ACMP_6.3 Online Practice Questions and Answers

A network administrator wants to terminate VPN sessions on a local controller in the DMZ. Which statement is true about the PEF-VPN license?

A. It is only applied to the master controller

B. It is only applied to the DMZ controller.

C. It is based on the number of APs

D. One license is needed on the master and the DMZ local

E. It is distributed by the license server as needed

What is the first role a user is given when a user associates to an open WLAN?

A. The guest post authentication role

B. The initial role in the captive portal profile

C. The role in the server group profile

D. The initial role in the AAA profile

E. The initial role in the 802.1x profile

When an 802.11 client roams what device decides when to move the client to another AP?

A. Aruba AP

B. Aruba controller

C. Client

D. Radius Server

E. Router

What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

A. Default Access

B. Priority Access

C. Fair Access

D. Preferred Access

E. Distributed Access

In the above screen capture: The administrator notes that most of the configuration options are grayed out and have no action. What is the cause of the problem?

A. attempting to make global changes on a Master Controller

B. attempting to make global changes on a Local Controller

C. this change can only be performed via the CLI

D. does not have the correct software license

E. there is an error in the configuration

Exhibit:

Referring to the above screen capture, on which Controller can you create a vlan?

A. Controller 10.1.11.100 only

B. Controller 10.1.11.101 and 10.254.1.3 only

C. All three Controllers

D. None of the Controllers

E. Controller 10.254.1.101 only

With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?

A. 802.1q

B. LWAPP

C. PPTP

D. GRE

E. HTTPs

In the diagram provided for this question, the wireless user's laptop is associated with an Aruba AP in

tunnel forwarding mode. The AP terminates on the local controller.

When the client transmits, where will the 802.11 headers be removed?

A. AP

B. L2 Switch

C. Router

D. Controller

E. Internet

Centralized licensing is not enabled in a network of 1 Master and 2 Local controllers, what should be the license count on all controllers to terminate 8 APs on each Local controller and support Local redundancy?

A. 16 AP license on all controllers

B. 8 AP license on Master and 16 AP license on both locals

C. 8 AP license on all controllers

D. 1 AP license on Master and 16 AP license on both locals

E. 16 AP licenses on the Locals

A client device associates with an SSID provisioned with 802.1X authentication. The client is set for LEAP authentication. EAP termination (AAA Fastconnect) is enabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this?

A. The Radius server is rejecting the client credentials.

B. The client has an expired or revoked server certificate.

C. The DHCP server is not enabled.

D. The VLAN is missing for the SSID.

E. The controller does not support LEAP in this mode.

A client attaches to a secure jack interface set to untrusted. But when the client tries to access the captive portal page, the following message appears, "Web Authentication is not enabled." What might be wrong?

A. The client has the browser provisioned with proxy settings.

B. The controller port needs to be set to trusted.

C. A "aaa" profile needs to be selected on the Wired Access page.

D. A Captive Portal profile needs to be assigned to the initial role.

E. Web Authentication cannot be used in this way.

An Aruba controller is configured with the correct IP address and gateway information and is connected to the corporate LAN via a core layer 2 switch. Control Plane Security is not enabled on the network. An access point is provisioned with AP name and group and connected to a different Layer 2 switch on the corporate LAN that has IP connectivity to the core layer 2 switch. The AP powers on and layer 2 connects to the network, but the wireless radios do not power on.

Which could cause this condition? (Choose two)

A. the layer 2 switches have ACLs that block GRE traffic

B. the layer 2 switches are configured to block IPSec traffic

C. a DHCP server is not configured for the segment to which the AP is connected

D. the AP's mac address needs to be configured in the Aruba controller whitelist.

E. the AP and controller are in different subnets

When does a RAP's backup SSID begin broadcasting?

A. When the GRE tunnel to the controller is established.

B. When the IPSec tunnel to the controller is established.

C. When the controller cannot be reached with PAPI

D. When bridging is required for guest users.

E. When the controller cannot be reached with SSL

A Remote AP provisioned with an SSID in "Bridged" forwarding mode has which one of the following characteristics?

A. The client obtains its IP address from the controller.

B. The client's default gateway must be the controller.

C. The client traffic is forwarded through a GRE tunnel to the controller.

D. The client's default gateway may be the Access Point or a local gateway.

E. The client's authentication must be 802.1X.

An AP 105 was converted into a RAP. The RAP can authenticate its IPSec tunnel to a controller using which of the following methods? (Choose two)

A. 802.1X/EAP authentication

B. Captive Portal authentication

C. IP address authentication

D. Username/Password authentication.

E. Certificate/MAC address authentication.