HP HP Certifications ACMP_6.3 Questions & Answers

• Question 21:

  An Aruba based network has a Master and four local controllers deployed. But one of the locals, a new installation, is not seen by the Master. What might be wrong? (Choose two)

  A. PAPI is not enabled on the local controller.

  B. The master controller can only support three local controllers.

  C. IPSec is blocked by the internal network between the local and the master controllers.

  D. The passphrase does not match on the master and local controllers.

  E. GRE is blocked between the master and local controllers.

  Correct Answer: CD

• Question 22:

  Which of the following commands is most useful in showing the traffic of an individual user?

  A. show datapath session table

  B. show acl hits

  C. show rights

  D. show firewall

  E. show traffic client

  Correct Answer: A

• Question 23:

  Which command, when executed on a master controller, will show the APs connected to all controllers?

  A. show stm connectivity

  B. show ap active

  C. show ap database

  D. show ap bss-table

  E. show ap controller-lms

  Correct Answer: C

• Question 24:

  A client attaches to a secure jack interface set to untrusted. But when the client tries to access the captive portal page, the following message appears, "Web Authentication is not enabled." What might be wrong?

  A. The client has the browser provisioned with proxy settings.

  B. The controller port needs to be set to trusted.

  C. A "aaa" profile needs to be selected on the Wired Access page.

  D. A Captive Portal profile needs to be assigned to the initial role.

  E. Web Authentication cannot be used in this way.

  Correct Answer: D

• Question 25:

  A client device associates with an SSID provisioned with 802.1X authentication. The client is set for LEAP authentication. EAP termination (AAA Fastconnect) is enabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this?

  A. The Radius server is rejecting the client credentials.

  B. The client has an expired or revoked server certificate.

  C. The DHCP server is not enabled.

  D. The VLAN is missing for the SSID.

  E. The controller does not support LEAP in this mode.

  Correct Answer: E

• Question 26:

  A client device associates with an SSID provisioned with 802.1X authentication. The client is set for PEAP authentication. EAP termination (AAA Fastconnect) is disabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this? (Choose two)

  A. The client is provisioned with the wrong EAP type.

  B. The client has an expired or revoked server certificate.

  C. The DHCP server is not enabled.

  D. The VLAN is missing for the SSID.

  E. The controller does not support PEAP in this mode.

  Correct Answer: AB

• Question 27:

  Which of the following functions can be configured in the Controller WIP wizard? (Choose three)

  A. Configure APs as Air Monitors

  B. Configure rules for AP classification.

  C. Configure preset levels for intrusion detection

  D. Blacklisting Rules for clients

  E. Identify encryption method used in your network.

  Correct Answer: BCE

• Question 28:

  Which of the following parameters can be specified in a rule for AP classification? (Choose three)

  A. SSID of an AP

  B. Number of clients connected to an AP.

  C. SNR of an AP.

  D. Operating mode of an AP

  E. Discovering APs

  Correct Answer: ACE

• Question 29:

  (group8) #show ap arm history ap-name AP1

  Interface :wifi0 ARM History Time of Change Old Channel New Channel Old Power New Power Reason 2010-10-28 07:58:53 157+ 149+ 21 21 I

  2010-10-28 07:52:06 149+ 157+ 21 21 M

  2010-10-28 07:16:59 157+ 149+ 21 21 I

  Interface :wifi1

  ARM History

  Time of Change Old Channel New Channel Old Power New Power Reason

  --------------2010-10-28 08:52:53

  -----------6

  -----------1

  ---------21

  -----

  ---21

  -----I

  Referring to the output above. What can you conclude about AP1?

  A. This device is scanning channels. B. This device is unstable because the channel assignment changed. C. The device changed channels recently. D. The device changed channels and power levels recently. E. The device is transmitting at maximum power levels.

  Correct Answer: C

• Question 30:

  As illustrated in the above diagram and screen capture, a wireless hacker injects messages into your network to detach a client from your Aruba AP.

  

  What action should you take to identify and prevent the Intruder from connecting to your system? (Choose two)

  A. Enable Detect disconnect Station Attack

  B. Enable Spoofed Deauth Blacklist

  C. Take no action as there is no protection against this form of attack

  D. Take no action as the Aruba system ignores this attack because it is against the client

  E. Enable Detect EAP rate Anomaly

  Correct Answer: AB