Refer to the exhibit.
An Aruba solution uses AirMatch with the default AirMatch profile settings. A network administrator sees that a scheduled optimization was completed, but a plan was not deployed.
Based on the exhibit, why did this occur?
- A . The cost of the new plan exceeds the amount allowed by the feature license
- B . The new plan did not offer significantly improved quality
- C . The solution uses master-local mode
- D . ARM is disabled in the radio profile, so AP radios are considered frozen
Refer to the exhibit.
Network administrators need to set up a WLAN that uses WPA2 encryption and authenticates users with a preshared key (PSK) that is the same for all users. Administrators do not see where they should specify the option for the preshared key.
What should the administrators do?
- A . Click Personal in the slide bar.
- B . Click the + icon in the Authentication server section
- C . Return to the first page in the wizard and select the guest option
- D . Configure an L3 authentication profile after the WLAN wizard is complete
What is a reason for a company to choose to deploy an Aruba 7024 Mobility Controller (MC) rather than an Aruba 7010 MC?
- A . to support 802.11ac Aps rather than only 802.11n APs
- B . to support more wireless users
- C . to support more POE devices directly connected to the MC
- D . to support a faster firewall throughput rate
A company wants to provide wireless access for guests with their Aruba solution.
Which configuration feature requires the customer to purchase PEFNG licenses?
- A . redirection of guests to an external captive portal
- B . provision of DHCP services to unauthenticated guests
- C . addition of custom rules to control access for authenticated guests
- D . customization of the internal captive portal login page
A company has an Aruba Mobility Master (MM)-based solution. A network administrator wants to collect and analyze information about clients and access points (APs) over extended periods of time.
What should the administrator do to achieve this goal?
- A . Add Aruba AirWave to the solution.
- B . Run a Traffic Analysis report on the MM.
- C . Make sure that MM has sufficient AppRF licenses.
- D . Enable archival from the MM interface Maintenance windows.
Refer to the exhibit.
The exhibit shows output from a Mobility Master (MM) dashboard.
What is a valid reason for the administrator to click the akamai square under applications?
- A . to create filter rules in order to control wireless user access to this application
- B . to download a report about the usage of this application over time
- C . to see more details about this application, such as a list of aggregated sessions
- D . to see the break down for only roles, destinations, WLANs and devices that use this application
What is a requirement for the Dashboard > Traffic Analysis window on the Aruba Mobility Master (MM) to show data?
- A . Airmatch and ClientMatch must be enabled.
- B . The solution must have active PEFNG licenses.
- C . Firewall policies must include application filtering rules.
- D . WLANs must use the decrypt-tunnel forwarding option.
How can network administrators upgrade AirMatch on an Aruba Mobility Master (MM)?
- A . Upgrade Client Match as part of a global software upgrade, and upgrade AirMatch separately as a loadable service module (LSM).
- B . Upgrade AirMatch as part of a global software upgrade, and upgrade Client Match separately as a loadable service module (LSM).
- C . Upgrade AirMatch and Client Match through a global software upgrade.
- D . Upgrade Client Match and AirMacth separetely as a loadable service modules (LSMs).
An AP operates on channel 6.
Which device causes the most significant and consistent interference with the signal?
- A . cellular phone
- B . weather radar
- C . wireless security camera operating on channel 8
- D . AP operating on channel 11
Refer to the exhibit.
Based on the exhibit, what is the maximum number of APs that this Mobility Master (MM) solution can support?
- A . 0
- B . 1
- C . 32
- D . 500
A network administrator needs to create an Aruba firewall rule that permits wireless users to receive DHCP settings when they first connect to the Aruba solution.
What are the correct source and destination aliases for the rule?
- A . source = any and destination = user
- B . source = any and destination = any
- C . source = user and destination = user
- D . source = user and destination = any
How can network administrator provide high availability for APs deployed in an Aruba Mobility Master (MM)-based architecture?
- A . Establish clusters of Mobility Controllers (MCs).
- B . Configure MM to provide backup AP tunnel termination in case of controller failure.
- C . Deploy all licenses locally yo APs, so that they can continue to function if they lose contact with their controller.
- D . Configure APs to convert to controller-less Instant AP mode during controller failure.
A WLAN in an Aruba Mobility Master (MM)-based solution enforces Enterprise-WPA2 security and uses the tunnel forwarding mode. The company has an external RADIUS server.
Which device exchanges RADIUS packets with the RADIUS server?
- A . Mobility Controller (MC)
- B . wireless client
- C . access point (AP)
- D . Mobility Master (MM)
A network administratpr adds several new APs to an Aruba solution that uses AirMatch. The administrator does not want to change the channel for the existing APs, but wants the new APs to receive a provisional plan for their channels and power.
What should the administrator do to meet this goal?
- A . Run an on-demand quick AirMatch optimization.
- B . Run an on-demand incremental AirMatch optimization.
- C . Temporarily enable ARM on the existing and new APs, while AirMatch scheduling remains enabled.
- D . Temporarily disable AirMatch scheduling, and then enable ARM on the existing and new APs.
What is the minimum space between channels in the 2.4GHz range to prevent overlap?
- A . 1 channel
- B . 3 channels
- C . 5 channels
- D . 7 channels
Which task can an Aruba Air Monitor (AM) perform?
- A . Analyze wireless traffic patterns at the application level.
- B . Optimize RF through the AP channel and transmit power plans.
- C . Analyze RF signals to determine the cause of non-802.11 interference.
- D . Help to detect rogue APs in the environment.
A Mobility Controller (MC) runs ArubaOS 8.
What is a valid reason for an administrator to set the MC to master-local mode?
- A . The company already has a partially hierarchical deployment based on the 6.x code and wants to keep the current architecture.
- B . The company needs to manage third-party network infrastructure devices with the use of the master controller interface.
- C . The company wants a deployment architecture that allows administrators to configure all MC settings from a single location.
- D . The company requires a centralized licensing architecture that provides global license pools.
A network administrator wants to implement MAC filtering for the wireless network of a local financial firm to ensure that only employees can access the wireless network.
What is a potential weakness of this solution?
- A . MAC filters cannot be applied with WPA2 encryption.
- B . Authorized MAC addresses are visible in plaintext in the air and can be easily spoofed.
- C . Many popular clients do not have the capability to connect to WLANs that use MAC filters.
- D . MAC filters offer no protection against authorized users who try to connect unauthorized devices.
Which type of authentication server should administrators select to authenticate users to a ClearPass server?
- A . Windows
- B . RADIUS
- C . TACACS+
- D . LDAP
A network administrator wants to use unique digital certificates installed on user devices to authenticate wireless users.
Which EAP method should the RADIUS server and clients support?
- A . PEAP and MS-CHAPv2
- B . EAP-TLS
- C . EAP-TTLS and MS-CHAPv2
- D . LEAP
A company has an Aruba solution. The company wants to host a guest login portal with this solution, and the login portal must gie guests the option to create their own login accounts.
How can a network administrator help meet these criteria?
- A . Choose the Internal captive portal with email registration option for the guest WLAN.
- B . Make sure to create a guest provisioning account for the guest WLAN.
- C . Disable authentication in the captive portal profile for the guest WLAN.
- D . Choose ClearPass or the other external captive portal option for the guest WLAN.
A network administrator needs to configure firewall rules for three roles:
– Finance
– Sales
– Employee
Several rules apply to both the Employee and Sales roles, but not to the Finance role.
What is the simplest way to configure these rules?
- A . Define the Employee and Sales roles as internal roles, and then configure the rules as global rules for internal users.
- B . Apply these rules as a subnet-based policy, and then ensure that only Employee and Sales users are assigned IP addresses in that subnet.
- C . Select either the Employee or Sales role, and then configure these rules within the global policy.
- D . Create a policy with these rules, and then apply that policy to the Employee and Sales roles.
An Aruba Mobility Master (MM)-based solution has a WLAN that uses WPA2-Enterprise security. A test login on a wireless client fails.
How can a network administrator determine whether the RADIUS server rejected the credentials or another issue occurred?
- A . View Technical Support information for the MM.
- B . Ping the IP address configured as the RADIUS server.
- C . Use the MM AAA Server Test Diagnostic tool.
- D . Use the tools in the MM Dashboard > Security window.
What does an Aruba Mobility Master (MM) do before it deploys a configuration to a Mobility Controller (MC)?
- A . It encrypts the configuration to be deployed and backs it up to a secure archive.
- B . It obtains the current configuration, encrypts it, and backs it up to a secure archive.
- C . It synchronizes the configuration with templates on Aruba AirWave.
- D . It removes any commands that are not supported on that MC or have dependency errors.
Refer to the exhibit.
The exhibit shows output from a Mobility Master (MM) dashboard.
What does the health status indicate?
- A . It takes the AP about twice as long to send data to the client as expected if all transmissions succeeded.
- B . About half of the heartbeats the client sends reaches the Mobility Manager (MM).
- C . The maximum data rate that 802.11ac supports is about twice as high as the data rate the client uses.
- D . The client device only complies with about half of the rules in the endpoint health policy.
A network administrator creates the role employees and adds the rule to it:
user any any permit
The first several wireless clients assigned to the employees role are assigned IP addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees role are then assigned IP addresses in the 10.10.20.0/24.
When the Aruba firewall matches traffic from these clients to the user any any permit rule, what does it do?
- A . It drops traffic from wireless clients in both the 10.10.0/24 subnet and 10.10.20.0/24 subnet.
- B . It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet as long as the packet has a source IP.
- C . It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops the traffic from wireless clients in the 10.10.10.0/24 subnet.
- D . It permits the traffic from wireless clients in the 10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet.
A company has an Aruba solution. A network administrator wants to prevent wireless users from accessing shopping web sites with a bad reputation.
What should the administrator set up to deny such traffic?
- A . an AppRF engine
- B . application filters in the Traffic Analysis dashboard
- C . firewall access control rules that specify HTTP and HTTPS services
- D . firewall application rules
Refer to the exhibits.
Exhibit 1
Exhibit 2
An Aruba solution supports a WLAN that uses WPA2-Enterprise security. Exhibit 1 shows the AAA policy for the WLAN. Users are supposed to be assigned to different roles after authentication. Network administrators test a connection with the employee user account. Exhibit 2 shows the status for the client after this test.
What is a possible reason for the issue shown in Exhibit 2?
- A . The shared key configured for the ClearPass server is incorrect.
- B . The RADIUS server is not correctly set up to send a user role for the employee account.
- C . MAC authentication is enabled on the WLAN, and the test device does not have an authorized address.
- D . The administrators entered the wrong password for the employee account.
A company has a single Aruba Mobility Master (MM)-based solution with two Mobility Controllers (MCs). Network administrators want APs in building 1 to support a WLAN but do not want APs in building 2 to support the WLAN.
How can administrator ensure that they can enforce this rule as they set up the WLAN in the Mobility Master (MM) Interface?
- A . Place APs in different buildings in different AP Groups.
- B . Assign APs in different buildings to different MM nodes.
- C . Configure APs in different buildings to use different frequency bands.
- D . Assign different radio profiles to APs in different buildings.
What is one difference between captive portal authentication and 802.1X authentication?
- A . 802.1X authentication always authenticates the wireless client, while captive portal authentication always authenticates the wireless user.
- B . 802.1X authentication occurs at Layer 2, while captive portal authentication occurs at Layer 3.
- C . 802.1X authentication must use an LDAP server, while captive portal authentication can use a RADIUS server or an LDAP server.
- D . 802.1X authentication is typically implemented without encryption, while captive authentication is often combined with WPA or WPA2.
A company deploys a wireless network in a typical office environment with many surfaces where the signal can bounce.
Which 802.11 technology uses the characteristics of this environment to increase wireless speeds?
- A . Channel bonding
- B . Multiple Input Multiple Output (MIMO)
- C . Transmit Power Control (TPC)
- D . QAM modulation
Refer to the exhibit.
What describes the behavior for this WLAN?
- A . APs in the default group broadcast the SSID. Clients can connect to the WLAN on APs in the default group only.
- B . No APs broadcast the SSID. Clients cannot connect to the WLAN until administrators activate it.
- C . No APs broadcast the SSID. Clients can connect to the WLAN on APs in the default gorup only.
- D . APs in the default group broadcast the SSID. Clients can connect to the WLAN on APs in any group.
Assume that administrators accept the default forwarding mode for WLANs.
How does wireless user traffic flow in a master-local architecture, and how does it flow in a Mobility Master (MM) architecture?
- A . In the master-local architecture, all traffic is tunneled to the master controller to handle. In a MM architecture, all traffic is tunneled to the MM to handle.
- B . In both architectures, APs forward corporate user traffic locally and tunnel guest user traffic to a Mobility Controller (MC) to handle.
- C . In both architectures, traffic is tunneled to a Mobility Controller (MC) to handle.
- D . In the master-local architecture, traffic is tunneled to a local Mobility Controller (MC) to handle. In a MM architecture, all traffic is tunneled to the MM to handle.
Refer to the exhibit.
A network administrator sets up the Exam_Employees WLAN on an Aruba solution with a default role of guest, as shown in the exhibit.
To which users does the guest role apply?
- A . users who successfully authenticate and are assigned to the default role by the RADIUS server
- B . users who successfully authenticate and are not assigned a different role by the RADIUS server
- C . users who have connected to the SSID, but have not yet attempted authentication
- D . users who fail authentication
Which settings can a Mobility Master (MM) deploy to Mobility Controllers (MCs) but master controllers CANNOT deploy to local controllers?
- A . radio profiles
- B . AAA profiles
- C . VLAN settings
- D . WLAN settings
A company has an Aruba Mobility Master (MM)-based solution. Where can network administrators look to monitor the health status of all controllers, APs, and clients?
- A . the top banner
- B . the MM Maintenance pages
- C . the Performance dashboard
- D . the Potential Issues dashboard
A network administrator creates an employee WLAN on an Aruba solution that uses WLAN WPA2Enterprise security and an external RADIUS server. When the administrator tests the WLAN, the test client receives limited connectivity and cannot access any resources, but the RADIUS server shows that the user authenticated successfully.
What should the administrator check as a possible source of this issue?
- A . the connectivity between the AP that the client is associated to and the MC
- B . the firewall role and policy that apply to this user
- C . the certificate on the RADIUS server
- D . the connectivity between the Master Controller (MC) for the client and the RADIUS server
How does a high-gain omni-directional antenna compare to a typical omni-directional antenna?
- A . it provides more multi-user spatial streams.
- B . it provides more coverage in the horizontal direction than in the vertical direction.
- C . it provides more single-user spatial streams.
- D . it provides more coverage in both the horizontal and vertical directions.
A company has an Aruba solution and wants to provide guests with wireless access. The company wants to assign guests IP addresses in subnets that exist only within the Aruba solution.
Which feature should network administrators set up so guests can send traffic on the Internet without changes to the company routing solution?
- A . Enable NAT on the VLAN assigned to the guest WLAN.
- B . Set up a dynamic default gateway on the Mobility Controllers (MCs).
- C . Create destination NAT rules for the guest role.
- D . Enable policy-based routing for the guest traffic.
A company plans to deploy a Mobility Master (MM). The MM will manage 50 Mobility Controller (MC) appliances that will control a total of 700 APs, and 10 Virtual Mobility Controllers (VMCs) that will control a total of 200 APs.
How many MM licenses does the company require?
- A . 60
- B . 210
- C . 900
- D . 960
D
Explanation:
Starting with ArubaOS 8.0.1, the MM license is required to terminate devices (controllers or APs) on Mobility Master. If the Mobility Master does not have sufficient MM licenses and an AP fails to obtain a license, that AP can get an IP address and connect to its controller, but will not broadcast an SSID.