HP HP Certifications ACMP_6.3 Questions & Answers

• Question 141:

  The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (srcnat).

  Which is a use of this statement in an Aruba configuration?

  A. Provide a single source IP address for users in a role

  B. Redirect Captive Portal HTTP sessions

  C. Redirect Access Points to another Aruba controller

  D. Provide IP addresses to clients

  E. Redirects clients to Aruba Firewall

  Correct Answer: A

• Question 142:

  The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).

  Which is the default use of this statement in an Aruba controller configuration?

  A. Source the IP addresses of users to specific IP address

  B. Redirect HTTP sessions to Captive Portal

  C. Redirect Access Points to another Aruba controller

  D. Provide a telnet connection to the controller

  E. Redirect a SSH session to terminate on the controller

  Correct Answer: B

• Question 143:

  What are aliases used for?

  A. Improve controller performance

  B. Simplify the configuration process

  C. Tie IP addresses to ports

  D. Assign rules to policies

  E. Assign policies to roles

  Correct Answer: B

• Question 144:

  Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choose two)

  A. localip any svc-icmp permit

  B. user any svc-icmp permit

  C. user user svc-icmp permit

  D. any any svc-icmp permit

  E. mswitch any svc-icmp permit

  Correct Answer: BD

• Question 145:

  Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)

  A. Roles are assigned to users.

  B. Roles are applied to interfaces.

  C. Policies are built from roles.

  D. A user can belong to only one role at a time.

  E. Roles are a set of authentication rules

  Correct Answer: AD

• Question 146:

  Which netdestination aliases are built into the controller? (Choose three)

  A. logon

  B. any

  C. user

  D. guest

  E. localip

  Correct Answer: BCE

• Question 147:

  Which of the following could be used to set a user's post-authentication role or VLAN association? (Choose two)

  A. AAA default role for authentication method

  B. Server Derivation Rule

  C. Vendor Specific Attributes

  D. AP Derivation Rule

  E. The Global AAA profile

  Correct Answer: BC

• Question 148:

  What is the first role a user is given when a user associates to an open WLAN?

  A. The guest post authentication role

  B. The initial role in the captive portal profile

  C. The role in the server group profile

  D. The initial role in the AAA profile

  E. The initial role in the 802.1x profile

  Correct Answer: D

• Question 149:

  An administrator creates a WLAN with an unmodified default AAA profile. What is the default role the user is placed in?

  A. default-logon

  B. logon

  C. guest-logon

  D. default-ap

  E. AP-Role

  Correct Answer: B

• Question 150:

  Which may be applied directly to an VLAN interface? (Choose three)

  A. Access List (ACL)

  B. Firewall Policy

  C. Roles

  D. AAA profiles

  E. RF Plan Map

  Correct Answer: ABD