72
https://www.gratisexam.com/ ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min https://www.gratisexam.com/ ACMP_6.4 Aruba Certified Mobility Professional 6.4

ACMP 6.4.exam€¦ · 27/1/2019  · ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min ACMP_6.4 Aruba Certified

  • Upload
    others

  • View
    7

  • Download
    0

Embed Size (px)

Citation preview

Page 1: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

ACMP_6.4.exam.107q

Number: ACMP_6.4Passing Score: 800Time Limit: 120 min

https://www.gratisexam.com/

ACMP_6.4

Aruba Certified Mobility Professional 6.4

Page 2: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Exam A

QUESTION 1What is the best practice regarding licensing for a backup master to support Master Redundancy in a network without centralized licensing?

A. Backup master only requires the AP license

B. Supported limits and installed licenses should be the same on primary master and backup Master

C. Licenses are pushed from the primary to the backup Master along with the configuration

D. The Backup Master does not require licenses to support master redundancy

E. On the backup only one license of each type,is needed.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 2Which of the following licenses can be included in the licensing pool for centralized licensing? (Choose three)

A. Factory default licenses

B. Master Controller licenses

C. Evaluation licenses

D. Local Controller licenses

E. PEFV license

Correct Answer: BCDSection: (none)Explanation

Explanation/Reference:

QUESTION 3By default Centralized licensing messages between master and local controllers are sent ___________________.

A. In the clear unencrypted since the master and local controllers already share IPSEC tunnels.

Page 3: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

B. Using CPSec

C. Using IPSec site to site VPN tunnels

D. Encrypted using GRE

E. PAPI

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 4Which of the following will occur if a master license server fails with no standby server present? (Choose two)

A. Local controllers licenses will continue to be valid for 30 days

B. Local controllers will immediately remove all installed licenses

C. No licenses will be sent to any new controllers that come online

D. All licenses go back into the pool for redistribution

E. A Local Controller elects itself master license server

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 5A evaluation License is valid for a maximum of ________?

https://www.gratisexam.com/

A. 30 Days

Page 4: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

B. 60 Days

C. 90 Days

D. 6 Months

E. 12 Months

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 6Which may be applied directly to an VLAN interface? (Choose three)

A. Access List (ACL)

B. Firewall Policy

C. Roles

D. AAA profiles

E. RF Plan Map

Correct Answer: ABDSection: (none)Explanation

Explanation/Reference:

QUESTION 7When creating a firewall rule on an Aruba controller, which parameter is optional?

A. Destination

B. Service

C. Source

D. Log

E. Action

Correct Answer: D

Page 5: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Section: (none)Explanation

Explanation/Reference:

QUESTION 8What are valid methods of blacklisting a device? (Choose three)

A. Manually

B. Firewall Rule

C. Firewall Policy

D. Authentication Failures

E. Data Rate Thresholds

Correct Answer: ABDSection: (none)Explanation

Explanation/Reference:

QUESTION 9What is the blacklist default time?

A. 30 seconds

B. 1800 seconds

C. 3600 seconds

D. No default time, it must be done manually

E. 1 day

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:2-2 - Roles

Page 6: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 10An administrator creates a WLAN with an unmodified default AAA profile. What is the default role the user is placed in?

A. default-logon

B. logon

C. guest-logon

D. default-ap

E. AP-Role

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 11What is the first role a user is given when a user associates to an open WLAN?

A. the guest post authentication role

B. the initial role in the captive portal profile

C. the role in the server group profile

D. the initial role in the AAA profile

E. The initial role in the 802.1x profile

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 12Which of the following could be used to set a user's post-authentication role or VLAN association? (Choose two)

A. AAA default role for authentication method

B. Server Derivation Rule

C. Vendor Specific Attributes

Page 7: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

D. AP Derivation Rule

E. The Global AAA profile

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 13Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)

A. Roles are assigned to users.

B. Roles are applied to interfaces.

C. Policies are built from roles.

D. A user can belong to only one role at a time.

E. Roles are a set of authentication rules

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:Explanation:2-3 - Aliases

QUESTION 14Which netdestination aliases are built into the controller? (Choose three)

A. logon

B. any

C. user

D. guest

E. localip

Correct Answer: BCESection: (none)

Page 8: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation

Explanation/Reference:

QUESTION 15What is true about Global Session ACL? (Choose two)

A. Any rules will apply to all users in the AP-group

B. Any rules will apply to all users in the Network

C. Any rules will apply to all users in the controller

D. Is in the first position in all roles

E. When added it is in the first position in selected Role

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 16When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

A. Applications

B. Applications Category

C. Internet Protocol

D. Internet Category

E. Protocol

Correct Answer: ABESection: (none)Explanation

Explanation/Reference:Explanation:2-4 – NAT

QUESTION 17

Page 9: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).Which is the default use of this statement in an Aruba controller configuration?

https://www.gratisexam.com/

A. source the IP addresses of users to specific IP address

B. redirect HTTP sessions to Captive Portal

C. redirect Access Points to another Aruba controller

D. provide a telnet connection to the controller

E. redirect a SSH session to terminate on the controller

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 18The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (src-nat).Which is a use of this statement in an Aruba configuration?

A. provide a single source IP address for users in a role

B. redirect Captive Portal HTTP sessions

C. redirect Access Points to another Aruba controller

D. provide IP addresses to clients

E. redirects clients to Aruba Firewall

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:2-5 - Policy Interpretation

Page 10: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 19Review the following truncated output from an Aruba controller for this item.(example) #show rights logonaccess-list List----------------Position Name Location-------- ---- --------1 logon-control2 captiveportallogon-control-------------Priority Source Destination Service Action-------- ------ ----------- ------- ------1 user any udp 68 deny2 any any svc-icmp permit3 any any svc-dns permit 4 any any svc-dhcp permit 5 any any svc-natt permit captiveportal-------------Priority Source Destination Service Action-------- ------ ----------- ------- ------1 user controller svc-https dst-nat 80812 user any svc-http dst-nat 80803 user any svc-https dst-nat 80814 user any svc-http-proxy1 dst-nat 80885 user any svc-http-proxy2 dst-nat 80886 user any svc-http-proxy3 dst-nat 8088Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address172.16.43.170.What will happen?

A. the user's traffic will be passed to the IP address because of the policy statement:user any svc-http dst-nat 8080

B. the user's traffic will be passed to the IP address because of the policy statement:user any svc-https dst-nat 8081

C. the user's traffic will be passed to the IP address because of the policy statement:user any svc-http-proxy1 dst-nat 8088

D. the user will not reach the IP address because of the policy statement:user any svc-http dst-nat 8080

E. the user will not reach the IP address because of the implicit deny any any at the end of the policy.

Correct Answer: DSection: (none)

Page 11: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation

Explanation/Reference:

QUESTION 20Refer to the following configuration segment for this item.ip access-list session anewoneuser network 172.16.1.0 255.255.255.0 any permituser host 172.16.1.1 any denyuser any any permitAn administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, whichstatements best describe this policy? (Choose two)

A. The rule user host 172.16.1.1 any deny is redundant because of the implicit deny all at the end.

B. The rule user network 172.16.1.0 255.255.255.0 any permit is redundant.

C. The two rules user network 172.16.1.0 255.255.255.0 any permit and user host 172.16.1.1 any deny need to be re-sequenced.

D. The last statement user any any permit is not required

E. The last statement should be any any any deny

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 21Refer to the following configuration segment for this item.netdestination "internal"no invertnetwork 172.16.43.0 255.255.255.0 position 1range 172.16.11.0 172.16.11.16 position 2!ip access-list session "My-Policy"alias "user" alias "internal" service_any permit queue low!A user frame is evaluated against this firewall policy with the following attributes:Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80Referring to the above file segment, how will the frame be handled by this firewall policy?

Page 12: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

A. The frame will be dropped because of the implicit deny all at the end of the netdestination definition.

B. The frame will be dropped because of the implicit deny all at the end of the firewall policy.

C. The frame will be forwarded because of the implicit permit all at the end of the firewall policy.

D. The frame will be passed because there is no service specified in the firewall policy.

E. The frame will be dropped because there is no service specified in the firewall policy.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 22ip access-list session anewoneuser network 10.1.1.0 255.255.255.0 any permituser any any permithost 10.1.1.1 host 10.2.2.2 any denyA user sends a frame with the following attributes:Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25Based on the above Mobility Controller configuration file segment, what will this policy do with the user frame?

A. The frame is discarded because of the implicit deny all at the end of the policy.

B. The frame is discarded because of the statement:user host 10.1.1.1 host 10.2.2.2 deny.

C. The frame is accepted because of the statement:user any any permit.

D. The frame is accepted because of the statement:user network 10.1.1.0 255.255.255.0 any permit.

E. This is not a valid policy.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 23ip access-list session anewoneuser network 10.1.1.0 255.255.255.0 any permituser host 10.1.1.1 any deny

Page 13: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

user any any permitReferring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choose two)

A. This is a session firewall policy.

B. This is an extended Access Control List (ACL).

C. Any traffic going to destination 10.1.1.1 will be denied.

D. Any traffic going to destination 10.2.2.2 will be denied.

E. Any traffic going to destination 172.16.100.100 will be permitted.

Correct Answer: AESection: (none)Explanation

Explanation/Reference:

QUESTION 24

Page 14: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Page 15: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.If machine authentication fails and user authentication passes, which role will be assigned?

A. employee

B. guest

C. denyall

D. logon

E. no role is assigned

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 25

Page 16: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Page 17: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.If machine authentication passes and user authentication fails, which role will be assigned?

A. employee

B. denyall

C. guest

D. logon

E. no role is assigned

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 26

Page 18: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Page 19: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.If machine authentication fails and user authentication fails, which role will be assigned?

A. employee

B. guest

C. Captive Portal

D. Logon

E. no role will be assigned

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:3-2 - Configuration Wizards

QUESTION 27

Page 20: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

What can NOT be configured from the Aruba controller configuration wizards?

A. Controller IP

B. Boot Partition

C. User firewall policy.

D. User derivation rules.

E. Radius Servers

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 28By default, which CLI based remote access method is enabled on Aruba controllers?

A. RSH

B. Telnet

C. SSH

D. Telnet and SSH

E. Telnet, SSH and RSH

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 29An Aruba controller can be accessed with which CLI based remote access methods? (Choose two)

A. RSH

B. Telnet

C. SSH

D. SFTP

Page 21: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

E. SCP

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 30As an admin/root user, what other type of role-based management users can be created on Aruba controllers?

A. Auditing-compliance user

B. AirWave management user

C. Reporting Generation user

D. Guest provisioning user

E. Maintenance user

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 31Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba Controllers?

A. Security Logs

B. Management Logs

C. Wireless Logs

D. IDS Logs

E. System Logs

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 22: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 32

Page 23: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Page 24: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the above screen capture, if an administrator desires to change a specific AP into a Spectrum Monitor without assigning the AP to a new group, whichmenus could be used?

A. Network > Controller

B. Wireless > AP Configuration

C. Wireless > AP Installation

D. Advanced Services > Wireless

E. Wizards > WIP Wizard

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 33A customer forgot all passwords for a controller. What method could you use to reset the passwords?

A. Telnet to the controller and login to the password recovery account

B. SSH to the controller and login to the password recovery account

C. Connect directly to the serial console and login to the password recovery account

D. Interrupt the boot process at CP-boot and select password recovery

E. Open the controller and press the reset switch

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:3-5 – Roaming

QUESTION 34With CPSec disabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

A. Basic IP

B. GRE

Page 25: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

C. IPinIP

D. Mobile IP

E. IPSec

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 35In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which other element?

A. the default gateway

B. the remote AP

C. the foreign agent

D. the mobile node

E. the foreign switch

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 36When an 802.11 client roams what device decides when to move the client to another AP?

A. Aruba AP

B. Aruba controller

C. Client

D. Radius Server

E. Router

Correct Answer: CSection: (none)

Page 26: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation

Explanation/Reference:

QUESTION 37

The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1. All controllers are configured with the wireless userVLAN 201. A wireless user associates with AP 1. Only L2 mobility is enabled.Which elements will know about this association?

A. Local 1 only

B. Local 1 and the Master

C. Local 1 and Local 2 and the Master

Page 27: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

D. Local 1 and AP1

E. All Controllers

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 38Which command will show all client association history?

A. show mobile trail current (ip address)

B. show ip mobile trail (ip address)

C. show ap client status (mac address)

D. show current client ip (ip address)

E. show client ip (ip address) mobility

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 39With CPSec enabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

A. EAP

B. SSH

C. IPinIP

D. Mobile IP

E. IPSec

Correct Answer: ESection: (none)Explanation

Page 28: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation/Reference:

QUESTION 40A client Roams from one Local controller-1 to another Local controller-2. The controllers are in different subnets and L3 Mobility is enabled. How is the client trafficsent back to Local-controller-1?

https://www.gratisexam.com/

A. IP-IP tunneled

B. FTP

C. Multicast

D. L2 GRE Tunnel

E. Routed locally

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 41A network needs to implement L3 roaming. On the Master Controller, the administrator, enabled IP mobility, created a Domain and created the HAT table with allthe IP addresses of the local controllers. He then enabled Mobility on the VAPs. The configuration was then saved.L3 Mobility is still not working, what could be the cause? (Choose two)

A. IP Mobility must be enabled on all controllers.

B. IP-IP tunnels must be configured between controllers.

C. The Domain must activated on each controller.

D. The HAT table must be configured on each controller.

E. The HAT table must be configured with each controllers supported subnets.

Correct Answer: AC

Page 29: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Section: (none)Explanation

Explanation/Reference:Explanation:3-6 - RF Management

QUESTION 42By default, how long will an AP scan a single channel when ARM is enabled?

A. 80 milliseconds

B. 90 milliseconds

C. 100 milliseconds

D. 110 milliseconds

E. 200 milliseconds

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 43What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

A. Default Access

B. Priority Access

C. Fair Access

D. Preferred Access

E. Distributed Access

Correct Answer: ACDSection: (none)Explanation

Explanation/Reference:

Page 30: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 44Which of the following statements is true of Spectrum Mode?

A. No licenses are required to run an AP in Spectrum mode

B. Spectrum mode can only be configured for one AP at a time

C. An AP can be in spectrum mode for both 2.4 and 5G bands at the same time

D. An AP can be placed in Spectrum Mode via the Spectrum Profile

E. Spectrum mode can be configured from the GUI under AP installation

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 45Which ARM feature addresses the issue of sticky clients by moving clients to associate to APs with better 802.11 signal quality?

A. Co-Channel interference mitigation

B. Airtime Fairness

C. ClientMatch

D. Coordinated access to a single channel

E. Band Steering

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 46Aruba Client Match does NOT use which of the following parameters to determine the best AP for a client connection?

A. Device type

B. Location

C. Signal to Noise Ratio

Page 31: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

D. Access Point load

E. Spectrum Analysis

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 47What is the function of Station Handoff Assist, if enabled?

A. Force device to 5Ghz band

B. Force device off AP if RSSI is below threshold

C. Send message to device to change AP

D. Send message to adjoining AP to accept device

E. Send message to adjoining AP to initiate association to the device

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 48What is true about client match? (Choose two)

A. Does Load balancing

B. Does Spectrum load balancing

C. Does Band Steering/Band Balancing

D. Moves higher traffic devices to adjacent APs

E. Sends QRT frames to neighbor APs

Correct Answer: ACSection: (none)Explanation

Page 32: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation/Reference:Explanation:3-7 - Master/Local

QUESTION 49Which settings cannot be modified directly from a local controller?

A. Port VLAN setting

B. Switch Time Zone

C. Port trusted

D. Roles

E. SNMP Enable Trap Generation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 50Masters communicate configuration information with locals using which tunnel type?

A. GRE

B. IP in IP

C. Provision Tunnel Protocol

D. IPSec

E. PPTP

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 51

Page 33: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

In the above screen capture, the administrator notes that most of the configuration options are grayed out and have no action.What is the cause of the problem?

A. attempting to make global changes on a Master Controller

B. attempting to make global changes on a Local Controller

C. this change can only be performed via the CLI

D. does not have the correct software license

E. there is an error in the configuration

Page 34: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:--

QUESTION 52

Referring to the above screen capture, on which Controller can you create a VLAN?

A. Controller 10.1.10.100 only

B. Controller 10.1.20.100 and 10.254.1.3 only

C. All three Controllers

D. None of the Controllers

E. Controller 10.254.1.101 only

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 53

Page 35: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the above screen capture, on which controller can you add an administrative user and assign a controller management role?

A. Controller 10.1.10.100 only

B. Controller 10.1.20.100 and 10.254.1.3 only

C. All three Controllers

D. must be done in the RADIUS server

E. Controller 10.254.1.101 only

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 54

Refer to the above screen capture. By default, which controller's internal database will be used for user authentication?

Page 36: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

A. Controller 10.1.10.100 only

B. Controller 10.1.20.100 and 10.254.1.3 only

C. All three Controllers

D. You can't tell from this screen

E. The Controller with the user session

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 55

Referring to the above screen capture, on which controller can you modify APs configuration to enable ARM?

A. Controller 10.1.10.100 only

B. Controller 10.1.20.100 and 10.254.1.3 only

C. All three Controllers

D. None of the Controllers

E. On Controllers where ARM is enabled

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 37: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 56The Master fails with Central Licensing enabled. What happens to the local Controllers?

A. Locals continue to operate for 1 day

B. Locals operate for 30 days and accept new APs

C. Locals continue to operate for 90 days and accepts new APs

D. Locals can only use their originally installed Licenses

E. Locals will operate with active APs but not will accept any other APs

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:3-8 - Auth and Crypto

QUESTION 57With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?

A. 802.1q

B. LWAPP

C. PPTP

D. GRE

E. HTTPs

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 58With CPSec disabled, which encryption protocol does a tunnel mode campus AP's use on client traffic ?

A. TKIP and AES

B. It is provisioned by the Administrator

Page 38: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

C. WEP and AES

D. WEP, TKIP, and AES

E. No encryption is used

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 59What settings need to be changed on a factory default AP in order for it to use ADP to discover the Aruba Controller?

A. DNS of the controller

B. Static route

C. AP group

D. enable multicast

E. no changes needed

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:3-10 - Derivation Rules

QUESTION 60Which of these are NOT a client attribute that can be configured in user derivation rules?

A. MAC address

B. DHCP option value

C. BSSID

D. Filter ID

E. encryption

Correct Answer: D

Page 39: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Section: (none)Explanation

Explanation/Reference:

QUESTION 61What are the types of user derivation rules that can be applied to a user? (Choose two)

A. SSID

B. MAC

C. VLAN

D. Role

E. AP

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 62Which is a Device Specific Attribute that can be evaluated in a user derivation rule?

A. user login name

B. authentication server

C. location by AP Name

D. controller Loopback address

E. controller IP

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 63

Page 40: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Which match condition can be used by a server derivation rule? (Choose two)

A. greater than

B. less than

C. inverse of

D. contains

E. equals

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 64An administrator wants to assign a VLAN to a user based upon the authentication process using Vendor Specific Attributes (VSA). Where are Aruba VendorSpecific Attribute (VSA) values provisioned?

A. controller

B. client

C. RADIUS server

D. Internal user database

E. Option 60 of DHCP reply

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 65

Page 41: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

View the Server group screen shot above.A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. This Server Group is applied for 802.1x authentication at bothlocations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronization and both servers are reachable.What happens when the user attempts to authenticate?

A. The controller recognizes the users Domain and sends the authentication request directly to RadiusMiami.

B. The request is initially sent to RadiusNY1 then RadiusNY1 redirects the controller to send the authentication request to RadiusMiami

C. RadiusNY1 receives the request and returns a deny. No other action is taken.

D. RadiusNY1 receives the request and returns a deny. The authentication request will then be sent to RadiusMiami.

E. The RadiusNY1 sends the request to RadiusMiami that replies to the controller

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 66

Page 42: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

,

Page 43: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

View the Server group and User Roles screen shots above.A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of "employee". The userwas placed in the guest Role. What statements below are correct?(Choose two)

A. The user was placed in the 802.1x authentication default Role guest

B. The user was placed in the initial Role guest

C. Role derivation failed because roles are case sensitive

D. Role derivation failed because the incorrect operation "value-of" was used

E. 802.1x authentication failed so the user was automatically placed in the guest Role

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 67A Server Group has been configured with three Radius servers. Load balancing has been enabled. Choose the correct statement?

https://www.gratisexam.com/

A. All Radius request are sent round robin continuously

B. 10 request are sent to first server then 10 to the next server

C. Only the first two servers are used and the third is a backup server

D. Runs average response times and balances the load accordingly

E. To use Load Balancing EAP Termination must be enabled

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:3-11 - Profiles

Page 44: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 68Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and LMSIP? (Choose three)

A. Virtual-AP profile

B. WLAN profile

C. 802.1x authentication profile

D. AP System Profile

E. SSID Profile

Correct Answer: ADESection: (none)Explanation

Explanation/Reference:

QUESTION 69A user connected to a Captive Portal VAP successfully. When the user opens their browser and tries to access their homepage, they get redirected as expected toanother URL on the Aruba Controller. However, they see an error message that web authentication has been disabled. What might be a cause of this?

A. Captive Portal has not been assigned in the SSID profile.

B. The Captive portal profile has not been assigned to the AAA profile.

C. A server group has not been assigned to the captive portal profile.

D. An initial role has not been assigned to the AAA profile.

E. The Captive portal profile has not been assigned to the initial role.

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 70Which of the following will accept named VLANs as a parameter? (Choose three)

A. a VLAN pool

B. User Role for single VLAN

Page 45: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

C. RADIUS Server attributes for role derivation

D. Firewall session rule

E. Port trunk configuration

Correct Answer: ABCSection: (none)Explanation

Explanation/Reference:Explanation:3-12 - Controller Configuration

QUESTION 71A customer has a remote AP deployment, where each remote AP has an IPSEC VPN tunnel with L2TP to the controller. 1 of the remote APs is stuck in the usertable and hasn't yet transitioned to the AP active table in the controller. The customer suspects that the AP is not setting up its VPN connection successfully. Whichof the following commands might be useful in troubleshooting this? (Choose three.)

A. Logging level debugging security process localdb

B. Logging level debugging security process l2tp

C. Logging level debugging security process dot1x

D. Logging level debugging security process crypto

E. Logging level debugging security process vpn

Correct Answer: ABDSection: (none)Explanation

Explanation/Reference:Explanation:3-13 - Spectrum analysis

QUESTION 72What is true about an AP in Hybrid Spectrum mode?

A. Scan home channel and services client traffic on home channel

B. Scans all channels and services clients on home channel

C. Puts the selected band in spectrum mode and services clients on other band

D. Makes the AP a spectrum monitor, but does not affect other APs in the AP-group

Page 46: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

E. All APs in AP-group scan home channel and service clients

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 73What is the total number of charts you can simultaneously monitor in a spectrum dashboard?

A. 3

B. 4

C. 8

D. 9

E. 12

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 74An Aruba Controller is configured with VLAN 1,5, 200, and 4095. All VLANs have IP addresses assigned. Which is the default management VLAN on the Arubacontroller?

A. VLAN 5

B. VLAN 1

C. VLAN 200

D. None, it must be defined

E. VLAN 4095

Correct Answer: BSection: (none)Explanation

Page 47: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation/Reference:

QUESTION 75Which of the following statements is true?

A. Aruba Campus APs must be physically attached to the Aruba Controller.

B. Aruba Campus APs must be in the same broadcast domain as the Controller.

C. Aruba Campus APs can be in different subnets from the Controller.

D. Aruba Campus APs must be physically attached to the same Layer 3 switch.

E. Aruba Campus APs can be connected directly to the public internet.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 76

Page 48: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the diagram provided for this question, in which locations must you define the new data VLANs for wireless client traffic? (Choose two)

A. in all L2 switches where an Aruba AP is physically connected

B. in all APs and the L2 switches to which they are connected

C. in the Aruba controller and the router it's connected to in an L2 deployment

D. in the routers and switches where the APs are physically connected

E. only on the Aruba controller in an L3 deployment

Correct Answer: CESection: (none)Explanation

Explanation/Reference:

QUESTION 77A controller is provisioned in L3 Mode for Wireless Users. What must be configured on the controller to enable DHCP requests to an external DHCP server?

A. an IP helper command

B. the IP address of the DNS server

C. the IP address of the APs

D. the subnet address of the DHCP server

E. the DHCP server IPSEC Key

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 78

Page 49: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

In the above diagram, the system shows two Aruba access points.Which VLANs must be configured on trunk link D between the router and Aruba controller to support wireless users when the controller is provisioned for L2operations?

A. 10 , 101 and 102

B. 101 and 102

C. 101, 102 and 103

D. 10, 101,102 and 103

E. 10 and 103

Correct Answer: ASection: (none)Explanation

Page 50: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Explanation/Reference:Explanation:4-4 - L3 Flow

QUESTION 79

Page 51: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the diagram provided for this question, if the Aruba controller is configured to perform L3 switching, what will be the wireless client laptop defaultgateway?

A. A

B. B

C. C

D. D

E. E

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:4-6 - Captive Portal

QUESTION 80When configuring Captive Portal, which protocols are supported when accessing the Captive Portal? (Choose two.)

A. HTTPS

B. VPN

C. HTTP

D. TELNET

E. SSH

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 81When the controller is configured for Captive Portal and the user is only required to provide an email address for authentication, which option is configured in theGUI?

A. enable termination

Page 52: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

B. enable guest logon

C. enable user logon

D. eap method

E. disable CP Login

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 82

Page 53: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

A user logged in with the Captive Portal settings shown in the above screen capture.

Page 54: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

What does the user need to do to logout?

A. wait 30 minutes then logout

B. wait 60 minutes then logout

C. click Logout on the browser screen

D. he cannot logout

E. wait 10 seconds for redirect

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 83

Page 55: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Page 56: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Screenshots of the Captive Portal authentication profile and server group of a guest network are displayed above.How was the user authenticated?

A. with a radius server called Radius01

B. with the Internal database

C. with a radius server called Internal

D. with another form of authentication

E. user wasn't authenticated against any server

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 84Where should mobility domains be enabled in a network with 1 master, 1 backup master and 5 local controllers?

A. Only on the master controller

B. All the local controllers in the network

C. All the controllers where the client is allowed to roam

D. Master and backup master

E. Only on the backup master

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 85What are two different methods of configuring AP redundancy between 2 local controllers? (Choose two.)

A. Fast-Failover

B. Configure the locals as remote nodes

Page 57: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

C. Use named VLANS

D. Backup LMS IP

E. AP Redundancy can only be configured between a Master and Local

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:Explanation:4-9 - Switch Redundancy

QUESTION 86Which protocols does the Aruba controller utilize for controller redundancy (Choose two)?

A. HSRP

B. VRRP

C. HA

D. VPN

E. IP-IP

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 87With Fast-Failover disabled, to which IP address should the Aruba AP terminate its GRE tunnel for layer 2 controller redundancy to work and to support failover ofaccess points?

A. VRRP IP address

B. management IP of an Aruba controller

C. management IP of the backup Aruba controller

D. HSRP IP address

E. Loopback IP address of backup Aruba controller

Page 58: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:4-10 - Mobility

QUESTION 88

As illustrated in the above diagram, a company has two campus locations and a building headquarters all located in different cities.Following best practices, what would be the best way to construct mobility domains for the company?

Page 59: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

A. Buildings (1, 2) in one domain and Buildings (3, 4, 5, 6) in one domain

B. Buildings (1, 2) in one domain, Building (3) in one domain, and Buildings (4, 5, 6) in one domain

C. Buildings (1, 2, 4, 5, 6) in one domain and Building (3) in one domain

D. Buildings (1, 2, 3, 4, 5, 6) in one domain

E. Buildings (1) in one domain building (4) in one domain

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 89How many Aruba controllers can be added to a single mobility domain?

A. 64 controllers of any type

B. 128 controllers supporting 2000 users

C. 256 controllers with no more than 1024 subnets

D. Controllers supporting up to 6000 AP's

E. There is no controller limit

Correct Answer: ESection: (none)Explanation

Explanation/Reference:

QUESTION 90In a master-local controller scenario, where is the mobility domain defined?

A. the AP group

B. the master controller

C. the local controller

D. the master and the local controllers

E. the master and the local controllers where roaming is needed

Page 60: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 91When APs boot up, in which order do they Select a controller?

A. DNS, DHCP, ADP multicast, ADP unicast, static

B. static, DNS, DHCP, ADP broadcast, ADP multicast

C. static, DHCP, ADP broadcast, ADP multicast, DNS

D. static, DHCP, DNS, ADP multicast, ADP broadcast

E. DNS, static, ADP multicast, ADP broadcast

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 92An AP is not communicating with the controller. Upon investigation you find that the AP is not discovering its controller through DNS. Instead, it received a DHCPreply with option 43 specifying the SIP server's IP address. How do you resolve this problem?

A. Statically configure the AP to ignore Option 43

B. On the DHCP server implement Option 60

C. Statically configure the AP to only use DNS resolution and not other dynamic discovery methods

D. After failing option 43 the AP should have proceeded with ADP, therefore the AP is faulty and needs to be replaced

E. The AP should be purged

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

Page 61: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 93How is an AP redirected to a Local controller after DNS resolution returns the Master's IP address?

A. Master looks at the AP-Group and CONTROLLER-IP attributes

B. Master looks at the AP-Group and LMS-IP attributes

C. In the AP-provisioning screen, the LMS-IP attribute must be set

D. The AP must be statically configured to find the local controller

E. In the AP-provisioning screen, set the CONTROLLER-IP attribute

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 94

Page 62: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the diagram provided for this question, an employee brought an unauthorized AP from home and attached the LAN port to the cubicle Ethernet port. AllAruba APs and AMs as well as the employee AP are in VLAN 80 and within RF range of each other. No traffic from the wired or wireless network has passedthrough the unauthorized AP yet, but the AP began wireless broadcasts.How will the Aruba system initially classify the employee's non-Aruba AP?

A. a valid AP

B. an AM

C. a Rogue AP

Page 63: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

D. an interfering AP

E. a known interfering AP

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:--

QUESTION 95Exhibit:

Page 64: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the diagram provided for this question, an employee brought an unauthorized AP from home and attached it to the cubicle Ethernet port as shown inthe diagram. The APs are in VLANs as shown in the diagram. Only AP1 is within RF range.How will the Aruba controller classify this AP?

Page 65: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

https://www.gratisexam.com/

A. an AP

B. an AM

C. a Rogue AP

D. an Interfering AP

E. a workstation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 96What can an AM do that an AP cannot do?

A. Detect rogue APs

B. Detect an AP failure

C. Scans all channels in under 1 minute

D. Detect interfering APs

E. Scan all valid channels

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 97A client has not purchased the RF Protect license. Without this license what is still supported, in the basic OS?

A. Only Intrusion Detection but no Intrusion Protection

B. Rogue Detection and Containment

C. Spectrum Analysis

D. Can only configure High, Medium and Low settings, No customization

Page 66: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

E. Without the License there is no Intrusion detection nor Intrusion Protection

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 98 (group8) #show ap activeActive AP Table---------------Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a Ch/EIRP/MaxEIRP ---- ----- ---------- --------- ------------------- ----------- ------------------- AP1 building1 10.1.80.150 0 AM 0 AM AP2 building1 10.1.80.151 0 AM 0 AMA user called technical support because they cannot see any of their APs in building one. You perform the "show" command as illustrated above.What can you conclude about these two APs from this output?

A. the GRE for the APs terminate on two different controllers: 10.1.80.150 and 10.1.80.151

B. the system will not function because there is no building1 group defined

C. the building1 APs will not accept any user connections

D. the user needs to configure his client to use the b/g band

E. the user needs to configure his client to use the a band

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 99Exhibit:

Page 67: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Based on the above screen capture for Interfering APs, what can you conclude?

A. The APs must be connected to the Aruba network.

B. The APs are classified as interfering because they are all transmitting on channel 6.

C. There must not be any evidence that the APs are attached to the wired corporate network.

D. These APs are classified as interfering because they are not Aruba APs.

E. They are classified as interfering because they are running in g mode.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 100

Page 68: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Which of the following parameters can be specified in a rule for AP classification? (Choose three)

A. SSID of an AP

B. Number of clients connected to an AP.

C. SNR of an AP.

D. Operating mode of an AP

E. Discovering APs

Correct Answer: ACESection: (none)Explanation

Explanation/Reference:

QUESTION 101An Aruba controller is configured with the correct IP address and gateway information and is connected to the corporate LAN via a core layer 2 switch. ControlPlane Security is not enabled on the network. An access point is provisioned with AP name and group and connected to a different Layer 2 switch on the corporateLAN that has IP connectivity to the core layer 2 switch. The AP powers on and layer 2 connects to the network, but the wireless radios do not power on.Which could cause this condition? (Choose two.)

A. the layer 2 switches have ACLs that block GRE traffic

B. the layer 2 switches are configured to block IPSec traffic

C. a DHCP server is not configured for the segment to which the AP is connected

D. the AP's mac address needs to be configured in the Aruba controller whitelist.

E. the AP and controller are in different subnets

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 102Exhibit:

Page 69: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Referring to the diagram provided for this question, representing an office wireless LAN deployment, there will be approximately 250 users in the offices section ofthe building. All Switches are setup as L3 routers.According to Aruba best practice, which network device is the best choice for the wireless clients' default gateway?

A. device 'A'

B. device 'B'

C. device 'C'

D. device 'D'

E. device 'C or D'

Correct Answer: B

Page 70: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

Section: (none)Explanation

Explanation/Reference:

QUESTION 103One hundred (100) additional APs were deployed in an existing network. But some APs are not able to connect to the lms-ip address, even though all of the APsbelong to the same AP group. Which of the following are NOT potential causes? (Choose two).

A. The problem APs are not getting an IP address.

B. The problem APs have the wrong lms-ip address setting.

C. There is a firewall between the problem APs and the controller blocking PAPI.

D. The controller does not support that many APs in a single AP-Group.

E. There are not enough AP licenses to support the additional quantity of APs.

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 104If a Remote AP (RAP) is attempting to contact a controller that is behind a NAT device what protocol must be allowed through the NAT/Firewall?

A. PAPI

B. NATT

C. IPSec

D. SSH

E. GRE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

Page 71: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

QUESTION 105Which of the following are NOT valid RAP forwarding modes (Choose two)?

A. Tunnel

B. Bridge

C. Split-Tunnel

D. Backup

E. Standard

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 106When configuring split tunnel mode on a Remote AP (RAP) where is the routing function for the split tunnel defined?

A. On the IP routing tab in the configuration screen.

B. On the AP provisioning screen.

C. In the RAP static routing tables

D. In the Firewall policy

E. In the RAP whitelist

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 107A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristic?

A. Local traffic first goes to the controller and is then spilt back to the local network.

B. Traffic is IPSec encrypted before it is sent to the controller.

C. The user role must have a "Permit" statement in order to locally bridge the traffic.

Page 72: ACMP 6.4.exam€¦ · 27/1/2019  ·  ACMP_6.4.exam.107q Number : ACMP_6.4 Passing Score : 800 Time Limit : 120 min  ACMP_6.4 Aruba Certified

https://www.gratisexam.com/

D. The user role must have a "route dst-nat" statement to locally bridge the traffic.

E. The RAP uses PAPI to send data traffic to the controller.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

https://www.gratisexam.com/