Referring to the above screen capture, if an administrator desires to change a specifc AP into a Spectrum Monitor without assigning the AP to a new group, which menus could be used?
- ANetwork > Controller
- BWireless > AP Confguraton
- CWireless > AP Installaton
- DAdvanced Services > Wireless
- EWizards > WIP Wizard
50A customer forgot all passwords for a controller. What method could you use to reset the passwords?
- ASSH to the controller and login to the password recovery account
- BConnect directly to the serial console and login to the password recovery account
- CTelnet to the controller and login to the password recovery account
- DOpen the controller and press the reset switch
- EInterrupt the boot process at CP-boot and select password recovery
51With CPSec disabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?
- ABasic IP
- BIPinIP
- CIPSec
- DGRE
- EMobile IP
52In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which other element?
- Athe default gateway
- Bthe remote AP
- Cthe foreign agent
- Dthe mobile node
- Ethe foreign switch
53When an 802.11 client roams what device decides when to move the client to another AP?
- AAruba AP
- BAruba controller
- CClient
- DRouter
- ERadius Server
54The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1. All
controllers are confgured with the wireless user VLAN 201. A wireless user associates with AP 1. Only L2 mobility is enabled.
Which elements will know about this associaton?- ALocal 1 only
- BLocal 1 and Local 2 and the Master
- CLocal 1 and the Master
- DAll Controllers
- ELocal 1 and AP1
55Which command will show all client associaton history?
- Ashow client ip (ip address) mobility
- Bshow current client ip (ip address)
- Cshow ap client status (mac address)
- Dshow ip mobile trail (ip address)
- Eshow mobile trail current (ip address)
56With CPSec enabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?
- AIPSec
- BMobile IP
- CIPinIP
- DSSH
- EEAP
57A client Roams from one Local controller-1 to another Local controller-2. The controllers are in diferent subnets and L3 Mobility is enabled. How is the client trafc sent back to Local-controller-1?
- AMultcast
- BL2 GRE Tunnel
- CRouted locally
- DIP-IP tunneled
- EFTP
58A network needs to implement L3 roaming. On the Master Controller, the administrator, enabled IP mobility, created a Domain and created the HAT table with all the IP addresses of the local controllers. He then enabled Mobility on the VAPs. The confguraton was then saved.
L3 Mobility is stll not working, what could be the cause? (Choose two)- AIP Mobility must be enabled on all controllers.
- BThe Domain must actvated on each controller
- CThe HAT table must be confgured with each controllers supported subnets.
- DIP-IP tunnels must be confgured between controllers.
- EThe HAT table must be confgured on each controller.
59By default, how long will an AP scan a single channel when ARM is enabled?
- A80 milliseconds
- B90 milliseconds
- C100 milliseconds
- D110 milliseconds
- E200 milliseconds
60Which actons does ARM (Adaptve Radio Management) perform? (Choose two)
- Aallows controllers to provision lower power when unauthorized APs are detected
- Ballows controllers to provision allowed Radio bands
- Callows controllers to provision the best power setng for APs
- Dallows controllers to provision the best channel for APs
- Eallows controllers to provision the AP Radio type
61Which of the following metrics does the ARM feature use to calculate the optmal channel and power level for Access Points? (two?
- ACoverage Index
- BInterference Index
- CPriority Index
- DRF Spectrum Index
- EFrequency Index
62How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHz radios of Aruba APs?
- AARM disables the 2.4Ghz radio for the specifed client
- BIt's not possible the move clients to 5GHz radios when they can see both 2.4 and 5GHz APs
- CCurrent Wi-Fi chipset frmware supports this by default
- DARM utlizes third party sofware on the wireless clients
- EARM suppresses the probe responses on the 2.4 ghz radio?
63Which of the statements below are TRUE regarding ARM's Spectrum Load Balancing feature? (Choose two)
- AAvailable only on 5GHz radios
- BDisabled by default
- CBalances client load across available channels/APs
- DEnabled by default
- EAvailable only on 2.4GHz radios
64What is the functon of Band Steering?
- ABalancing clients across APs on diferent channels within the same band
- BEncourages clients, 5GHz capable, to connect on the 5GHz spectrum
- CCoordinate access to the same channel across multple APs
- DEnables selecton of 20 vs. 40 MHz mode of operaton per band
- EEnables acceptable coverage index on both the "b/g" and "a" spectrums
65What are the Airtme Allocaton Policy optons for Airtme Fairness? (Choose three)
- ADefault Access
- BFair Access
- CDistributed Access
- DPriority Access
- EPreferred Access
66Which of the following statements is true of Spectrum Mode?
- ASpectrum mode can only be confgured for one AP at a tme
- BAn AP can be in spectrum mode for both 2.4 and 5G bands at the same tme
- CAn AP can be placed in Spectrum Mode via the Spectrum Profle
- DSpectrum mode can be confgured from the GUI under AP installaton
- ENo licenses are required to run an AP in Spectrum mode
67Which ARM feature addresses the issue of sticky clients by moving clients to associate to APs with beter 802.11
signal quality?- AClientMatch
- BAirtme Fairness
- CCoordinated access to a single channel
- DCo-Channel interference mitgaton
- EBand Steering
68Aruba Client Match does NOT use which of the following parameters to determine the best AP for a client
connecton?- ASpectrum Analysis
- BAccess Point load
- CSignal to Noise Rato
- DLocaton
- EDevice type
69What is the functon of Station Handoff Assist, if enabled?
- AForce device off AP if RSSI is below threshold
- BForce device to 5Ghz band
- CSend message to device to change AP
- DSend message to adjoining AP to accept device
- ESend message to adjoining AP to initate associaton to the device
70What is true about client match? (Choose two)
- ADoes Load balancing
- BDoes Spectrum load balancing
- CDoes Band Steering/Band Balancing
- DMoves higher trafc devices to adjacent APs
- ESends QRT frames to neighbor APs
71Which setngs cannot be modifed directly from a local controller?
- APort VLAN setng
- BSwitch Time Zone
- CPort trusted
- DRoles
- ESNMP Enable Trap Generaton
72Masters communicate confguraton informaton with locals using which tunnel type?
- APPTP
- BIPSec
- CProvision Tunnel Protocol
- DIP in IP
- EGRE
73In the above screen capture, the administrator notes that most of the confguraton optons are grayed out and have
no acton.
What is the cause of the problem?- Aatemptng to make global changes on a Master Controller
- Bthere is an error in the confguraton
- Catemptng to make global changes on a Local Controller
- Ddoes not have the correct sofware license
- Ethis change can only be performed via the CLI
74Referring to the above screen capture, on which Controller can you create a VLAN?
- AController 10.1.20.100 and 10.254.1.3 only
- BController 10.1.10.100 only
- CNone of the Controllers
- DAll three Controllers
- EController 10.254.1.101 only
75Referring to the above screen capture, on which controller can you add an administratve user and assign a controller management role?
- AController 10.254.1.101 only
- Bmust be done in the RADIUS server
- CController 10.1.20.100 and 10.254.1.3 only
- DAll three Controllers
- EController 10.1.10.100 only
76Refer to the above screen capture. By default, which controller's internal database will be used for user
authentcaton?- AController 10.1.10.100 only
- BController 10.1.20.100 and 10.254.1.3 only
- CAll three Controllers
- DYou can't tell from this screen
- EThe Controller with the user session
77Referring to the above screen capture, on which controller can you modify APs confguraton to enable ARM?
- AOn Controllers where ARM is enabled
- BNone of the Controllers
- CAll three Controllers
- DController 10.1.20.100 and 10.254.1.3 only
- EController 10.1.10.100 only
78The Master fails with Central Licensing enabled. What happens to the local Controllers?
- ALocals contnue to operate for 1 day
- BLocals operate for 30 days and accept new APs
- CLocals contnue to operate for 90 days and accepts new APs
- DLocals can only use their originally installed Licenses
- ELocals will operate with actve APs but not will accept any other APs
79With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?
- A802.1q
- BGRE
- CLWAPP
- DPPTP
- EHTTPs
80With CPSec disabled, which encrypton protocol does a tunnel mode campus AP's use on client trafc ?
- ANo encrypton is used
- BWEP, TKIP, and AES
- CWEP and AES
- DIt is provisioned by the Administrator
- ETKIP and AES
81In a campus environment, where are encrypton keys sent or stored when users roam between tunneled mode APs on the same controller using 802.1X?
- Asent to the new AP via GRE
- Bstored on the controller
- Csent to the new AP via IPSec
- Dstored on the RADIUS server
- Eoriginal AP sends keys to new AP
82In the diagram provided for this queston, the wireless user's laptop is associated with an Aruba AP in tunnel
forwarding mode. The AP terminates on the local controller.
When the client transmits, where will the 802.11 headers be removed?- AAP
- BL2 Switch
- CRouter
- DInternet
- ELocal Controller
83When confguring a server group containing 3 servers, a customer Chooses 'fail through mode'. What other
confguraton opton has to be enabled on the controller for this to work with 802.1x authentcaton?- ARound robin or top down mode
- BMAC authentcaton
- CServer group fall through mode
- DEAP Terminaton
- EMachine authentcaton
84A campus AP has been provisioned with a VAP in bridge forwarding and standard operaton modes. Which of the
following authentcaton types are supported? (Choose two)- AOpen System authentcaton
- BLocal authentcaton
- CCaptve portal authentcaton
- D802.1X authentcaton
- EVPN authentcaton
85Which method is NOT supported to provision an Aruba campus AP?
- ATelnet directly to AP
- BSSH to the AP's controller
- CWeb interface to the AP's controller
- DConsole to AP
- ECLI on controller
86When direct consoled to an AP, what is the command sequence to factory default the AP and re-bootstrap?
- Asetenv bootstat init
- Bpurge, save, boot
- Cprintenv, purge, boot
- Dinit, save, boot
- Esetenv master init, boot
87What setngs need to be changed on a factory default AP in order for it to use ADP to discover the Aruba Controller?
- AStatc route
- BAP group
- Cenable multcast
- DDNS of the controller
- Eno changes needed
88What are the types of user derivaton rules that can be applied to a user?(Choose two)
- AMAC
- BRole
- CSSID
- DVLAN
- EAP
89Which of these are NOT a client atribute that can be confgured in user derivaton rules?
- AMAC address
- Bencrypton
- CFilter ID
- DBSSID
- EDHCP opton value
90Which is a Device Specifc Atribute that can be evaluated in a user derivaton rule?
- Aauthentcaton server
- Blocaton by AP Name
- Cuser login name
- Dcontroller IP
- Econtroller Loopback address
91Which match conditon can be used by a server derivaton rule?(Choose two)
- Ainverse of
- Bless than
- Cgreater than
- Dequals
- Econtains
92An administrator wants to assign a VLAN to a user based upon the authentcaton process using Vendor Specifc
Atributes (VSA). Where are Aruba Vendor Specifc Atribute (VSA) values provisioned?- Aclient
- BRADIUS server
- Ccontroller
- DOpton 60 of DHCP reply
- EInternal user database
93View the Server group screen shot above.
A company has provisioned the same VAP, AAA and SSID profles at both its Miami and NY ofces. This Server Group is
applied for 802.1x authentcaton at both locatons. The user's credentals are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronizaton and both servers are reachable. What happens when the useratempts to authentcate?- ARadiusNY1 receives the request and returns a deny. No other acton is taken.
- BRadiusNY1 receives the request and returns a deny. The authentcaton request will then be sent to RadiusMiami
- CThe RadiusNY1 sends the request to RadiusMiami that replies to the controller
- DThe request is initally sent to RadiusNY1 then RadiusNY1 redirects the controller to send the authentcaton request to RadiusMiami
- EThe controller recognizes the users Domain and sends the authentcaton request directly to RadiusMiami.
94View the Server group and User Roles screen shots above.
A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius atribute of flter-Id with a value of "employee". The user was placed in the guest Role. What statements below are
correct?(Choose two)- AThe user was placed in the inital Role guest
- BRole derivaton failed because the incorrect operaton "value-of" was used
- CThe user was placed in the 802.1x authentcaton default Role guest
- DRole derivaton failed because roles are case sensitve
- E802.1x authentcaton failed so the user was automatcally placed in the guest Role
95A Server Group has been confgured with three Radius servers. Load balancing has been enabled. Choose the correct statement?
- AAll Radius request are sent round robin contnuously
- B10 request are sent to frst server then 10 to the next server
- COnly the frst two servers are used and the third is a backup server
- DRuns average response tmes and balances the load accordingly
- ETo use Load Balancing EAP Terminaton must be enabled
96Which profles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and LMSIP?(Choose three)
- AWLAN profle
- B802.1x authentcaton profle
- CVirtual-AP profle
- DAP System Profle
- ESSID Profle
97A user connected to a Captve Portal VAP successfully. When the user opens their browser and tries to access their
homepage, they get redirected as expected to another URL on the Aruba Controller. However, they see an error
message that web authentcaton has been disabled. What might be a cause of this?- AThe Captve portal profle has not been assigned to the AAA profle.
- BA server group has not been assigned to the captve portal profle
- CAn inital role has not been assigned to the AAA profle.
- DThe Captve portal profle has not been assigned to the inital role.
- ECaptve Portal has not been assigned in the SSID profle
98Which of the following will accept named VLANs as a parameter? (Choose three)
- Aa VLAN pool
- BUser Role for single VLAN
- CRADIUS Server atributes for role derivaton
- DFirewall session rule
- EPort trunk confguraton
99A customer has a remote AP deployment, where each remote AP has an IPSEC VPN tunnel with L2TP to the controller.
1 of the remote APs is stuck in the user table and hasn't yet transitoned to the AP actve table in the controller. The customer suspects that the AP is not setng up its VPN connecton successfully. Which of the following commands might be useful in troubleshootng this? (Choose three.)- ALogging level debugging security process localdb
- BLogging level debugging security process l2tp
- CLogging level debugging security process dot1x
- DLogging level debugging security process crypto
- ELogging level debugging security process vpn
100What is true about an AP in Hybrid Spectrum mode?
- AAll APs in AP-group scan home channel and service clients
- BMakes the AP a spectrum monitor, but does not afect other APs in the AP-group
- CPuts the selected band in spectrum mode and services clients on other band
- DScans all channels and services clients on home channel
- EScan home channel and services client trafc on home channel
101What is the total number of charts you can simultaneously monitor in a spectrum dashboard?
- A12
- B9
- C3
- D4
- E8
102An Aruba Controller is confgured with VLAN 1,5, 200, and 4095. All VLANs have IP addresses assigned. Which is the default management VLAN on the Aruba controller?
- AVLAN 200
- BVLAN 5
- CVLAN 1
- DNone, it must be defned
- EVLAN 4095
103Which of the following statements is true?
- AAruba Campus APs must be in the same broadcast domain as the Controller
- BAruba Campus APs must be physically atached to the Aruba Controller.
- CAruba Campus APs can be in diferent subnets from the Controller.
- DAruba Campus APs can be connected directly to the public internet
- EAruba Campus APs must be physically atached to the same Layer 3 switch.
104Referring to the diagram provided for this queston, in which locatons must you defne the new data VLANs for
wireless client trafc? (Choose two)- Aonly on the Aruba controller in an L3 deployment
- Bin the routers and switches where the APs are physically connected
- Cin the Aruba controller and the router it's connected to in an L2 deployment
- Din all APs and the L2 switches to which they are connected
- Ein all L2 switches where an Aruba AP is physically connected
105A controller is provisioned in L3 Mode for Wireless Users. What must be confgured on the controller to enable DHCP requests to an external DHCP server?
- Athe IP address of the APs
- Bthe DHCP server IPSEC Key
- Can IP helper command
- Dthe subnet address of the DHCP server
- Ethe IP address of the DNS server
106Which parameter(s) does a Master controller use to determine where a provisioned AP should terminate its GRE
tunnel?- Athe IP address of the AP
- Bthe MAC address of the AP
- Cthe IP address of the switch nearest to the AP
- Dthe name and group settings of the AP
- Ethe VLAN the AP is atached to
107Which of the following confguratons can accept a VLAN pool?(Choose two)
- AFW Policies
- BVirtual AP profle
- CUser Role
- DTrunk natve VLAN
- EServer derived role
108Which of the following is an Aruba Layer 3 redundancy mechanism?(Choose two)
- AARM
- BBackup AP group
- CBackup LMS-IP
- DHA
- EVRRP
109When confguring Fast Failover what are the 3 HA roles that can be selected? (Choose three)
- APrimary
- BActve
- CDual
- DStandby
- EBackup
110Fast Failover has been implemented between Local 1 and Local 2 separated by Routers. During testng Local1 was
disabled and all Campus APs backed up to Local 2 fawlessly. But the RAPs did not, they all failed.
What could be the cause?- AThe RAP whitelist must be ported over to Local 2
- BIPSec must be enabled on Local 2
- CRAPs are not supported by Fast Failover
- DRAPs should be confgured in their own AP-groups
- EA VPN IP Pool must be confgured on Local 2
111In the diagram provided for this queston, the client laptop is associated with the Aruba AP. The Aruba controller is
confgured to perform L2 switching for this SSID.- Aa
- Bb
- Cc
- Dd
- Ee
112In the diagram provided for this queston, the Aruba controller terminates one end of a GRE tunnel that carries
wireless user trafc.
Where does the other end terminate?- Aa
- Bb
- Cc
- Dd
- Ea or b
113In the above diagram, the system shows two Aruba access points and a wired user.
Which VLAN(s) do NOT need to be confgured on link A between the L2 switch and router to support the wireless
users?- A101 and 102
- B101 and 103
- Conly 101
- Donly 103
- E102 and 103
114In the above diagram, the system shows two Aruba access points.
Which VLANs must be confgured on trunk link D between the router and Aruba controller to support wireless users when the controller is provisioned for L2 operatons?- A10 and 103
- B10 , 101 and 102
- C101 and 102
- D10, 101,102 and 103
115Referring to the diagram provided for this queston, if the Aruba controller is confgured to perform L3 switching, what will be the wireless client laptop default gateway?
- Aa
- Bb
- Cc
- Dd
- Ee
116When confguring Captve Portal, which protocols are supported when accessing the Captve Portal? (Choose two.)
- ASSH
- BHTTP
- CHTTPS
- DVPN
- ETELNET
117When the controller is confgured for Captve Portal and the user is only required to provide an email address for
authentcaton, which opton is confgured in the GUI?- Adisable CP Login
- Beap method
- Cenable user logon
- Denable guest logon
- Eenable terminaton
118A user logged in with the Captve Portal setngs shown in the above screen capture.
What does the user need to do to logout?- Await 60 minutes then logout
- Bwait 30 minutes then logout
- Cclick Logout on the browser screen
- Dhe cannot logout
- Ewait 10 seconds for redirect
119Screenshots of the Captve Portal authentcaton profle and server group of a guest network are displayed above.
How was the user authentcated?- Awith a radius server called Internal
- Bwith the Internal database
- Cwith a radius server called Radius01
- Duser wasn't authentcated against any server
- Ewith another form of authentcaton
120Where should mobility domains be enabled in a network with 1 master, 1 backup master and 5 local controllers ?
- AAll the local controllers in the network
- BAll the controllers where the client is allowed
- COnly on the master controller
- DMaster and backup master
- Eon the backup master
121What are two diferent methods of confguring AP redundancy between 2 local controllers?(Choose two.)
- AConfgure the locals as remote nodes
- BFast-Failover
- CAP Redundancy can only be confgured between a Master and Local
- DBackup LMS IP
- EUse named VLANS
122Which protocols does the Aruba controller utlize for controller redundancy (Choose two)?
- AVRRP
- BHSRP
- CHA
- DVPN
- EIP-IP
123With Fast-Failover disabled, to which IP address should the Aruba AP terminate its GRE tunnel for layer 2 controller redundancy to work and to support failover of access points?
- ALoopback IP address of backup Aruba controller
- BVRRP IP address
- CHSRP IP address
- Dmanagement IP of an Aruba controller
- Emanagement IP of the backup Aruba controller
124As illustrated in the above diagram, a company has two campus locatons and a building headquarters all located in diferent cites.
Following best practces, what would be the best way to construct mobility domains for the company?- ABuildings (1, 2) in one domain, Building (3) in one domain, and Buildings (4, 5, 6) in one domain
- BBuildings (1, 2, 3, 4, 5, 6) in one domain
- CBuildings (1, 2, 4, 5, 6) in one domain and Building (3) in one domain
- DBuildings (1, 2) in one domain and Buildings (3, 4, 5, 6) in one domain
- EBuildings (1) in one domain building (4) in one domain
125How many Aruba controllers can be added to a single mobility domain?
- AThere is no controller limit
- BControllers supportng up to 6000 AP's
- C128 controllers supportng 2000 users
- D256 controllers with no more than 1024 subnets
- E64 controllers of any type
126In a master-local controller scenario, where is the mobility domain defned?
- Athe master and the local controllers where roaming is needed
- Bthe AP group
- Cthe master controller
- Dthe master and the local controllers
- Ethe local controller
127A university, has 2 departments. Department 1 has its own mobility domain with one controller. Department 2 has multple controllers confgured in a second domain. The university is planning on ofering a new applicaton and needs users to be able to roam between both mobility domains.
What is the best way to accomplish this?- AThe 2 existng domains should be lef as they are. A 3rd mobility domain should then be created and all 3 controllers need to be added to it
- BMerge the controllers into the same mobility domain
- CThe IP subnets of all controllers need to be confgured to match
- DThis cannot be accomplished
- ECreate a new domain between a department 1 controller and one of the department 2 controllers
128A port frewall policy is applied to a trunk port that denies controller access. An "allow all" VLAN frewall policy is
applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port atempts to gain access to the
controller. Which of the following statements is true?- AYou cannot place a frewall policy on a Ports VLAN when the Port already has a policy, therefore no controller access
- BThe VLAN policy is applied, then the port policy, therefore no controller access
- CThe Port policy is applied, therefore no controller access
- DWhen locally connected to a controller's port you always have controller access
- EThe VLAN policy is applied, therefore access to the controller is allowed
129An access port has been placed in trusted mode. The VLAN on the port is in Untrusted mode. Which of the following statements is true?
- AThe trafc is untrusted since the VLAN is untrusted
- BThe trafc is trusted since the port is trusted
- CThis is an invalid confguraton, both must be set the same
- DOnly trafc from that specifc port is trusted, all other trafc is untrusted
- EYou cannot set VLANs as trusted or untrusted
130A wired device is connected to an untrusted port on a controller. How can a role be assigned to the device?
- AThe Role assigned to the untrusted port
- BAdding a wired AAA profle to a VLAN on the untrusted port
- CA default Role can be directly assigned to an untrusted port
- DRoles are assigned to devices connected to a trusted port
- EAn inital Role can be assigned directly to the VLAN
131A port on a controller has been confgured as untrusted. No wired access AAA profle or Global AAA profle is
confgured. When a user connects to that port which of the following statements is true?- ASince there is no wired access AAA profle or Global AAA profle the user will be given the logon role.
- BSince there is no wired access AAA profle, only port policies will be applied
- CThe user will fall into the default wired access AAA profle and will be given the inital role.
- Dthe user is denied all access automatcally because no wired access AAA or Global AAA profle is assigned.
- EWhen confguring the port as untrusted, an error message of "no wired access AAA profle exists" Therefore this is an invalid confguraton
132Which method can APs use to discover a controller?
- ADynamic DNS (DDNS)
- BDHCP
- CPAPI
- DPnP
- EHTTPS
133When APs boot up, in which order do they Select a controller?
- Astatc, DNS, DHCP, ADP broadcast, ADP multcast
- Bstatc, DHCP, ADP broadcast, ADP multcast, DNS
- Cstatc, DHCP, DNS, ADP multcast, ADP broadcast
- DDNS, DHCP, ADP multcast, ADP unicast, statc
- EDNS, statc, ADP multcast, ADP broadcast
134An AP is not communicatng with the controller. Upon investgaton you fnd that the AP is not discovering its
controller through DNS. Instead, it received a DHCP reply with opton 43 specifying the SIP server's IP address. How do you resolve this problem?- AThe AP should be purged
- BStatcally confgure the AP to ignore Opton 43
- COn the DHCP server implement Opton 60
- DAfer failing opton 43 the AP should have proceeded with ADP, therefore the AP is faulty and needs to be replaced
- EStatcally confgure the AP to only use DNS resoluton and not other dynamic discovery methods
135How is an AP redirected to a Local controller afer DNS resoluton returns the Master's IP address?
- AMaster looks at the AP-Group and LMS-IP atributes
- BMaster looks at the AP-Group and CONTROLLER-IP atributes
- CIn the AP-provisioning screen, the LMS-IP atribute must be set
- DIn the AP-provisioning screen, set the CONTROLLER-IP atribute
- EThe AP must be statcally confgured to fnd the local controller
136An AP was confgured to use dynamic controller discovery and assigned to an AP group, then powered of for over a week. When the AP is redeployed, what previous confguraton will it retain?
- AThe controller's IP address
- BIts AP name and AP Group
- CThe controller IP address and the AP Group
- DIts Serial Number
- EAfer a few days all confguratons are lost
137Referring to the diagram provided for this queston, an employee brought an unauthorized AP from home and
atached the LAN port to the cubicle Ethernet port. All Aruba APs and AMs as well as the employee AP are in VLAN 80 and within RF range of each other. No trafc from the wired or wireless network has passed through the unauthorized AP yet, but the AP began wireless broadcasts.
How will the Aruba system initally classify the employee's non-Aruba AP?- Aan AM
- Ban interfering AP
- Ca valid AP
- DRogue AP
- Ea known interfering AP
138Referring to the diagram provided for this queston, an employee brought an unauthorized AP from home and
atached it to the cubicle Ethernet port as shown in the diagram. The APs are in VLANs as shown in the diagram. Only AP1 is within RF range.
How will the Aruba controller classify this AP?- Aa Rogue AP
- Ban AM
- Can AP
- Da workstaton
- Ean Interfering AP
139Referring to the diagram provided for this queston, an employee brought an unauthorized AP from home, but did not atach it to the LAN infrastructure. The APs are in the VLANs as shown in the diagram. Only AP1 is within RF range of the employee AP.
By default, how will the Aruba system classify the employee's AP?- Aa valid workstaton
- Ban Interfering AP
- Can AP
- Dan AM
- ERogue AP
140What can an AM do that an AP cannot do?
- ADetect an AP failure
- BScans all channels in under 1 minute
- CDetect interfering APs
- DDetect rogue APs
- EScan all valid channels
141A client has not purchased the RF Protect license. Without this license what is stll supported, in the basic OS?
- ARogue Detecton and Containment
- BWithout the License there is no Intrusion detecton nor Intrusion Protecton
- CCan only confgure High, Medium and Low setngs, No customizaton
- DSpectrum Analysis
- EOnly Intrusion Detecton but no Intrusion Protecton
142Valid client laptop is atemptng to associate to a Rogue AP. The AM in proximity creates a Tarpit. What are the two
mechanisms that the AM can utlize to Tarpit?(Choose two- AFake ESSID
- BFake client's BSSID
- CFake Channel
- DFake BSSID
- EFake SSID
143(group8) #show ap actve
Actve AP Table
---------------
Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a Ch/EIRP/MaxEIRP
---- ----- ---------- --------- ------------------- ----------- -------------------
AP1 building1 10.1.80.150 0 AM 0 AM
AP2 building1 10.1.80.151 0 AM 0 AM
A user called technical support because they cannot see any of their APs in building one. You perform the "show" command as illustrated above.
What can you conclude about these two APs from this output?- Athe user needs to confgure his client to use the b/g band
- Bthe user needs to confgure his client to use the a band
- Csystem will not functon because there is no building1 group defned
- Dthe GRE for the APs terminate on two diferent controllersn 10.1.80.150 and 10.1.80.151
- Ethe building1 APs will not accept any user connectons
144Based on the above screen capture for Interfering APs, what can you conclude?
- AThey are classifed as interfering because they are running in g mode.
- BThe APs are classifed as interfering because they are all transmitng on channel 6.
- CThe APs must be connected to the Aruba network.
- DThere must not be any evidence that the APs are atached to the wired corporate network.
- EThese APs are classifed as interfering because they are not Aruba APs
145(group8) #show ap arm history ap-name AP1
Interface nwif0
ARM History
-----------
Time of Change Old Channel New Channel Old Power New Power Reason
-------------- ----------- ----------- --------- --------- ------
2015-1-28 07n58n53 157+ 149+ 21 21 I
2015-1-28 07n52n06 149+ 157+ 21 21 M
2015-1-28 07n16n59 157+ 149+ 21 21
Interface nwif1
ARM History
-----------
Time of Change Old Channel New Channel Old Power New Power Reason
-------------- ----------- ----------- --------- --------- ------
2015-1-28 08n52n53 6 1 21 21 I
Referring to the output above. What can you conclude about AP1?- AThis device is unstable because the channel assignment changed.
- BThe device changed channels recently
- CThis device is scanning channels.
- DThe device changed channels and power levels recently.
- EThe device is transmitng at maximum power levels.
146Which of the following parameters can be specifed in a rule for AP classifcaton? (Choose three)
- ADiscovering APs
- BOperatng mode of an AP
- CNumber of clients connected to an AP.
- DSNR of an AP.
- ESSID of an AP
147Which of the following functons can be confgured in the Controller WIP wizard? (Choose three.)
- AConfgure rules for AP classifcaton.
- BConfgure APs as Air Monitors
- CBlacklistng Rules for clients
- DIdentfy encrypton method used
- EConfgure preset levels for intrusion detecton
148A client device associates with an SSID provisioned with 802.1X authentcaton. The client is set for PEAP
authentcaton. EAP terminaton (AAA Fastconnect) is disabled on the controller. But the client contnuously cycles
through the authentcaton process. Which of the following could cause this? (Choose two)- AThe DHCP server is not enabled.
- BThe client has an expired or revoked server certfcate
- CThe client is provisioned with the wrong EAP type
- DThe VLAN is missing for the SSID.
- EThe controller does not support PEAP in this mode.
149A client device associates with an SSID provisioned with 802.1X authentcaton. The client is set for LEAP
authentcaton. EAP terminaton (AAA Fastconnect) is enabled on the controller. But the client contnuously cycles
through the authentcaton process. Which of the following could cause this?- AThe Radius server is rejectng the client credentals
- BThe client has an expired or revoked server certfcate
- CDHCP server is not enabled.
- DThe VLAN is missing for the SSID.
- EThe controller does not support LEAP in this mode.
150A client ataches to a secure jack interface set to untrusted. But when the client tries to access the captve portal page, the following message appears, "Web Authentcaton is not enabled." What might be wrong?
- AA "aaa" profle needs to be selected on the Wired Access page.
- Bthe controller port needs to be set to trusted.
- Cthe client has the browser provisioned with proxy setngs.
- DWeb Authentcaton cannot be used in this way.
- EA Captve Portal profle needs to be assigned to the inital role.
151Which command, when executed on a master controller, will show the APs connected to all controllers?
- Ashow ap actve
- Bshow stm connectvity
- Cshow ap bss-table
- Dshow ap database
- Eshow ap controller-lms
152Which of the following commands is most useful in showing the trafc of an individual user?
- Ashow acl hits
- Bshow datapath session table
- Cshow frewall
- Dshow traffic client
- Eshow rights
153An Aruba based network has a Master and four local controllers deployed. But one of the locals, a new installaton, is not seen by the Master. What might be wrong? (Choose two.)
- APAPI is not enabled on the local controller
- BThe master controller can only support three local controllers.
- CIPSec is blocked by the internal network between the local and the
- DThe passphrase does not match on the master and local controllers.
- EGRE is blocked between the master and local controllers.
154An Aruba controller is confgured with the correct IP address and gateway informaton and is connected to the
corporate LAN via a core layer 2 switch. Control Plane Security is not enabled on the network. An access point is provisioned with AP name and group and connected to a diferent Layer 2 switch on the corporate LAN that has IP connectvity to the core layer 2 switch. The AP powers on and layer 2 connects to the network, but the wireless radios do not power on.
Which could cause this conditon? (Choose two.)- Aa DHCP server is not confgured for the segment to which the AP is connected
- Bthe layer 2 switches have ACLs that block GRE trafc
- Cthe layer 2 switches are confgured to block IPSec trafc
- Dthe AP's mac address needs to be confgured in the Aruba controller whitelist
- Ethe AP and controller are in diferent subnets
155In the diagram provided for this queston, four buildings are identfed on a college campus. Most of the wireless LAN trafc will be from students accessing the internet.
According to Aruba best practces, which building is the best locaton to install the Aruba mobility controller?- A3rd party site
- Blibrary
- Cserver farm
- Ddata center
- Edormitory
156Referring to the diagram provided for this queston, representng an ofce wireless LAN deployment, there will be
approximately 250 users in the ofces secton of the building. All Switches are setup as L3 routers.
According to Aruba best practce, which network device is the best choice for the wireless clients' default gateway?- Adevice 'A'
- Bdevice 'B'
- Cdevice 'C'
- Ddevice 'D'
- Edevice 'C or D'
157One hundred (100) additonal APs were deployed in an existng network. But some APs are not able to connect to the lms-ip address, even though all of the APs belong to the same AP group. Which of the following are NOT potental causes? (Choose two).
- AThe problem APs are not getng an IP address.
- BThe problem APs have the wrong lms-ip address setng
- CThere is a frewall between the problem APs and the controller blocking PAPI.
- DThe controller does not support that many APs in a single AP-Group.
- EThere are not enough AP licenses to support the additonal quantty of APs.
158IEEE 802.11r provides support for which of the followingn
- Aradio measurements within a WLAN
- Bradio measurement within an ESS
- Cfast roaming within an ESS
- Dfast roaming within a BSS
- Eroaming across controllers
159If a Remote AP (RAP) is atemptng to contact a controller that is behind a NAT device what protocol must be allowed through the NAT/Firewall?
- AGRE
- BSSH
- CIPSec
- DNATT
- EPAPI
160Which of the following are NOT valid RAP forwarding modes (Choose two)?
- ABridge
- BTunnel
- CBackup
- DSplit-Tunnel
- EStandard
161Which of the following are valid RAP operatng modes?
- AAlways, Backup, Standard, Persistent
- BAlways, Backup, Tunnel, Persistent
- CAlways, Hotel-Connect, Tunnel, Standard
- DBackup, Hotel-Connect, Standard, Persistent
- EBackup, Normal, Tunnel, Always
162When confguring split tunnel mode on a Remote AP (RAP) where is the routng functon for the split tunnel defned?
- AOn the IP routng tab in the confguraton screen
- BOn the AP provisioning screen
- CIn the RAP statc routng tables
- DIn the Firewall policy
- EIn the RAP whitelist
163When does a RAP's backup SSID begin broadcastng?
- AWhen the GRE tunnel to the controller is established
- BWhen the IPSec tunnel to the controller is established
- CWhen the controller cannot be reached with PAPI
- DWhen bridging is required for guest users
- EWhen the controller cannot be reached with SSL
164A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristc?
- AThe RAP uses PAPI to send data trafc to the controller
- BLocal trafc frst goes to the controller and is then spilt back to the local network.
- CThe user role must have a "route dst-nat" statement to locally bridge the trafc
- DTrafc is IPSec encrypted before it is sent to the controller.
- EThe user role must have a "Permit" statement in order to locally bridge the trafc.
165A Remote AP was properly functoning before losing its internet connecton and now cannot communicate with the controller. What SSID is the AP broadcastng?
- AThe SSID in Operatonal mode Persistent and Forwarding mode Bridge
- BSSID in Operatonal mode Standard and Forwarding mode Tunnel
- CThe SSID in Operatonal mode Always and Forwarding mode Tunnel
- DThe SSID in Operatonal mode Split Tunnel and Forwarding mode Bridge
- EThe SSID in Operatonal mode Always and Forwarding mode Backup
166A Remote AP provisioned with an SSID in "Bridged" forwarding mode has which one of the following characteristcs?
- AThe client obtains its IP address from the controller
- BThe client's default gateway must be the controller
- CThe client trafc is forwarded through a GRE tunnel to the controller
- DThe client's default gateway may be the Access Point or a local gateway
- EThe client's authentcaton must be 802.1X.
167An AP 105 was converted into a RAP. The RAP can authentcate its IPSec tunnel to a controller using which of the
following methods? (Choose two.)- A802.1X/EAP authentcaton
- BCaptve Portal authentcaton
- CIP address authentcaton
- DUsername/Password authentcaton
- ECertfcate/MAC address authentcaton
168Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?.
- AAll data and control trafc goes to the controller unsecured.
- BThe user role must have a "Permit" statement in order to locally bridge the trafc.
- CThe RAP uses PAPI to send data trafc to the controller.
- DThe user role must have a "route src-nat" statement to locally bridge the trafc.
- ELocal user trafc frst goes to the controller and is then spilt back to the local network.
169A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which of the following characteristcs?.
- ALocal trafc frst goes to the controller and is then spilt back to the local network
- BUser Trafc is CPSec encrypted before it is sent to the controller
- CThe user role must have a "Permit" statement in order to locally bridge the trafc.
- DThe user role must have a "permit dst-nat" statement to locally bridge the trafc
- EThe RAP uses UDP 4500 to send trafc to the controller
170The corporaton has deployed hundreds of RAP3 and all are working. A user has received a RAP3 from the IT
department. At his home he connects the Ethernet port to his DSL modem. The corporate SSID is not advertses but an Instant SSID is. What could be the problem?- AThe actvate server does not have this RAPs confgured
- BThe corporate Firewall is blocking VPN
- CThe RAP3 must be pre-staged
- DThis RAP was purchased as an IAP and not as a RAP
- EThe user must connect his laptop, get the Zero touch window and enter the URL
171What is the purpose of Mesh Clusters?
- ATo enable mesh APs to join the nearest mesh portal cluster
- BTo cluster mesh APs of the same model together
- CTo defne a group of mesh APs that create mesh links with each other
- DTo ensure that mesh APs with the same VAPs are not in the same cluster
- ETo separate Mesh points from Mesh Portals
172A company purchased an indoor mesh deployment using the 7005 controller and the AP 115 models, where 5 APs will be deployed on a foor to provide wireless internet access for users. Users may open VPN tunnels using sofware clients over the wireless network to a 3rd party VPN concentrator overseas. The company wants to limit wireless user access to TCP trafc locally and VPN trafc overseas.
In additon to the base AOS, which licenses will be necessary for this deployment?- AVPN, PEF-NG
- BAP Capacity, PEF-NG, VPN
- CAP Capacity, PEF-NG
- DAP Capacity
- EPEF-NG, PEF-V
173How does an Aruba infrastructure calculate a wireless device's locaton?
- AGPS
- BRF Fingerprintng
- CTDOA
- DRSSI triangulaton
- ELBS
Informações
- Descrição
- Quiz sobre Sem título, criado por Pablo Flores em 23-03-2017.
- Autor
- Pablo Flores
- Idioma
- Español
- Visualizações
- 20
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz