Aruba Online Training Dumps, Aruba Online Training Real Exam Questions

Exam4Training has a huge IT industry elite team. They all have high authority in the IT area. They use professional knowledge and experience to provide Aruba ACMP_6.4 Aruba Certified Mobility Professional 6.4 Online Training for people ready to participate in Aruba ACMP_6.4 exam. The accuracy rate of Aruba ACMP_6.4 Aruba Certified Mobility Professional 6.4 Online Training provided by Exam4Training is very high and they can 100% guarantee you pass the Aruba Certified Mobility Professional 6.4 exam successfully for one time. Besides, we will provide you a free one-year update service.

Page 1 of 8

1. Which dual radio access point models support concurrent operations in the 2.4Ghz band as well as the 5Ghz band? (Choose three)

AP-92

AP-93

AP-105

AP-224

AP-135

2. Which of the following APs do NOT support dual radio operations? (Choose two)

AP 93

AP 105

RAP 3WN

AP 224

AP 135

3. An AP135 has been configured with 3 SSIDs supported on both 2.4Ghz and 5Ghz bands.

How many GRE tunnels will be created between the AP 135 and the controller?

4. Centralized licensing is not in use on an Aruba based network which has a Master and three local controllers. No APs terminate on the Master controller. Roles and Firewall policies need to be created and applied, hence PEF-NG license is required.

On which controller should the license be installed?

Only the master controller since role and firewall policies are created here.

only the local controllers since firewall policies are applied here

the master and all three local controllers

this isn't the correct license for this purpose, use PEF-VPN license

this is not needed because PEF-NG is part of base OS

5. What information do you need to generate a feature license key for an Aruba controller?

The controller's MAC address and the feature description.

controller's MAC address and the certificate number

controller's Serial Number and the feature description

controller's Serial Number and the certificate number

controller's MAC address and Serial Number

6. What are the PEF-NG license limits based on?

Number of APs

One license per controller

Number of users

Number of local controllers

Master Controller total user count

7. Which of the following licenses are consumed by Mesh APs advertising an SSIDs?

AP license

Mesh license

PEF-V license

No license is required

RAP License

8. The permanent licenses on the controller will be deleted with the use of which command?

delete license

write erase

Licenses cannot be deleted once activated

write erase all

reboot delete all

9. A network administrator wants to terminate VPN sessions on a local controller in the DMZ.

Which statement is true about the PEF-VPN license?

It is only applied to the master controller

It is only applied to the DMZ controller.

It is based on the number of APs

One license is needed on the master and the DMZ local

It is distributed by the license server as needed

10. What is the best practice regarding licensing for a backup master to support Master Redundancy in a network without centralized licensing?

Backup master only requires the AP license

Supported limits and installed licenses should be the same on primary master and backup Master

Licenses are pushed from the primary to the backup Master along with the configuration

The Backup Master does not require licenses to support master redundancy

On the backup only one license of each type, is needed.

Page 2 of 8

11. Which of the following licenses can be included in the licensing pool for centralized licensing? (Choose three)

Factory default licenses

Master Controller licenses

Evaluation licenses

Local Controller licenses

PEFV license

12. By default Centralized licensing messages between master and local controllers are sent ___________________.

In the clear unencrypted since the master and local controllers already share IPSEC tunnels.

Using CPSec

Using IPSec site to site VPN tunnels

Encrypted using GRE

PAPI

13. Which of the following will occur if a master license server fails with no standby server present? (Choose two)

Local controllers licenses will continue to be valid for 30 days

Local controllers will immediately remove all installed licenses

No licenses will be sent to any new controllers that come online

All licenses go back into the pool for redistribution

A Local Controller elects itself master license server

14. A evaluation License is valid for a maximum of ________?

30 Days

60 Days

90 Days

6 Months

12 Months

15. The following licenses have been installed on these controllers: Master-1: 8 AP licenses Local-2 : 8 AP licenses Local-3 : 5 Evaluation AP Licenses Local-4 : 10 Factory installed AP licenses Central Licensing is enabled.

What is the AP Pool capacity on the Central License Server?

16. Centralized licensing is not enabled in a network of 1 Master and 2 Local controllers, what should be the license count on all controllers to terminate 8 APs on each Local controller and support Local redundancy?

16 AP license on all controllers

8 AP license on Master and 16 AP license on both locals

8 AP license on all controllers

1 AP license on Master and 16 AP license on both locals

16 AP licenses on the Locals

17. Which may be applied directly to an VLAN interface? (Choose three)

Access List (ACL)

Firewall Policy

Roles

AAA profiles

RF Plan Map

18. When creating a firewall rule on an Aruba controller, which parameter is optional?

Destination

Service

Source

Log

Action

19. What are valid methods of blacklisting a device? (Choose three)

Manually

Firewall Rule

Firewall Policy

Authentication Failures

Data Rate Thresholds

20. What is the blacklist default time?

30 seconds

1800 seconds

3600 seconds

No default time, it must be done manually

1 day

Page 3 of 8

21. An administrator creates a WLAN with an unmodified default AAA profile.

What is the default role the user is placed in?

default-logon

logon

guest-logon

default-ap

AP-Role

22. What is the first role a user is given when a user associates to an open WLAN?

the guest post authentication role

the initial role in the captive portal profile

the role in the server group profile

the initial role in the AAA profile

The initial role in the 802.1x profile

23. Which of the following could be used to set a user's post-authentication role or VLAN association? (Choose two)

AAA default role for authentication method

Server Derivation Rule

Vendor Specific Attributes

AP Derivation Rule

The Global AAA profile

24. Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)

Roles are assigned to users.

Roles are applied to interfaces.

Policies are built from roles.

A user can belong to only one role at a time.

Roles are a set of authentication rules

25. Which netdestination aliases are built into the controller? (Choose three)

logon

any

user

guest

localip

26. What are aliases used for?

improve controller performance

simplify the configuration process

tie IP addresses to ports

assign rules to policies

assign policies to roles

27. Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choose two)

localip any svc-icmp permit

user any svc-icmp permit

user user svc-icmp permit

any any svc-icmp permit

mswitch any svc-icmp permit

28. What is true about Global Session ACL? (Choose two)

Any rules will apply to all users in the AP-group

Any rules will apply to all users in the Network

Any rules will apply to all users in the controller

Is in the first position in all roles

When added it is in the first position in selected Role

29. When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

Applications

Applications Category

Internet Protocol

Internet Category

Protocol

30. The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).

Which is the default use of this statement in an Aruba controller configuration?

source the IP addresses of users to specific IP address

redirect HTTP sessions to Captive Portal

redirect Access Points to another Aruba controller

provide a telnet connection to the controller

redirect a SSH session to terminate on the controller

Page 4 of 8

31. The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (srcnat).

Which is a use of this statement in an Aruba configuration?

provide a single source IP address for users in a role

redirect Captive Portal HTTP sessions

redirect Access Points to another Aruba controller

provide IP addresses to clients

redirects clients to Aruba Firewall

32. Review the following truncated output from an Aruba controller for this item.

(example) #show rights logon

access-list List

----------------

Position Name Location

-------- ---- --------

1 logon-control

2 captiveportal

logon-control

-------------

Priority Source Destination Service Action

-------- ------ ----------- ------- ------

1 user any udp 68 deny

2 any any svc-icmp permit

3 any any svc-dns permit

4 any any svc-dhcp permit

5 any any svc-natt permit

captiveportal

-------------

Priority Source Destination Service Action

-------- ------ ----------- ------- ------

1 user controller svc-https dst-nat 8081

2 user any svc-http dst-nat 8080

3 user any svc-https dst-nat 8081

4 user any svc-http-proxy1 dst-nat 8088

5 user any svc-http-proxy2 dst-nat 8088

6 user any svc-http-proxy3 dst-nat 8088

Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.

What will happen?

the user's traffic will be passed to the IP address because of the policy statement: user any svc-http dst-nat 8080

the user's traffic will be passed to the IP address because of the policy statement: user any svc-https dst-nat 8081

the user's traffic will be passed to the IP address because of the policy statement: user any svc-httpproxy1 dst-nat 8088

the user will not reach the IP address because of the policy statement: user any svc-http dst-nat 8080

the user will not reach the IP address because of the implicit deny any any at the end of the policy.

33. Refer to the following configuration segment for this item.

ip access-list session anewone

user network 172.16.1.0 255.255.255.0 any permit

user host 172.16.1.1 any deny

user any any permit

An administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, which statements best describe this policy? (Choose two)

The rule user host 172.16.1.1 any deny is redundant because of the implicit deny all at the end.

The rule user network 172.16.1.0 255.255.255.0 any permit is redundant.

The two rules user network 172.16.1.0 255.255.255.0 any permit and user host 172.16.1.1 any deny need to be re-sequenced.

The last statement user any any permit is not required

The last statement should be any any any deny

34. Refer to the following configuration segment for this item.

netdestination "internal"

no invert

network 172.16.43.0 255.255.255.0 position 1

range 172.16.11.0 172.16.11.16 position 2

!

ip access-list session "My-Policy"

alias "user" alias "internal" service_any permit queue low

!

A user frame is evaluated against this firewall policy with the following attributes:

Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80

Referring to the above file segment, how will the frame be handled by this firewall policy?

The frame will be dropped because of the implicit deny all at the end of the netdestination definition.

The frame will be dropped because of the implicit deny all at the end of the firewall policy.

The frame will be forwarded because of the implicit permit all at the end of the firewall policy.

The frame will be passed because there is no service specified in the firewall policy.

The frame will be dropped because there is no service specified in the firewall policy.

35. ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user any any permit

host 10.1.1.1 host 10.2.2.2 any deny

A user sends a frame with the following attributes:

Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25

Based on the above Mobility Controller configuration file segment, what will this policy do with the user frame?

The frame is discarded because of the implicit deny all at the end of the policy.

The frame is discarded because of the statement: user host 10.1.1.1 host 10.2.2.2 deny.

The frame is accepted because of the statement: user any any permit.

The frame is accepted because of the statement: user network 10.1.1.0 255.255.255.0 any permit.

This is not a valid policy.

36. ip access-list session anewone

user network 10.1.1.0 255.255.255.0 any permit

user host 10.1.1.1 any deny

user any any permit

Referring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choose two)

This is a session firewall policy.

This is an extended Access Control List (ACL).

Any traffic going to destination 10.1.1.1 will be denied.

Any traffic going to destination 10.2.2.2 will be denied.

Any traffic going to destination 172.16.100.100 will be permitted.

37. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication fails and user authentication passes, which role will be assigned?

employee

guest

denyall

logon

no role is assigned

38. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication passes and user authentication fails, which role will be assigned?

employee

denyall

guest

logon

no role is assigned

39. The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

If machine authentication fails and user authentication fails, which role will be assigned?

employee

guest

Captive Portal

Logon

no role will be assigned

40. What can NOT be configured from the Aruba controller configuration wizards?

Controller IP

Boot Partition

User firewall policy.

User derivation rules.

Radius Servers

Page 5 of 8

41. An administrator is setting up a factory default controller. No new AP groups were created.

When adding a WLAN SSID in the Campus WLAN wizard what AP group is available?

The air-monitors AP group

The logon AP group

The default AP group

The initial AP group

The Spectrum AP group

42. The reusable Aruba Controller wizards are accessible in what way?

Only on startup through the CLI

Through the CLI, after the initial CLI wizard has been completed

In the Web UI under maintenance.

In the Web UI under configuration.

Must be initialized from CLI first.

43. The Controller wizard enables which of the following controller clock configurations? (Choose three)

NTP to a time server

Set time zone

Daylight savings time

Only GMT can be configured

Manual configuration of date and time

44. When configuring ports in the Controller wizard, which of the following are NOT configuration options? (Choose two)

Inter-VLAN routing

Speed

Trusted

LACP

Trunk

45. By default, which CLI based remote access method is enabled on Aruba controllers?

RSH

Telnet

SSH

Telnet and SSH

Telnet, SSH and RSH

46. An Aruba controller can be accessed with which CLI based remote access methods? (Choose two)

RSH

Telnet

SSH

SFTP

SCP

47. As an admin/root user, what other type of role-based management users can be created on Aruba controllers?

Auditing-compliance user

AirWave management user

Reporting Generation user

Guest provisioning user

Maintenance user

48. Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba Controllers?

Security Logs

Management Logs

Wireless Logs

IDS Logs

System Logs

49. Referring to the above screen capture, if an administrator desires to change a specific AP into a Spectrum Monitor without assigning the AP to a new group, which menus could be used?

Network > Controller

Wireless > AP Configuration

Wireless > AP Installation

Advanced Services > Wireless

Wizards > WIP Wizard

50. A customer forgot all passwords for a controller.

What method could you use to reset the passwords?

Telnet to the controller and login to the password recovery account

SSH to the controller and login to the password recovery account

Connect directly to the serial console and login to the password recovery account

Interrupt the boot process at CP-boot and select password recovery

Open the controller and press the reset switch

Page 6 of 8

51. With CPSec disabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

Basic IP

GRE

IPinIP

Mobile IP

IPSec

52. In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which other element?

the default gateway

the remote AP

the foreign agent

the mobile node

the foreign switch

53. When an 802.11 client roams what device decides when to move the client to another AP?

Aruba AP

Aruba controller

Client

Radius Server

Router

54. The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1. All controllers are configured with the wireless user VLAN 201. A wireless user associates with AP 1. Only L2 mobility is enabled.

Which elements will know about this association?

Local 1 only

Local 1 and the Master

Local 1 and Local 2 and the Master

Local 1 and AP1

All Controllers

55. Which command will show all client association history?

show mobile trail current (ip address)

show ip mobile trail (ip address)

show ap client status (mac address)

show current client ip (ip address)

show client ip (ip address) mobility

56. With CPSec enabled, which tunnel protocol is used between APs and Controllers in an Aruba environment?

EAP

SSH

IPinIP

Mobile IP

IPSec

57. A client Roams from one Local controller-1 to another Local controller-2. The controllers are in different subnets and L3 Mobility is enabled.

How is the client traffic sent back to Local-controller-1?

IP-IP tunneled

FTP

Multicast

L2 GRE Tunnel

Routed locally

58. A network needs to implement L3 roaming. On the Master Controller, the administrator, enabled IP mobility, created a Domain and created the HAT table with all the IP addresses of the local controllers. He then enabled Mobility on the VAPs.

The configuration was then saved. L3 Mobility is still not working, what could be the cause? (Choose two)

IP Mobility must be enabled on all controllers.

IP-IP tunnels must be configured between controllers.

The Domain must activated on each controller.

The HAT table must be configured on each controller.

The HAT table must be configured with each controllers supported subnets.

59. By default, how long will an AP scan a single channel when ARM is enabled?

80 milliseconds

90 milliseconds

100 milliseconds

110 milliseconds

200 milliseconds

60. Which actions does ARM (Adaptive Radio Management) perform? (Choose two)

allows controllers to provision the AP Radio type

allows controllers to provision the best channel for APs

allows controllers to provision the best power setting for APs

allows controllers to provision allowed Radio bands

allows controllers to provision lower power when unauthorized APs are detected

Page 7 of 8

61. Which of the following metrics does the ARM feature use to calculate the optimal channel and power level for Access Points? (Choose two)

RF Spectrum Index

Priority Index

Interference Index

Coverage Index

Frequency Index

62. How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHz radios of Aruba APs?

ARM suppresses the probe responses on the 2.4 ghz radio?

ARM utilizes third party software on the wireless clients

Current Wi-Fi chipset firmware supports this by default

It's not possible the move clients to 5GHz radios when they can see both 2.4 and 5GHz APs

ARM disables the 2.4Ghz radio for the specified client

63. Which of the statements below are TRUE regarding ARM's Spectrum Load Balancing feature? (Choose two)

Available only on 5GHz radios

Disabled by default

Balances client load across available channels/APs

Enabled by default

Available only on 2.4GHz radios

64. What is the function of Band Steering?

Balancing clients across APs on different channels within the same band

Encourages clients, 5GHz capable, to connect on the 5GHz spectrum

Coordinate access to the same channel across multiple APs

Enables selection of 20 vs. 40 MHz mode of operation per band

Enables acceptable coverage index on both the "b/g" and "a" spectrums

65. What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

Default Access

Priority Access

Fair Access

Preferred Access

Distributed Access

66. Which of the following statements is true of Spectrum Mode?

No licenses are required to run an AP in Spectrum mode

Spectrum mode can only be configured for one AP at a time

An AP can be in spectrum mode for both 2.4 and 5G bands at the same time

An AP can be placed in Spectrum Mode via the Spectrum Profile

Spectrum mode can be configured from the GUI under AP installation

67. Which ARM feature addresses the issue of sticky clients by moving clients to associate to APs with better 802.11 signal quality?

Co-Channel interference mitigation

Airtime Fairness

ClientMatch

Coordinated access to a single channel

Band Steering

68. Aruba Client Match does NOT use which of the following parameters to determine the best AP for a client connection?

Device type

Location

Signal to Noise Ratio

Access Point load

Spectrum Analysis

69. What is the function of Station Handoff Assist, if enabled?

Force device to 5Ghz band

Force device off AP if RSSI is below threshold

Send message to device to change AP

Send message to adjoining AP to accept device

Send message to adjoining AP to initiate association to the device

70. What is true about client match? (Choose two)

Does Load balancing

Does Spectrum load balancing

Does Band Steering/Band Balancing

Moves higher traffic devices to adjacent APs

Sends QRT frames to neighbor APs

Page 8 of 8

71. Which settings cannot be modified directly from a local controller?

Port VLAN setting

Switch Time Zone

Port trusted

Roles

SNMP Enable Trap Generation

72. Masters communicate configuration information with locals using which tunnel type?

GRE

IP in IP

Provision Tunnel Protocol

IPSec

PPTP

73. In the above screen capture, the administrator notes that most of the configuration options are grayed out and have no action.

What is the cause of the problem?

attempting to make global changes on a Master Controller

attempting to make global changes on a Local Controller

this change can only be performed via the CLI

does not have the correct software license

there is an error in the configuration

74. Referring to the above screen capture, on which Controller can you create a VLAN?

Controller 10.1.10.100 only

Controller 10.1.20.100 and 10.254.1.3 only

All three Controllers

None of the Controllers

Controller 10.254.1.101 only

75. Referring to the above screen capture, on which controller can you add an administrative user and assign a controller management role?

Controller 10.1.10.100 only

Controller 10.1.20.100 and 10.254.1.3 only

All three Controllers

must be done in the RADIUS server

Controller 10.254.1.101 only

76. Refer to the above screen capture. By default, which controller's internal database will be used for user authentication?

Controller 10.1.10.100 only

Controller 10.1.20.100 and 10.254.1.3 only

All three Controllers

You can't tell from this screen

The Controller with the user session

77. Referring to the above screen capture, on which controller can you modify APs configuration to enable ARM?

Controller 10.1.10.100 only

Controller 10.1.20.100 and 10.254.1.3 only

All three Controllers

None of the Controllers

On Controllers where ARM is enabled

78. The Master fails with Central Licensing enabled.

What happens to the local Controllers?

Locals continue to operate for 1 day

Locals operate for 30 days and accept new APs

Locals continue to operate for 90 days and accepts new APs

Locals can only use their originally installed Licenses

Locals will operate with active APs but not will accept any other APs

79. With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?

802.1q

LWAPP

PPTP

GRE

HTTPs

80. With CPSec disabled, which encryption protocol does a tunnel mode campus AP's use on client traffic?

TKIP and AES

It is provisioned by the Administrator

WEP and AES

WEP, TKIP, and AES

No encryption is used