Aruba ACMP ACMP_6.4 Questions & Answers

• Question 41:

  A client device associates with an SSID provisioned with 802.1X authentication. The client is set for LEAP authentication. EAP termination (AAA Fastconnect) is enabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this?

  A. The Radius server is rejecting the client credentials.

  B. The client has an expired or revoked server certificate.

  C. The DHCP server is not enabled.

  D. The VLAN is missing for the SSID.

  E. The controller does not support LEAP in this mode.

  Correct Answer: E

• Question 42:

  A client device associates with an SSID provisioned with 802.1X authentication. The client is set for PEAP authentication. EAP termination (AAA Fastconnect) is disabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this? (Choose two)

  A. The client is provisioned with the wrong EAP type.

  B. The client has an expired or revoked server certificate.

  C. The DHCP server is not enabled.

  D. The VLAN is missing for the SSID.

  E. The controller does not support PEAP in this mode.

  Correct Answer: AB

• Question 43:

  Which of the following functions can be configured in the Controller WIP wizard? (Choose three.)

  A. Configure APs as Air Monitors

  B. Configure rules for AP classification.

  C. Configure preset levels for intrusion detection

  D. Blacklisting Rules for clients

  E. Identify encryption method used in your network.

  Correct Answer: BCE

• Question 44:

  Which of the following parameters can be specified in a rule for AP classification? (Choose three) A. SSID of an AP

  B. Number of clients connected to an AP.

  C. SNR of an AP.

  D. Operating mode of an AP

  E. Discovering APs

  Correct Answer: ACE

• Question 45:

  (group8) #show ap arm history ap-name AP1 Interface :wifi0 ARM History

  Time of Change Old Channel New Channel Old Power New Power Reason -------------- ----------- ------------------- --------- ------ 2015-1-28 07:58:53 157+ 149+ 21 21 I 2015-1-28 07:52:06 149+ 157+ 21 21 M 2015-1-28 07:16:59 157+ 149+ 21 21 I

  Interface :wifi1 ARM History

  Time of Change Old Channel New Channel Old Power New Power Reason -------------- ----------- ------------------- --------- ------ 2015-1- 28 08:52:53 6 1 21 21 I Referring to the output above. What can you conclude about AP1?

  A. This device is scanning channels.

  B. This device is unstable because the channel assignment changed.

  C. The device changed channels recently.

  D. The device changed channels and power levels recently.

  E. The device is transmitting at maximum power levels.

  Correct Answer: C

• Question 46:

  Exhibit: Based on the above screen capture for Interfering APs, what can you conclude?

  

  A. The APs must be connected to the Aruba network.

  B. The APs are classified as interfering because they are all transmitting on channel 6.

  C. There must not be any evidence that the APs are attached to the wired corporate network.

  D. These APs are classified as interfering because they are not Aruba APs.

  E. They are classified as interfering because they are running in g mode.

  Correct Answer: C

• Question 47:

  (group8) #show ap active

  Active AP Table

  Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a Ch/EIRP/MaxEIRP ---- -------------- --------- ------------------- ----------- ------------------- AP1 building1 10.1.80.150 0 AM 0 AM

  AP2 building1 10.1.80.151 0 AM 0 AM

  A user called technical support because they cannot see any of their APs in building one. You perform the

  "show"

  command as illustrated above.

  What can you conclude about these two APs from this output?

  A. the GRE for the APs terminate on two different controllers: 10.1.80.150 and 10.1.80.151

  B. the system will not function because there is no building1 group defined

  C. the building1 APs will not accept any user connections

  D. the user needs to configure his client to use the b/g band

  E. the user needs to configure his client to use the a band

  Correct Answer: C

• Question 48:

  A client has not purchased the RF Protect license. Without this license what is still supported, in the basic OS?

  A. Only Intrusion Detection but no Intrusion Protection

  B. Rogue Detection and Containment

  C. Spectrum Analysis

  D. Can only configure High, Medium and Low settings, No customization

  E. Without the License there is no Intrusion detection nor Intrusion Protection

  Correct Answer: B

• Question 49:

  What can an AM do that an AP cannot do?

  A. Detect rogue APs

  B. Detect an AP failure

  C. Scans all channels in under 1 minute

  D. Detect interfering APs

  E. Scan all valid channels

  Correct Answer: C

• Question 50:

  Exhibit:

  

  Referring to the diagram provided for this question, an employee brought an unauthorized AP from home,

  but did not attach it to the LAN infrastructure. The APs are in the VLANs as shown in the diagram. Only

  AP1 is within RF range of the employee AP.

  By default, how will the Aruba system classify the employee's AP?

  A. an AP

  B. an AM

  C. a Rogue AP

  D. an Interfering AP

  E. a valid workstation

  Correct Answer: D