HP HP Certifications ACMP_6.3 Questions & Answers

• Question 121:

  The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.

  

  If machine authentication fails and user authentication fails, which role will be assigned?

  A. Employee

  B. Guest

  C. Captive Portal

  D. Logon

  E. No role will be assigned

  Correct Answer: E

• Question 122:

  The screen captures below show the 802.1X authentication profile and AAA profile settings for a VAP.

  

  If machine authentication fails and user authentication passes, which role will be assigned?

  A. employee

  B. guest

  C. contractor

  D. logon

  E. no role is assigned

  Correct Answer: B

• Question 123:

  A customer has a remote AP deployment, where each remote AP has an IPSEC VPN tunnel with L2TP to the controller. 1 of the remote APs is stuck in the user table and hasn't yet transitioned to the AP active table in the controller. The customer suspects that the AP is not setting up its VPN connection successfully. Which of the following commands might be useful in troubleshooting this? (Choose three)

  A. Logging level debugging security process localdb

  B. Logging level debugging security process l2tp

  C. Logging level debugging security process dot1x

  D. Logging level debugging security process crypto

  E. Logging level debugging security process vpn

  Correct Answer: ABD

• Question 124:

  Which of the following will accept named VLANs as a parameter? (Choose three)

  A. Virtual AP profile

  B. User derivation rule for a single VLAN

  C. Server derivation rule for a single VLAN

  D. Server derivation rule for a VLAN Pool

  E. Access VLAN for a VLAN Pool

  Correct Answer: ABC

• Question 125:

  A user connected to a Captive Portal VAP successfully. When the user opens their browser and tries to access their homepage, they get redirected as expected to another URL on the Aruba Controller. However, they see an error message that web authentication has been disabled. What might be a cause of this?

  A. Captive Portal has not been assigned in the SSID profile.

  B. The Captive portal profile has not been assigned to the AAA profile.

  C. A server group has not been assigned to the captive portal profile.

  D. An initial role has not been assigned to the AAA profile.

  E. The Captive portal profile has not been assigned to the initial role.

  Correct Answer: E

• Question 126:

  Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and LMSIP? (Choose three)

  A. Virtual-AP profile

  B. WLAN profile

  C. 802.1x authentication profile

  D. AP System Profile

  E. SSID Profile

  Correct Answer: ADE

• Question 127:

  View the Server group and User Roles screen shots above.

  

  A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius

  attribute of filter-Id with a value of "employee".

  What Role will the user get?

  A. The User will get the Emp Role

  B. The User will get the 802.1x authentication default Role

  C. The User will get the employee Role

  D. The User will get the Employee Role

  E. The User will get the initial Role

  Correct Answer: B

• Question 128:

  View the Server group and User Roles screen shots above.

  

  A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius

  attribute of filter-Id with a value of "employee". The user was placed in the guest Role.

  What statements below are correct? (Choose two)

  A. The user was placed in the 802.1x authentication default Role guest

  B. The user was placed in the initial Role guest

  C. Role derivation failed because roles are case sensitive

  D. Role derivation failed because the incorrect operation "value-of" was used

  E. 802.1x authentication failed so the user was automatically placed in the guest Role

  Correct Answer: AC

• Question 129:

  An administrator wants to assign a VLAN to a user based upon the authentication process using Vendor Specific Attributes (VSA). Where are Aruba Vendor Specific Attribute (VSA) values provisioned?

  A. controller

  B. client

  C. RADIUS server

  D. Internal user database

  E. Option 60 of DHCP reply

  Correct Answer: C

• Question 130:

  View the Server group screen shot above.

  

  A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. This Server Group is applied for 802.1x authentication at both locations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronization and both servers are reachable. What happens when the user attempts to authenticate?

  A. The controller recognizes the users Domain and sends the authentication request directly to RadiusMiami.

  B. The request is initially sent to RadiusNY1 then RadiusNY1 redirects the controller to send the authentication request to RadiusMiami

  C. RadiusNY1 receives the request and returns a deny. No other action is taken.

  D. RadiusNY1 receives the request and returns a deny. The authentication request will then be sent to RadiusMiami.

  E. The RadiusNY1 sends the request to RadiusMiami that replies to the controller

  Correct Answer: C