Top Banner
Realtests.ACMP_6.3.126 questions Number : ACMP_6.3 Passing Score : 800 Time Limit : 120 min File Version : 5.0 http://www.gratisexam.com/ Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump is still 100 % valid. It provided me with lots of practical help and advice which I found very useful. I finally got the biggest success in the admission test and that happened due to the greatest and superb website. Its team has put a lot of knowledge and they have come up with all their experience in the field. I tried it and passed with graceful score and now it is your chance to do so. It gets you study tools online for it, and thus it manages to save your time and money as well.
61

Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Sep 12, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Realtests.ACMP_6.3.126 questions

Number: ACMP_6.3Passing Score: 800Time Limit: 120 minFile Version: 5.0

http://www.gratisexam.com/

Aruba ACMP_6.3

Aruba Certified Mobility Professional 6.3

Just cleared the exam today got 95 %, this dump is still 100 % valid.

It provided me with lots of practical help and advice which I found very useful.

I finally got the biggest success in the admission test and that happened due to thegreatest and superb website.

Its team has put a lot of knowledge and they have come up with all their experiencein the field. I tried it and passed with graceful score and now it is your chance to do so.

It gets you study tools online for it, and thus it manages to save your time andmoney as well.

Page 2: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Exam A

QUESTION 1Which of the following Aruba controllers is able to provide IEEE 802.3af? (Choose two)

A. 3200B. 620C. 650D. 6000 with M3E. 7000

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 2What is the maximum number of remote APs supported by a 3600 controller?

A. 512B. 1024C. 128D. 256E. 2048

Correct Answer: ASection: (none)Explanation

Explanation/Reference:correct answer.

QUESTION 3Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and LMSIP? (Choosethree)

A. Virtual-AP profileB. WLAN profileC. 802.1x authentication profileD. AP System ProfileE. SSID Profile

Correct Answer: ADESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 4A user connected to a Captive Portal VAP successfully. When the user opens their browser and tries toaccess their homepage, they get redirected as expected to another URL on the Aruba Controller. However,they see an error message that web authentication has been disabled. What might be a cause of this?

Page 3: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

http://www.gratisexam.com/

A. Captive Portal has not been assigned in the SSID profile.B. The Captive portal profile has not been assigned to the AAA profile.C. A server group has not been assigned to the captive portal profile.D. An initial role has not been assigned to the AAA profile.E. The Captive portal profile has not been assigned to the initial role.

Correct Answer: ESection: (none)Explanation

Explanation/Reference:real answer.

QUESTION 5Exhibit:

Page 4: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Referring to the above screen capture, if an administrator desires to change a specific AP into a SpectrumMonitor without assigning the AP to a new group, which menus could be used?

A. Network > ControllerB. Wireless > AP ConfigurationC. Wireless > AP InstallationD. Advanced Services > WirelessE. Wizards > WIP Wizard

Page 5: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 6Which of the statements below are TRUE regarding ARM's Spectrum Load Balancing feature? (Choosetwo)

A. Available only on 5GHz radiosB. Disabled by defaultC. Balances client load across available channels/APsD. Enabled by defaultE. Available only on 2.4GHz radios

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 7What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

A. Default AccessB. Priority AccessC. Fair AccessD. Preferred AccessE. Distributed Access

Correct Answer: ACDSection: (none)Explanation

Explanation/Reference:right answer.

QUESTION 8Which of the following statements is true of Spectrum Mode?

A. No licenses are required to run an AP in Spectrum modeB. Spectrum mode can only be configured for one AP at a timeC. An AP can be in spectrum mode for both 2.4 and 5G bands at the same timeD. An AP can be placed in Spectrum Mode via the Spectrum ProfileE. Spectrum mode can be configured from the GUI under AP installation

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 9Which method can APs use to discover a controller?

Page 6: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. DHCPB. Dynamic DNS (DDNS)C. PnPD. PAPIE. HTTPS

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 10What does Aruba Layer 3 redundancy require to operate?

A. LMS-IPB. Backup LMS-IPC. VRRPD. Backup AP groupE. ARM

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 11Exhibit:

Page 7: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

In the diagram provided for this question, the client laptop is associated with the Aruba AP. The Arubacontroller is configured to perform L2 switching for this SSID.

What will be the client laptop default gateway?

A. AB. BC. CD. DE. E

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 12In the diagram provided for this question, the Aruba controller terminates one end of a GRE tunnel thatcarries wireless user traffic.

Page 8: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Where does the other end terminate?

A. AB. BC. CD. DE. A or B

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 13In the above diagram, the system shows two Aruba access points and a wired user.

Page 9: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Which VLAN(s) do NOT need to be configured on link A between the L2 switch and router to support thewireless users?

A. 101 and 102B. 101 and 103C. 102 and 103D. only 101E. only 103

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 14In the above diagram, the system shows two Aruba access points.

Page 10: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Which VLANs must be configured on trunk link D between the router and Aruba controller to supportwireless users when the controller is provisioned for L2 operations?

A. 10, 101 and 102B. 101 and 102C. 101, 102 and 103D. 10, 101,102 and 103E. 10 and 103

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 15Exhibit:

Page 11: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Referring to the diagram provided for this question, if the Aruba controller is configured to perform L3switching, what will be the wireless client laptop default gateway?

A. AB. BC. CD. DE. E

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer is suitable .

QUESTION 16When configuring Captive Portal, which protocols are supported when accessing the Captive Portal?(Choose two)

A. HTTPSB. VPNC. HTTPD. TELNET

Page 12: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

E. SSH

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 17When the controller is configured for Captive Portal and the user is only required to provide an emailaddress for authentication, which option is configured in the GUI?

A. enable terminationB. enable guest logonC. enable user logonD. eap methodE. disable CP Login

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 18A user logged in with the Captive Portal settings shown in the above screen capture.

Page 13: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

What does the user need to do to logout?

A. wait 30 minutes then logoutB. wait 60 minutes then logoutC. click Logout on the browser screenD. he cannot logoutE. wait 10 seconds for redirect

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 19Screenshots of the Captive Portal authentication profile and server group of a guest network are displayedabove.

Page 14: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

How was the user authenticated?

Page 15: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. with a radius server called Radius01B. with the Internal databaseC. with a radius server called InternalD. with another form of authenticationE. user wasn't authenticated against any server

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 20Where should mobility domains be enabled in a network with 1 master, 1 backup master and 5 localcontrollers?

A. Only on the master controllerB. All the local controllers in the networkC. All the controllers where the client is allowed to roamD. Master and backup masterE. Only on the backup master

Correct Answer: CSection: (none)Explanation

Explanation/Reference:absolute answer.

QUESTION 21What are two different methods of configuring AP redundancy between 2 local controllers? (Choose two)

A. Fast-FailoverB. Configure the locals as remote nodesC. Use named VLANSD. LMS and Backup LMS IPE. AP Redundancy can only be configured between a Master and Local

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:sophisticated answer.

QUESTION 22Referring to the diagram provided for this question, an employee brought an unauthorized AP from homeand attached it to the cubicle Ethernet port as shown in the diagram. The APs are in VLANs as shown inthe diagram. Only AP1 is within RF range.

Page 16: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

How will the Aruba controller classify this AP?

A. an APB. an AMC. a Rogue APD. an Interfering APE. a workstation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

Page 17: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation:

QUESTION 23Referring to the diagram provided for this question, an employee brought an unauthorized AP from home,but did not attach it to the LAN infrastructure. The APs are in the VLANs as shown in the diagram. OnlyAP1 is within RF range of the employee AP.

By default, how will the Aruba system classify the employee's AP?

A. an APB. an AMC. a Rogue APD. an Interfering APE. a valid workstation

Page 18: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 24What can an AM do that an AP cannot do?

A. Detect rogue APsB. Detect an AP failureC. Scans all channels in under 1 minuteD. Detect interfering APsE. Scan all valid channels

Correct Answer: CSection: (none)Explanation

Explanation/Reference:answer is valid.

QUESTION 25(group8) #show ap active

Active AP Table

---------------

Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a Ch/EIRP/MaxEIRP

---- ----- ---------- --------- ------------------- ----------- -------------------

AP1 building1 10.1.80.150 0 AM 0 AM

AP2 building1 10.1.80.151 0 AM 0 AM

A user called technical support because they cannot see any of their APs in building one. You perform the"show" command as illustrated above.

What can you conclude about these two APs from this output?

A. the GRE for the APs terminate on two different controllers: 10.1.80.150 and 10.1.80.151B. the system will not function because there is no building1 group definedC. the building1 APs will not accept any user connectionsD. the user needs to configure his client to use the b/g bandE. the user needs to configure his client to use the a band

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 26Exhibit:

Page 19: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Based on the above screen capture for Interfering APs, what can you conclude?

A. The APs must be connected to the Aruba network.B. The APs are classified as interfering because they are all transmitting on channel 6.C. There must not be any evidence that the APs are attached to the wired corporate network.D. These APs are classified as interfering because they are not Aruba APs.E. They are classified as interfering because they are running in g mode.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 27As illustrated in the above diagram and screen capture, a wireless hacker injects messages into yournetwork to detach a client from your Aruba AP.

Page 20: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

What action should you take to identify and prevent the Intruder from connecting to your system? (Choosetwo)

A. Enable Detect disconnect Station AttackB. Enable Spoofed Deauth BlacklistC. Take no action as there is no protection against this form of attackD. Take no action as the Aruba system ignores this attack because it is against the clientE. Enable Detect EAP rate Anomaly

Correct Answer: ABSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 28(group8) #show ap arm history ap-name AP1

Interface :wifi0

Page 21: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

ARM History

-----------

Time of Change Old Channel New Channel Old Power New Power Reason

-------------- ----------- ----------- --------- --------- ------

2010-10-28 07:58:53 157+ 149+ 21 21 I

2010-10-28 07:52:06 149+ 157+ 21 21 M

2010-10-28 07:16:59 157+ 149+ 21 21 I

Interface :wifi1

ARM History

-----------

Time of Change Old Channel New Channel Old Power New Power Reason

-------------- ----------- ----------- --------- --------- ------

2010-10-28 08:52:53 6 1 21 21 I

Referring to the output above. What can you conclude about AP1?

A. This device is scanning channels.B. This device is unstable because the channel assignment changed.C. The device changed channels recently.D. The device changed channels and power levels recently.E. The device is transmitting at maximum power levels.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 29An Aruba controller is configured with the correct IP address and gateway information and is connected tothe corporate LAN via a core layer 2 switch. Control Plane Security is not enabled on the network. Anaccess point is provisioned with AP name and group and connected to a different Layer 2 switch on thecorporate LAN that has IP connectivity to the core layer 2 switch. The AP powers on and layer 2 connects tothe network, but the wireless radios do not power on.

Which could cause this condition? (Choose two)

A. the layer 2 switches have ACLs that block GRE trafficB. the layer 2 switches are configured to block IPSec trafficC. a DHCP server is not configured for the segment to which the AP is connectedD. the AP's mac address needs to be configured in the Aruba controller whitelist.E. the AP and controller are in different subnets

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:Explanation:

Page 22: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

QUESTION 30In the diagram provided for this question, four buildings are identified on a college campus. Most of thewireless LAN traffic will be from students accessing the internet.

According to Aruba best practices, which building is the best location to install the Aruba mobility controller?

A. data centerB. dormitoryC. server farmD. libraryE. 3rd party site

Page 23: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: ASection: (none)Explanation

Explanation/Reference:proper answer.

QUESTION 31Referring to the diagram provided for this question, representing an office wireless LAN deployment, therewill be approximately 250 users in the offices section of the building. All Switches are setup as L3 routers.

According to Aruba best practice, which network device is the best choice for the wireless clients' defaultgateway?

A. device 'A'B. device 'B'C. device 'C'D. device 'D'E. device 'C or D'

Correct Answer: BSection: (none)Explanation

Explanation/Reference:exact answer.

QUESTION 32One hundred (100) additional APs were deployed in an existing network. But some APs are not able toconnect to the lms-ip address, even though all of the APs belong to the same AP group. Which of the

Page 24: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

following are NOT potential causes? (Choose two)

A. The problem APs are not getting an IP address.B. The problem APs have the wrong lms-ip address setting.C. There is a firewall between the problem APs and the controller blocking PAPI.D. The controller does not support that many APs in a single AP-Group.E. There are not enough AP licenses to support the additional quantity of APs.

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 33IEEE 802.11r provides support for which of the following:

A. radio measurements within a WLANB. radio measurement within an ESSC. fast roaming within an ESSD. fast roaming within a BSSE. roaming across controllers

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 34If a Remote AP (RAP) is attempting to contact a controller that is behind a NAT device what protocol mustbe allowed through the NAT/Firewall?

A. PAPIB. NATTC. IPSecD. SSHE. GRE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:suitable answer.

QUESTION 35Which of the following are valid RAP operating modes?

A. Always, Backup, Standard, PersistentB. Always, Backup, Tunnel, PersistentC. Always, Hotel-Connect, Tunnel, StandardD. Backup, Hotel-Connect, Standard, PersistentE. Backup, Normal, Tunnel, Always

Correct Answer: A

Page 25: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Section: (none)Explanation

Explanation/Reference:best asnwer.

QUESTION 36When configuring split tunnel mode on a Remote AP (RAP) where is the routing function for the split tunneldefined?

A. On the IP routing tab in the configuration screen.B. On the AP provisioning screen.C. In the RAP static routing tablesD. In the Firewall policyE. In the RAP whitelist

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 37A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristic?

A. Local traffic first goes to the controller and is then spilt back to the local network.B. Traffic is IPSec encrypted before it is sent to the controller.C. The user role must have a "Permit" statement in order to locally bridge the traffic.D. The user role must have a "route dst-nat" statement to locally bridge the traffic.E. The RAP uses PAPI to send data traffic to the controller.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 38A Remote AP was properly functioning before losing it's internet connection and now cannot communicatewith the controller. What SSID is the AP broadcasting?

A. The SSID in Operational mode Always and Forwarding mode BackupB. The SSID in Operational mode Split Tunnel and Forwarding mode BridgeC. The SSID in Operational mode Always and Forwarding mode TunnelD. The SSID in Operational mode Standard and Forwarding mode TunnelE. The SSID in Operational mode Persistent and Forwarding mode Bridge

Correct Answer: ESection: (none)Explanation

Explanation/Reference:real answer.

QUESTION 39An AP 105 was converted into a RAP. The RAP can authenticate its IPSec tunnel to a controller usingwhich of the following methods? (Choose two)

Page 26: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. 802.1X/EAP authenticationB. Captive Portal authenticationC. IP address authenticationD. Username/Password authentication.E. Certificate/MAC address authentication.

Correct Answer: DESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 40Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?

A. Local user traffic first goes to the controller and is then spilt back to the local network.B. All data and control traffic goes to the controller unsecured.C. The user role must have a "Permit" statement in order to locally bridge the traffic.D. The user role must have a "route src-nat" statement to locally bridge the traffic.E. The RAP uses PAPI to send data traffic to the controller.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:selected answer is accurate.

QUESTION 41A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which of the following characteristics?

A. Local traffic first goes to the controller and is then spilt back to the local network.B. User Traffic is CPSec encrypted before it is sent to the controller.C. The user role must have a "Permit" statement in order to locally bridge the traffic.D. The user role must have a "permit dst-nat" statement to locally bridge the traffic.E. The RAP uses UDP 4500 to send traffic to the controller.

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 42A company purchased an indoor mesh deployment using the 620 controller and the AP 105 models, where5 APs will be deployed on a floor to provide wireless internet access for users. Users may open VPNtunnels using software clients over the wireless network to a 3rd party VPN concentrator overseas. Thecompany wants to limit wireless user access to TCP traffic locally and VPN traffic overseas.

In addition to the base AOS, which licenses will be necessary for this deployment?

A. VPN, PEF-NGB. AP Capacity, PEF-NGC. AP Capacity, PEF-NG, VPND. AP CapacityE. PEF-NG, PEF-V

Page 27: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: BSection: (none)Explanation

Explanation/Reference:appropriate answer.

QUESTION 43When deploying Remote Mesh Portals, what is one of the purposes of the Mesh Private VLAN?

A. To separate wireless user traffic coming from mesh networks from non-mesh networksB. To tag mesh wireless user traffic on a particular APC. To allow Mesh Points to form private vlan networks with certain usersD. To tag control plane traffic from Mesh points to the controllerE. To tag clients high priority traffic

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 44How does an Aruba infrastructure calculate a wireless device's location?

A. GPSB. RF FingerprintingC. RSSI triangulationD. TDOAE. LBS

Correct Answer: CSection: (none)Explanation

Explanation/Reference:sophisticated answer.

QUESTION 45Centralized licensing is not in use on an Aruba based network which has a Master and three localcontrollers. No APs terminate on the Master controller. Roles and Firewall policies need to be created andapplied, hence PEF-NG license is required

On which controller should the license be installed?

A. Only the master controller since role and firewall policies are created here.B. Only the local controllers since firewall policies are applied hereC. The master and all three local controllersD. This isn't the correct license for this purpose, use PEF-VPN licenseE. This is not needed because PEF-NG is part of base OS

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 46

Page 28: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

What information do you need to generate a feature license key for an Aruba controller?

A. The controller's MAC address and the feature description.B. Controller's MAC address and the certificate numberC. Controller's Serial Number and the feature descriptionD. Controller's Serial Number and the certificate numberE. Controller's MAC address and Serial Number

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 47Which of the following licenses are consumed by Mesh APs advertising an SSIDs?

A. AP licenseB. Mesh licenseC. PEF-V licenseD. No license is requiredE. RAP License

Correct Answer: ASection: (none)Explanation

Explanation/Reference:genuine answer.

QUESTION 48A network administrator wants to terminate VPN sessions on a local controller in the DMZ. Whichstatement is true about the PEF-VPN license?

A. It is only applied to the master controllerB. It is only applied to the DMZ controller.C. It is based on the number of APsD. One license is needed on the master and the DMZ localE. It is distributed by the license server as needed

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 49Which of the following functions can be configured in the Controller WIP wizard? (Choose three)

A. Configure APs as Air MonitorsB. Configure rules for AP classification.C. Configure preset levels for intrusion detectionD. Blacklisting Rules for clientsE. Identify encryption method used in your network.

Correct Answer: BCE

Page 29: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Section: (none)Explanation

Explanation/Reference:correct answer.

QUESTION 50A client device associates with an SSID provisioned with 802.1X authentication. The client is set for PEAPauthentication. EAP termination (AAA Fastconnect) is disabled on the controller. But the client continuouslycycles through the authentication process. Which of the following could cause this? (Choose two)

A. The client is provisioned with the wrong EAP type.B. The client has an expired or revoked server certificate.C. The DHCP server is not enabled.D. The VLAN is missing for the SSID.E. The controller does not support PEAP in this mode.

Correct Answer: ABSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 51A client attaches to a secure jack interface set to untrusted. But when the client tries to access the captiveportal page, the following message appears, "Web Authentication is not enabled." What might be wrong?

A. The client has the browser provisioned with proxy settings.B. The controller port needs to be set to trusted.C. A "aaa" profile needs to be selected on the Wired Access page.D. A Captive Portal profile needs to be assigned to the initial role.E. Web Authentication cannot be used in this way.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 52Which command, when executed on a master controller, will show the APs connected to all controllers?

A. show stm connectivityB. show ap activeC. show ap databaseD. show ap bss-tableE. show ap controller-lms

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 53When direct consoled to an AP, what is the command sequence to factory default the AP and re-bootstrap?

Page 30: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. setenv bootstat initB. setenv master init, bootC. purge, save, bootD. init, save, bootE. print, purge, boot

Correct Answer: CSection: (none)Explanation

Explanation/Reference:perfectly answered.

QUESTION 54As illustrated in the above diagram, a company has two campus locations and a building headquarters alllocated in different cities.

Following best practices, what would be the best way to construct mobility domains for the company?

A. Buildings (1, 2) in one domain and Buildings (3, 4, 5, 6) in one domainB. Buildings (1, 2) in one domain, Building (3) in one domain, and Buildings (4, 5, 6) in one domainC. Buildings (1, 2, 4, 5, 6) in one domain and Building (3) in one domainD. Buildings (1, 2, 3, 4, 5, 6) in one domainE. Buildings (1) in one domain building (4) in one domain

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

Page 31: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

QUESTION 55When APs boot up, in which order do they discover a controller?

A. DNS, DHCP, ADP multicast, ADP unicast, staticB. static, DNS, DHCP, ADP broadcast, ADP multicastC. static, DHCP, ADP multicast, ADP broadcast, DNSD. static, DHCP, DNS, ADP multicast, ADP broadcastE. DNS, static, ADP multicast, ADP broadcast

Correct Answer: CSection: (none)Explanation

Explanation/Reference:selected option is correct.

QUESTION 56An AP is not communicating with the controller. Upon investigation you find that the AP is not discovering itscontroller through DNS. Instead, it received a DHCP reply with option 43 specifying the SIP server's IPaddress. How do you resolve this problem?

A. Statically configure the AP to ignore Option 43B. Remove the option 43 configuration on the DHCP serverC. Statically configure the AP to only use DNS resolution and not other dynamic discovery methodsD. After failing option 43 the AP should have proceeded with ADP, therefore the AP is faulty and needs to

be replacedE. The AP should be purged

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 57A 3600 controller has 64 PEF-NG license, 128 AP licenses and 1 RFProtect license. How many AP's canterminate on the controller?

A. 1 Campus APsB. 64 Campus APsC. 128 Remote APsD. 256 Remote APsE. 512 Remote APs

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 58A 3200 controller has 16 AP licenses,16 PEF-NG licenses, 16 RFProtect licenses. There are 10 CampusAPs terminating on the controller. How many remote AP's can terminate on the controller?

A. 6B. 12

Page 32: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

C. 16D. 24E. 32

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 59An 7240 controller is Licensed for 560 APs. The controller has 500 Campus APs terminating on thecontroller. How many Remote APs can terminate on this controller?

A. 12B. 24C. 48D. 60E. 120

Correct Answer: DSection: (none)Explanation

Explanation/Reference:best answer.

QUESTION 60An Aruba Controller is configured with VLAN 1,5, 200, and 4095. All VLANs have IP addresses assigned.Which is the default management VLAN on the Aruba controller?

A. VLAN 5B. VLAN 1C. VLAN 200D. None, it must be definedE. VLAN 4095

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 61Which of the following statements is true?

A. Aruba Campus APs must be physically attached to the Aruba Controller.B. Aruba Campus APs must be in the same broadcast domain as the Controller.C. Aruba Campus APs can be in different subnets from the Controller.D. Aruba Campus APs must be physically attached to the same Layer 3 switch.E. Aruba Campus APs can be connected directly to the public internet.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

Page 33: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation:

QUESTION 62Exhibit:

Referring to the diagram provided for this question, in which locations must you define the new data VLANsfor wireless client traffic? (Choose two)

A. in all L2 switches where an Aruba AP is physically connectedB. in all APs and the L2 switches to which they are connectedC. in the Aruba controller and the router it's connected to in an L2 deploymentD. in the routers and switches where the APs are physically connectedE. only on the Aruba controller in an L3 deployment

Correct Answer: CESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 63A controller is provisioned in L3 Mode for Wireless Users. What must be configured on the controller toenable DHCP requests to an external DHCP server?

A. an IP helper commandB. the IP address of the DNS serverC. the IP address of the APsD. the subnet address of the DHCP serverE. the DHCP server IPSEC Key

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 64Which parameter(s) does a Master controller use to determine where a provisioned AP should terminate its

Page 34: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

GRE tunnel?

A. the IP address of the APB. the MAC address of the APC. the IP address of the switch nearest to the APD. the name and group settings of the APE. the VLAN the AP is attached to

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 65Which of the following licenses can be included in the licensing pool for centralized licensing? (Choosethree)

A. Factory default licensesB. PEFNG licenseC. Evaluation licensesD. RFProtect licenseE. PEFV license

Correct Answer: BCDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 66By default Centralized licensing messages between master controllers are sent _______________.

A. In the clear unencryptedB. Using CPSecC. Using IPSec site to site VPN tunnelsD. Encrypted using GREE. PAPI

Correct Answer: ASection: (none)Explanation

Explanation/Reference:reliable answer.

QUESTION 67Which of the following will occur if a master license server fails with no standby server present? (Choosetwo)

A. Local controllers licenses will continue to be valid for 30 daysB. Local controllers will immediately remove all installed licensesC. No licenses will be sent to any new controllers that come onlineD. All licenses go back into the pool for redistributionE. A Local Controller elects itself master license server

Page 35: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 68When creating a firewall rule on an Aruba controller, which parameter is optional?

A. DestinationB. ServiceC. SourceD. LogE. Action

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 69An administrator creates a WLAN with an unmodified default AAA profile. What is the default role the useris placed in?

A. default-logonB. logonC. guest-logonD. default-apE. AP-Role

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 70Exhibit:

Referring to the above screen capture, on which controller can you modify APs configuration to enableARM?

A. Controller 10.1.11.100 onlyB. Controller 10.1.11.101 and 10.254.1.3 onlyC. All three Controllers

Page 36: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

D. None of the ControllersE. On Controllers where ARM is enabled

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 71With CPSec disabled, which encryption protocol does a tunnel mode campus AP use on client traffic?

A. TKIP and AESB. It is provisioned by the AdministratorC. WEP and AESD. WEP, TKIP, and AESE. No encryption is used

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 72In a campus environment, where are encryption keys sent or stored when users roam between tunneledmode APs on the same controller using 802.1X?

A. sent to the new AP via GREB. sent to the new AP via IPSecC. stored on the controllerD. stored on the RADIUS serverE. original AP sends keys to new AP

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 73In the diagram provided for this question, the wireless user's laptop is associated with an Aruba AP intunnel forwarding mode. The AP terminates on the local controller.

Page 37: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

When the client transmits, where will the 802.11 headers be removed?

A. APB. L2 SwitchC. RouterD. ControllerE. Internet

Correct Answer: DSection: (none)Explanation

Explanation/Reference:answer i supdated.

QUESTION 74When configuring a server group containing 3 servers, a customer chooses 'fail through mode'. What otherconfiguration option has to be enabled on the controller for this to work with 802.1x authentication?

A. Machine authenticationB. EAP TerminationC. Server group fall through modeD. MAC authenticationE. Round robin or top down mode

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

Page 38: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

QUESTION 75Which method is NOT supported to provision an Aruba campus AP?

http://www.gratisexam.com/

A. Telnet directly to APB. SSH to the AP's controllerC. Web interface to the AP's controllerD. Console to APE. CLI on controller

Correct Answer: ASection: (none)Explanation

Explanation/Reference:best answer.

QUESTION 76Refer to the following configuration segment for this item.

netdestination "internal"

no invert

network 172.16.43.0 255.255.255.0 position 1

range 172.16.11.0 172.16.11.16 position 2

!

ip access-list session "My-Policy"

alias "user" alias "internal" service_any permit queue low

!

A user frame is evaluated against this firewall policy with the following attributes:

Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80

Referring to the above file segment, how will the frame be handled by this firewall policy?

A. The frame will be dropped because of the implicit deny all at the end of the netdestination definition.B. The frame will be dropped because of the implicit deny all at the end of the firewall policy.C. The frame will be forwarded because of the implicit permit all at the end of the firewall policy.D. The frame will be passed because there is no service specified in the firewall policy.E. The frame will be dropped because there is no service specified in the firewall policy.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

Page 39: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation:

QUESTION 77ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user any any permit

host 10.1.1.1 host 10.2.2.2 any deny

A user sends a frame with the following attributes:

Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25

Based on the above Mobility Controller configuration file segment, what will this policy do with the userframe?

A. The frame is discarded because of the implicit deny all at the end of the policy.B. The frame is discarded because of the statement:

user host 10.1.1.1 host 10.2.2.2 deny.C. The frame is accepted because of the statement:

user any any permit.D. The frame is accepted because of the statement:

user network 10.1.1.0 255.255.255.0 any permit.E. This is not a valid policy.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 78ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user host 10.1.1.1 any deny

user any any permit

Referring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choosetwo)

A. This is a session firewall policy.B. This is an extended Access Control List (ACL).C. Any traffic going to destination 10.1.1.1 will be denied.D. Any traffic going to destination 10.2.2.2 will be denied.E. Any traffic going to destination 172.16.100.100 will be permitted.

Correct Answer: AESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 79What are the types of user derivation rules that can be applied to a user? (Choose two)

Page 40: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. SSIDB. MACC. VLAND. RoleE. AP

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 80Which is a Device Specific Attribute that can be evaluated in a user derivation rule?

A. user login nameB. authentication serverC. location by AP NameD. controller Loopback addressE. controller IP

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 81An administrator wants to assign a VLAN to a user based upon the authentication process using VendorSpecific Attributes (VSA). Where are Aruba Vendor Specific Attribute (VSA) values provisioned?

A. controllerB. clientC. RADIUS serverD. Internal user databaseE. Option 60 of DHCP reply

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 82Which of the following will accept named VLANs as a parameter? (Choose three)

A. Virtual AP profileB. User derivation rule for a single VLANC. Server derivation rule for a single VLAND. Server derivation rule for a VLAN PoolE. Access VLAN for a VLAN Pool

Correct Answer: ABCSection: (none)

Page 41: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation

Explanation/Reference:Explanation:

QUESTION 83The screen captures below show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication fails and user authentication passes, which role will be assigned?

A. employeeB. guestC. contractorD. logon

Page 42: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

E. no role is assigned

Correct Answer: BSection: (none)Explanation

Explanation/Reference:suitable answer.

QUESTION 84The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication passes and user authentication fails, which role will be assigned?

A. employee

Page 43: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

B. guestC. contractorD. logonE. no role is assigned

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 85The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

Page 44: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

If machine authentication fails and user authentication fails, which role will be assigned?

A. EmployeeB. GuestC. Captive PortalD. LogonE. No role will be assigned

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 86What can NOT be configured from the Aruba controller configuration wizards?

A. Controller IPB. Boot PartitionC. User firewall policy.D. User derivation rules.E. Radius Servers

Correct Answer: BSection: (none)Explanation

Explanation/Reference:good answer.

QUESTION 87The Contrtoller wizard enables which of the following controller clock configurations? (Choose three)

A. NTP to a time serverB. Set time zoneC. Daylight savings timeD. Only GMT can be configuredE. Manual configuration of date and time

Correct Answer: ABESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 88When configuring ports in the Controller wizard, which of the following are NOT configuration options?(Choose two)

A. Inter-VLAN routingB. SpeedC. TrustedD. LACPE. Trunk

Page 45: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:reliable answer.

QUESTION 89By default, which CLI based remote access method is enabled on Aruba controllers?

A. RSHB. TelnetC. SSHD. Telnet and SSHE. Telnet, SSH and RSH

Correct Answer: CSection: (none)Explanation

Explanation/Reference:appropriate answer.

QUESTION 90An Aruba controller can be accessed with which CLI based remote access methods? (Choose two)

A. RSHB. TelnetC. SSHD. SFTPE. SCP

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 91Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba Controllers?

A. Security LogsB. Management LogsC. Wireless LogsD. IDS LogsE. System Logs

Correct Answer: ASection: (none)Explanation

Explanation/Reference:fine answer.

QUESTION 92What is the first role a user is given when a user associates to an open WLAN?

A. The guest post authentication role

Page 46: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

B. The initial role in the captive portal profileC. The role in the server group profileD. The initial role in the AAA profileE. The initial role in the 802.1x profile

Correct Answer: DSection: (none)Explanation

Explanation/Reference:real answer.

QUESTION 93Which of the following could be used to set a user's post-authentication role or VLAN association? (Choosetwo)

A. AAA default role for authentication methodB. Server Derivation RuleC. Vendor Specific AttributesD. AP Derivation RuleE. The Global AAA profile

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 94Which netdestination aliases are built into the controller? (Choose three)

A. logonB. anyC. userD. guestE. localip

Correct Answer: BCESection: (none)Explanation

Explanation/Reference:properly answered.

QUESTION 95Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choosetwo)

A. localip any svc-icmp permitB. user any svc-icmp permitC. user user svc-icmp permitD. any any svc-icmp permitE. mswitch any svc-icmp permit

Correct Answer: BDSection: (none)Explanation

Page 47: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation/Reference:Explanation:

QUESTION 96The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (src-nat).

Which is a use of this statement in an Aruba configuration?

A. Provide a single source IP address for users in a roleB. Redirect Captive Portal HTTP sessionsC. Redirect Access Points to another Aruba controllerD. Provide IP addresses to clientsE. Redirects clients to Aruba Firewall

Correct Answer: ASection: (none)Explanation

Explanation/Reference:finely answered.

QUESTION 97The network administrator wishes to terminate the VPN encryption on the Aruba controller. When writing afirewall rule to accomplish the task of automatically moving the VPN traffic for the wireless clients from athird party VPN concentrator to an Aruba controller, which action needs to be configured in the rule?

A. redirect to IPSec GroupB. source NATC. destination NATD. redirect to tunnelE. redirect to GRE

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 98View the Server group screen shot above.

Page 48: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. ThisServer Group is applied for 802.1x authentication at both locations. The user's credentials are only found inthe Miami Radius server "RadiusMiami". There is no Radius synchronization and both servers arereachable. What happens when the user attempts to authenticate?

A. The controller recognizes the users Domain and sends the authentication request directly toRadiusMiami.

B. The request is initially sent to RadiusNY1 then RadiusNY1 redirects the controller to send theauthentication request to RadiusMiami

C. RadiusNY1 receives the request and returns a deny. No other action is taken.D. RadiusNY1 receives the request and returns a deny. The authentication request will then be sent to

RadiusMiami.E. The RadiusNY1 sends the request to RadiusMiami that replies to the controller

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 99View the Server group and User Roles screen shots above.

Page 49: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radiusattribute of filter-Id with a value of "employee". The user was placed in the guest Role.What statements below are correct? (Choose two)

A. The user was placed in the 802.1x authentication default Role guestB. The user was placed in the initial Role guestC. Role derivation failed because roles are case sensitiveD. Role derivation failed because the incorrect operation "value-of" was usedE. 802.1x authentication failed so the user was automatically placed in the guest Role

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:right answer.

QUESTION 100View the Server group and User Roles screen shots above.

Page 50: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radiusattribute of filter-Id with a value of "employee".

What Role will the user get?

A. The User will get the Emp RoleB. The User will get the 802.1x authentication default RoleC. The User will get the employee RoleD. The User will get the Employee RoleE. The User will get the initial Role

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 101An Aruba 650 controller is functioning as a standby Master. How many APs can it control while in standbymode?

A. 0

Page 51: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

B. 16C. 24D. 128E. 256

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 102Aruba pair of 3200XM controllers are licensed to their maximum and are configured as a VRRP pair. Eachcontroller terminates 24 APs. One of the controllers fails. How many of the APs from the failed controllercan fail over to the remaining controller?

A. 8B. 16C. 32D. 48E. 96

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 103Which protocol does the Aruba controller utilize for controller redundancy?

A. HSRPB. VRRPC. VPND. GREE. IP-IP

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 104With Fast-Failover disabled, to which IP address should the Aruba AP terminate its GRE tunnel for layer 2controller redundancy to work and to support failover of access points?

A. VRRP IP addressB. management IP of an Aruba controllerC. management IP of the backup Aruba controllerD. HSRP IP addressE. Loopback IP address of backup Aruba controller

Correct Answer: ASection: (none)Explanation

Page 52: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation/Reference:reliable answer.

QUESTION 105When an Aruba 6000 controller has two M3 modules installed, for which uses may the modules be used?(Choose two)

A. hot standby operationsB. VRRP backupC. higher AP density per switch chassisD. Active-Active mastersE. Active-Active master-backup

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 106Referring to the diagram provided for this question, an employee brought an unauthorized AP from homeand attached the LAN port to the cubicle Ethernet port. All Aruba APs and AMs as well as the employee APare in VLAN 80 and within RF range of each other. No traffic from the wired or wireless network has passedthrough the unauthorized AP yet, but the AP began wireless broadcasts.

Page 53: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

How will the Aruba system initially classify the employee's non-Aruba AP?

A. a valid APB. an AMC. a Rogue APD. an interfering APE. a known interfering AP

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

Page 54: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

QUESTION 107Aruba Client Match does NOT use which of the following parameters to determine the best AP for a clientconnection? (Choose two)

A. Device typeB. LocationC. Signal to Noise RatioD. Access Point loadE. Spectrum Analysis

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 108Which settings cannot be modified directly from a local controller?

A. Port VLAN settingB. Switch Time ZoneC. Port trustedD. RolesE. SNMP Enable Trap Generation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:properly answered.

QUESTION 109In the above screen capture:

Page 55: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

The administrator notes that most of the configuration options are grayed out and have no action.

What is the cause of the problem?

A. attempting to make global changes on a Master ControllerB. attempting to make global changes on a Local ControllerC. this change can only be performed via the CLID. does not have the correct software licenseE. there is an error in the configuration

Correct Answer: BSection: (none)Explanation

Explanation/Reference:fine answer.

QUESTION 110Exhibit:

Page 56: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Referring to the above screen capture, on which Controller can you create a vlan?

A. Controller 10.1.11.100 onlyB. Controller 10.1.11.101 and 10.254.1.3 onlyC. All three ControllersD. None of the ControllersE. Controller 10.254.1.101 only

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 111Exhibit:

Referring to the above screen capture, on which controller can you add an administrative user and assign acontroller management role?

A. Controller 10.1.11.100 onlyB. Controller 10.1.11.101 and 10.254.1.3 onlyC. All three ControllersD. Must be done in the RADIUS serverE. Controller 10.254.1.101 only

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 112In a master-local controller scenario, where is the mobility domain defined?

A. the AP groupB. the master controllerC. the local controllerD. the master and the local controllersE. the master and the local controllers where roaming is needed

Correct Answer: BSection: (none)Explanation

Page 57: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation/Reference:genuine answer.

QUESTION 113A port firewall policy is applied to a trunk port that denies controller access. An "allow all" Vlan firewall policyis applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain accessto the controller. Which of the following statements is true?

A. The Port policy is applied, therefore no controller accessB. The Vlan policy is applied, then the port policy, therefore no controller accessC. The Vlan policy is applied, therefore access to the controller is allowedD. You cannot place a firewall policy on a Ports Vlan when the Port already has a policy, therefore no

controller accessE. When locally connected to a controller's port you always have controller access

Correct Answer: CSection: (none)Explanation

Explanation/Reference:best answer.

QUESTION 114An access port has been placed in trusted mode. The Vlan on the port is in Untrusted mode.Which of the following statements is true?

A. The traffic is trusted since the port is trustedB. The traffic is untrusted since the VLAN is untrustedC. This is an invalid configuration, both must be set the sameD. You cannot set Vlans as trusted or untrustedE. Only traffic from that specific port is trusted, all other traffic is untrusted

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 115A wired device is connected to an untrusted port on a controller. How can a role be assigned to the device?

A. An initial Role can be assigned directly to the VLANB. Roles are assigned to devices connected to a trusted portC. A default Role can be directly assigned to an untrusted portD. Adding a wired AAA profile to a VLAN on the untrusted portE. The Role assigned to the untrusted port

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 116A customer forgot all passwords for a controller. What method could you use to reset the passwords?

A. Telnet to the controller and login to the password recovery account

Page 58: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

B. SSH to the controller and login to the password recovery accountC. Connect directly to the serial console and login to the password recovery accountD. Interrupt the boot process at CP-boot and select password recoveryE. Open the controller and press the reset switch

Correct Answer: CSection: (none)Explanation

Explanation/Reference:appropriate answer.

QUESTION 117With CPSec disabled, which tunnel protocol is used between APs and Controllers in an Arubaenvironment?

A. Basic IPB. GREC. IPinIPD. Mobile IPE. IPSec

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 118In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which otherelement?

A. the default gatewayB. the remote APC. the foreign agentD. the mobile nodeE. the foreign switch

Correct Answer: CSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 119When an 802.11 client roams what device decides when to move the client to another AP?

A. Aruba APB. Aruba controllerC. ClientD. Radius ServerE. Router

Correct Answer: CSection: (none)Explanation

Page 59: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Explanation/Reference:actual answer.

QUESTION 120Exhibit:

The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1.All controllers are configured with the wireless user VLAN 201. A wireless user associates with AP 1. OnlyL2 mobility is enabled.

Which elements will know about this association?

A. Local 1 onlyB. Local 1 and the MasterC. Local 1 and Local 2 and the MasterD. Local 1 and AP1E. All Controllers

Correct Answer: BSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 121Which command will show all client association history?

A. Aruba-6000# show mobile trail current (ip address)B. Aruba-6000# show ip mobile trail (ip address)C. Aruba-6000# show ap client status (mac address)D. Aruba-6000# show current client ip (ip address)E. Aruba-6000# show client ip (ip address) mobility

Page 60: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

Correct Answer: BSection: (none)Explanation

Explanation/Reference:correct answer.

QUESTION 122With CPSec enabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

A. EAPB. SSHC. IPinIPD. Mobile IPE. IPSec

Correct Answer: ESection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 123By default, how long will an AP scan a single channel when ARM is enabled?

A. 80 millisecondsB. 90 millisecondsC. 100 millisecondsD. 110 millisecondsE. 200 milliseconds

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 124Which actions does ARM (Adaptive Radio Management) perform? (Choose two)

A. Allows controllers to provision the AP Radio typeB. Allows controllers to provision the best channel for APsC. Allows controllers to provision the best power setting for APsD. Allows controllers to provision allowed Radio bandsE. Allows controllers to provision lower power when unauthorized APs are detected

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:reliable answer

QUESTION 125Which of the following metrics does the ARM feature use to calculate the optimal channel and power levelfor Access Points? (Choose two)

Page 61: Aruba ACMP 6.3 Aruba Certified Mobility Professional 6.3 ......2015/04/04  · Aruba ACMP_6.3 Aruba Certified Mobility Professional 6.3 Just cleared the exam today got 95 %, this dump

A. RF Spectrum IndexB. Priority IndexC. Interference IndexD. Coverage IndexE. Frequency Index

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:Explanation:

QUESTION 126How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHzradios of Aruba APs?

A. ARM suppresses the probe response on the 2.4 GHz radioB. ARM utilizes third party software on the wireless clientsC. Current Wi-Fi chipset firmware supports this by defaultD. It's not possible the move clients to 5GHz radios when they can see both 2.4 and 5GHz APsE. ARM disables the 2.4Ghz radio for the specified client

Correct Answer: ASection: (none)Explanation

Explanation/Reference:genuine answer.

http://www.gratisexam.com/