Aruba ACMP ACMP_6.4 Questions & Answers

• Question 21:

  How does an Aruba infrastructure calculate a wireless device's location?

  A. GPS

  B. RF Fingerprinting

  C. RSSI triangulation

  D. TDOA

  E. LBS

  Correct Answer: C

• Question 22:

  A company purchased an indoor mesh deployment using the 7005 controller and the AP 115 models, where 5 APs will be deployed on a floor to provide wireless internet access for users. Users may open VPN tunnels using software clients over the wireless network to a 3rd party VPN concentrator overseas. The company wants to limit wireless user access to TCP traffic locally and VPN traffic overseas. Inaddition tothebase AOS, whichlicenseswill be necessaryforthis deployment?

  A. VPN, PEF-NG

  B. AP Capacity, PEF-NG

  C. AP Capacity, PEF-NG, VPN

  D. AP Capacity

  E. PEF-NG, PEF-V

  Correct Answer: B

• Question 23:

  What is the purpose of Mesh Clusters?

  A. To separate Mesh points from Mesh Portals.

  B. To ensure that mesh APs with the same VAPs are not in the same cluster.

  C. To define a group of mesh APs that create mesh links with each other.

  D. To cluster mesh APs of the same model together.

  E. To enable mesh APs to join the nearest mesh portal cluster.

  Correct Answer: C

• Question 24:

  The corporation has deployed hundreds of RAP3 and all are working. A user has received a RAP3 from the IT department. At his home he connects the Ethernet port to his DSL modem. The corporate SSID is not advertises but an Instant SSID is. What could be the problem?

  A. This RAP was purchased as an IAP and not as a RAP

  B. The activate server does not have this RAPs configured

  C. The corporate Firewall is blocking VPN

  D. The RAP3 must be pre-staged

  E. The user must connect his laptop, get the Zero touch window and enter the URL

  Correct Answer: B

• Question 25:

  A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which of the following characteristics?.

  A. Local traffic first goes to the controller and is then spilt back to the local network.

  B. User Traffic is CPSec encrypted before it is sent to the controller.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "permit dst-nat" statement to locally bridge the traffic.

  E. The RAP uses UDP 4500 to send traffic to the controller.

  Correct Answer: E

• Question 26:

  Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?.

  A. Local user traffic first goes to the controller and is then spilt back to the local network.

  B. All data and control traffic goes to the controller unsecured.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "route src-nat" statement to locally bridge the traffic.

  E. The RAP uses PAPI to send data traffic to the controller.

  Correct Answer: D

• Question 27:

  An AP 105 was converted into a RAP. The RAP can authenticate its IPSec tunnel to a controller using which of the following methods? (Choose two.)

  A. 802.1XjEAP authentication

  B. Captive Portal authentication

  C. IP address authentication

  D. Username/Password authentication.

  E. Certificate/MAC address authentication.

  Correct Answer: DE

• Question 28:

  A Remote AP provisioned with an SSID in "Bridged" forwarding mode has which one of the following characteristics?

  A. The client obtains its IP address from the controller.

  B. The client's default gateway must be the controller.

  C. The client traffic is forwarded through a GRE tunnel to the controller.

  D. The client's default gateway may be the Access Point or a local gateway.

  E. The client's authentication must be 802.1X.

  Correct Answer: D

• Question 29:

  A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristic?

  A. Local traffic first goes to the controller and is then spilt back to the local network.

  B. Traffic is IPSec encrypted before it is sent to the controller.

  C. The user role must have a "Permit" statement in order to locally bridge the traffic.

  D. The user role must have a "route dst-nat" statement to locally bridge the traffic.

  E. The RAP uses PAPI to send data traffic to the controller.

  Correct Answer: B

• Question 30:

  When does a RAP's backup SSID begin broadcasting?

  A. When the GRE tunnel to the controller is established.

  B. When the IPSec tunnel to the controller is established.

  C. When the controller cannot be reached with PAPI

  D. When bridging is required for guest users.

  E. When the controller cannot be reached with SSL

  Correct Answer: C