HP Aruba ACMA ACMA_6.3 Questions & Answers

• Question 61:

  In decrypt-tunneled forwarding mode, which of the following is true?

  A. Client sets up an IPSEC tunnel with the controller

  B. The AP decrypts and then the 802.11 frame is sent in a GRE tunnel to the controller

  C. The AP decrypts the 802.11 frame and bridges it on the wire

  D. The AP decrypts the 802.11 frame, encrypts it as an Ethernet frame and sends it to the Controller

  E. Clients decrypted traffic is sent down the GRE tunnel

  Correct Answer: B

• Question 62:

  Guest access can be provided securely by combining the following components of an Aruba system: (Select two)

  A. Use restrictive firewall policies to limit the guest user's access to internal resources

  B. Providing guests their own APs and controllers

  C. Dedicated APs

  D. Authenticate users with the internal captive portal against the internal database or other server

  E. DoS guest users off of the system and make them use wired ports

  Correct Answer: AD

• Question 63:

  When adding licenses in the startup wizard license screen a reboot is required:

  A. After each license is installed

  B. Before any other configuration can take place

  C. Only if the Policy Enforcement Firewall license is installed

  D. Once the last License is added

  E. A reboot is not required until you have completed the configuration wizard

  Correct Answer: E

• Question 64:

  Which of the following is true about configuring a server group?

  A. Server rules are used to send information to the configured servers

  B. A server group can have more than 1 server

  C. If the internal database is used in the server group, then no external servers can be added

  D. If multiple servers are assigned to the server group, all except the 1st will be ignored

  E. All the servers in a server group will be used round robin style

  Correct Answer: B

• Question 65:

  The Guest Provisioning user account has the ability to do which of the following?

  A. Add a new employee to the internal database

  B. Change the "look" and "feel" of the guest provisioning page

  C. Change the available data fields on the guest provisioning page

  D. Add a guest user to the internal database

  E. Assign a Role to a guest account

  Correct Answer: D

• Question 66:

  Which of the following is NOT available for configuration in the startup wizard?

  A. RF Plan

  B. Administrator and enable passwords

  C. Native VLANs on a per port basis

  D. WPA-PSK encryption

  E. Radius Server

  Correct Answer: A

• Question 67:

  Remote AP in tunnel mode, by default, uses which of the following to encrypt user traffic back to the mobility controller?

  A. L2TP over IPSec is used to carry user traffic and control traffic

  B. PPTP is used to tunnel user traffic

  C. The AP does not encrypt user traffic. The user's link layer encryption is used.

  D. Remote AP traffic is unencrypted

  E. Certificate based tunnel

  Correct Answer: C

• Question 68:

  In what formats can Visual RF Plan export a Bill of Material (Select two)?

  A. Microsoft Excel

  B. CSV database format

  C. Microsoft Word

  D. HTML

  E. MySQL

  Correct Answer: CD

• Question 69:

  FQLN can be set for an AP: (Select two)

  A. At the factory

  B. During AP provisioning

  C. Using the FQLN mapper tool

  D. By DHCP when an address is requested

  E. Using the AP wizard

  Correct Answer: BC

• Question 70:

  The characteristics of 802.1X Authentication include (Select three):

  A. L3 Authentication

  B. Extensible Authentication Protocol

  C. Support of RADIUS external authentication

  D. Port based authentication

  E. EAP terminates on authenticator

  Correct Answer: BCD