Aruba ACMP Certification ACMP_6.3 Questions & Answers

• Question 1:

  How does an Aruba infrastructure calculate a wireless device's location?

  A. GPS

  B. RF Fingerprinting

  C. RSSI triangulation

  D. TDOA

  E. LBS

  Correct Answer: C

• Question 2:

  When deploying Remote Mesh Portals, what is one of the purposes of the Mesh Private VLAN?

  A. To separate wireless user traffic coming from mesh networks from non-mesh networks

  B. To tag mesh wireless user traffic on a particular AP

  C. To allow Mesh Points to form private vlan networks with certain users

  D. To tag control plane traffic from Mesh points to the controller

  E. To tag clients high priority traffic

  Correct Answer: D

• Question 3:

  A company purchased an indoor mesh deployment using the 620 controller and the AP 105 models, where 5 APs will be deployed on a floor to provide wireless internet access for users. Users may open VPN tunnels using software clients over the wireless network to a 3rd party VPN concentrator overseas. The company wants to limit wireless user access to TCP traffic locally and VPN traffic overseas.

  In addition to the base AOS, which licenses will be necessary for this deployment?

  A. VPN, PEF-NG

  B. AP Capacity, PEF-NG

  C. AP Capacity, PEF-NG, VPN

  D. AP Capacity

  E. PEF-NG, PEF-V

  Correct Answer: B

• Question 4:

  What is the purpose of Mesh Clusters?

  A. To separate Mesh points from Mesh Portals.

  B. To ensure that mesh APs with the same VAPs are not in the same cluster.

  C. To define a group of mesh APs that create mesh links with each other.

  D. To cluster mesh APs of the same model together.

  E. To enable mesh APs to join the nearest mesh portal cluster.

  Correct Answer: C

• Question 5:

  A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which of the following characteristics?

  A. Local traffic first goes to the controller and is then spilt back to the local network.

  B. User Traffic is CPSec encrypted before it is sent to the controller.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "permit dst-nat" statement to locally bridge the traffic.

  E. The RAP uses UDP 4500 to send traffic to the controller.

  Correct Answer: E

• Question 6:

  Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?

  A. Local user traffic first goes to the controller and is then spilt back to the local network.

  B. All data and control traffic goes to the controller unsecured.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "route src-nat" statement to locally bridge the traffic.

  E. The RAP uses PAPI to send data traffic to the controller.

  Correct Answer: D

• Question 7:

  An AP 105 was converted into a RAP. The RAP can authenticate its IPSec tunnel to a controller using which of the following methods? (Choose two)

  A. 802.1X/EAP authentication

  B. Captive Portal authentication

  C. IP address authentication

  D. Username/Password authentication.

  E. Certificate/MAC address authentication.

  Correct Answer: DE

• Question 8:

  A Remote AP provisioned with an SSID in "Bridged" forwarding mode has which one of the following characteristics?

  A. The client obtains its IP address from the controller.

  B. The client's default gateway must be the controller.

  C. The client traffic is forwarded through a GRE tunnel to the controller.

  D. The client's default gateway may be the Access Point or a local gateway.

  E. The client's authentication must be 802.1X.

  Correct Answer: D

• Question 9:

  A Remote AP was properly functioning before losing it's internet connection and now cannot communicate with the controller. What SSID is the AP broadcasting?

  A. The SSID in Operational mode Always and Forwarding mode Backup

  B. The SSID in Operational mode Split Tunnel and Forwarding mode Bridge

  C. The SSID in Operational mode Always and Forwarding mode Tunnel

  D. The SSID in Operational mode Standard and Forwarding mode Tunnel

  E. The SSID in Operational mode Persistent and Forwarding mode Bridge

  Correct Answer: E

• Question 10:

  A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristic?

  A. Local traffic first goes to the controller and is then spilt back to the local network.

  B. Traffic is IPSec encrypted before it is sent to the controller.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "route dst-nat" statement to locally bridge the traffic.

  E. The RAP uses PAPI to send data traffic to the controller.

  Correct Answer: B