Free Aruba ACMP-6.4 Practice Test & Real Exam Questions, Page 1

Question #1

,

View the Server group and User Roles screen shots above.
A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of "employee". The user was placed in the guest Role. What statements below are correct? (Choose two.)

A. 802.1x authentication failed so the user was automatically placed in the guest Role

B. Role derivation failed because the incorrect operation "value-of" was used

C. The user was placed in the initial Role guest

D. The user was placed in the 802.1x authentication default Role guest

E. Role derivation failed because roles are case sensitive

Discussion 0

Correct Answer: D,E Vote an answer

Question #2

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.
If machine authentication fails and user authentication fails, which role will be assigned?

A. employee

B. Logon

C. Captive Portal

D. guest

E. no role will be assigned

Discussion 0

Correct Answer: E Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #3

What is the function of Station Handoff Assist, if enabled?

A. Send message to device to change AP

B. Force device to 5Ghz band

C. Send message to adjoining AP to accept device

D. Send message to adjoining AP to initiate association to the device

E. Force device off AP if RSSI is below threshold

Discussion 0

Correct Answer: E Vote an answer

Question #4

How is an AP redirected to a Local controller after DNS resolution returns the Master's IP address?

A. In the AP-provisioning screen, set the CONTROLLER-IP attribute

B. Master looks at the AP-Group and CONTROLLER-IP attributes

C. Master looks at the AP-Group and LMS-IP attributes

D. In the AP-provisioning screen, the LMS-IP attribute must be set

E. The AP must be statically configured to find the local controller

Discussion 0

Correct Answer: C Vote an answer

Question #5

Which statement is true about the Content Security License?

A. Applied to all the controllers in the network

B. It is based on number of users

C. It is based on number of APs

D. Applied to the master controller

Discussion 0

Correct Answer: B Vote an answer

Question #6

A customer has a remote AP deployment, where each remote AP has an IPSEC VPN tunnel with L2TP to the controller. 1 of the remote APs is stuck in the user table and hasn't yet transitioned to the AP active table in the controller. The customer suspects that the AP is not setting up its VPN connection successfully. Which of the following commands might be useful in troubleshooting this? (Choose three.)

A. Logging level debugging security process dot1x

B. Logging level debugging security process crypto

C. Logging level debugging security process localdb

D. Logging level debugging security process l2tp

E. Logging level debugging security process vpn

Discussion 0

Correct Answer: B,C,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #7

By default, Centralized licensing messages between master and local controllers are sent
___________________.

A. Using IPSec site to site VPN tunnels

B. Using CPSec

C. Encrypted using GRE

D. PAPI

E. In the clear unencrypted since the master and local controllers already share IPSEC tunnels.

Discussion 0

Correct Answer: E Vote an answer

Question #8

What information do you need to generate a feature license key for an Aruba controller?

A. controller's Serial Number and the certificate number

B. The controller's MAC address and the feature description.

C. controller's MAC address and Serial Number

D. controller's MAC address and the certificate number

E. controller's Serial Number and the feature description

Discussion 0

Correct Answer: A Vote an answer

Question #9

An administrator provides services to a university that has this environment:
* There are two departments, named Department 1 and Department 2
* Department 1 has its own mobility domain with one controller
* Department 2 has multiple controllers configured in a second domain
The president of the university has a goal to roll out a new application next semester. The president wants to give users of this application the ability to roam between both mobility domains.
What should the administrator do to accomplish the president's goal in the most effective manner?

A. Combine the controllers into the same mobility domain

B. Configure all controllers' IP subnets to ensure that they match

C. Create a new domain and activate the new domain with the existing domains on the controllers

D. Add a new domain between a controller in Department 1 and a controller in Department 2

Discussion 0

Correct Answer: A Vote an answer

Question #10

Exhibit:

Referring to the diagram provided for this question, an employee brought an unauthorized AP from home and attached it to the cubicle Ethernet port as shown in the diagram. The APs are in VLANs as shown in the diagram. Only AP1 is within RF range.
How will the Aruba controller classify this AP?

A. an AP

B. a workstation

C. an Interfering AP

D. a Rogue AP

E. an AM

Discussion 0

Correct Answer: C Vote an answer

Question #11

An administrator creates a firewall policy on an Aruba Mobility Controller and applies it to a trunk port that is marked as trusted. No specific AAA profile is configured for the VLAN. A user in VLAN 11, which is marked as untrusted, sends traffic to the port.
What happens with the traffic?

A. The traffic is trusted and is always permitted.

B. The traffic is trusted and the firewall policy determines if the traffic is permitted or dropped.

C. The traffic is untrusted and the global AAA profile is applied.

D. The traffic is untrusted and is always dropped.

Discussion 0

Correct Answer: B Vote an answer

Question #12

Which protocols does the Aruba controller utilize for controller redundancy (Choose two)?

A. HA

B. IP-IP

C. VPN

D. VRRP

E. HSRP

Discussion 0

Correct Answer: A,D Vote an answer

Question #13

Which of the following statements is not true about the remote node?

A. Remote Node is only used for Remote AP termination

B. Remote Node builds an Ipsec tunnel to Remote Node Master?

C. Remote Node can only be configured using the CLI

D. Only L3 configurations are pushed from a RN-Master to a Remote Node

E. A RN-Master can be either a Master or a Local controller

Discussion 0

Correct Answer: A,D Vote an answer

Question #14

The reusable Aruba Controller wizards are accessible in what way?

A. In the Web UI under configuration.

B. Only on startup through the CLI

C. In the Web UI under maintenance.

D. Through the CLI, after the initial CLI wizard has been completed

E. Must be initialized from CLI first.

Discussion 0

Correct Answer: A Vote an answer

Question #15

When creating a firewall rule on an Aruba controller, which parameter is optional?

A. Log

B. Service

C. Action

D. Source

E. Destination

F. Mirror

Discussion 0

Correct Answer: A Vote an answer

Free Aruba ACMP-6.4 Practice Test & Real Exam Questions

Download Free Aruba ACMP-6.4 Demo