Aruba Aruba Certifications ACMP_6.4 Questions & Answers

• Question 51:

  Exhibit:

  

  Referring to the diagram provided for this question, an employee brought an unauthorized AP from home

  and attached it to the cubicle Ethernet port as shown in the diagram. The APs are in VLANs as shown in

  the diagram. Only AP1 is within RF range.

  How will the Aruba controller classify this AP?

  A. an AP

  B. an AM

  C. a Rogue AP

  D. an Interfering AP

  E. a workstation

  Correct Answer: D

• Question 52:

  

  Referring to the diagram provided for this question, an employee brought an unauthorized AP from home and attached the LAN port to the cubicle Ethernet port. All Aruba APs and AMs as well as the employee AP are in VLAN 80 and within RF range of each other. No traffic from the wired or wireless network has passed through the unauthorized AP yet, but the AP began wireless broadcasts. How will the Aruba system initially classify the employee's non-Aruba AP?

  A. a valid AP

  B. an AM

  C. a Rogue AP

  D. an interfering AP

  E. a known interfering AP

  Correct Answer: D

• Question 53:

  An AP was configured to use dynamic controller discovery and assigned to an AP group, then powered of f for over a week. When the AP is redeployed, what previous configuration will it retain?

  A. Its AP name and AP Group

  B. Its Serial Number

  C. The controller's IP address

  D. After a few days all configurations are lost

  E. The controller IP address and the AP Group

  Correct Answer: A

• Question 54:

  An AP is not communicating with the controller. Upon investigation you find that the AP is not discovering its controller through DNS. Instead, it received a DHCP reply with option 43 specifying the SIP server's IP address. How do you resolve this problem?

  A. Statically configure the AP to ignore Option 43

  B. On the DHCP server implement Option 60 C. Statically configure the AP to only use DNS resolution and no other dynamic discovery methods

  D. After failing option 43 the AP should have proceeded with ADP, therefore the AP is faulty and needs to be replaced

  E. The AP should be purged

  Correct Answer: B

• Question 55:

  When APs boot up, in which order do they Select a controller?

  A. DNS, DHCP, ADP multicast, ADP unicast, static

  B. static, DNS, DHCP, ADP broadcast, ADP multicast

  C. static, DHCP, ADP broadcast, ADP multicast, DNS

  D. static, DHCP, DNS, ADP multicast, ADP broadcast

  E. DNS, static, ADPmulticast, ADPbroadcast

  Correct Answer: C

• Question 56:

  Which method can APs use to discover a controller?

  A. DHCP

  B. Dynamic DNS (DDNS)

  C. PnP

  D. PAPI

  E. HTTPS

  Correct Answer: A

• Question 57:

  A port on a controller has been configured as untrusted. No wired access AAA profile or Global AAA profile is configured. When a user connects to that port which of the following statements is true?

  A. Since there is no wired access AAA profile, only port policies will be applied

  B. The user will fall into the default wired access AAA profile and will be given the initial role.

  C. Since there is no wired access AAA profile or Global AAA profile the user will be given the logon role.

  D. When configuring the port as untrusted, an error message of "no wired access AAA profile exists" Therefore this is an invalid configuration.

  E. The user is denied all access automatically because no wired access AAA or Global AAA profile is assigned.

  Correct Answer: C

• Question 58:

  An access port has been placed in trusted mode. The VLAN on the port is in Untrusted mode. Which of the following statements is true?

  A. The traffic is trusted since the port is trusted

  B. The traffic is untrusted since the VLAN is untrusted

  C. This is an invalid configuration, both must be set the same

  D. You cannot set VLANs as trusted or untrusted

  E. Only traffic from that specific port is trusted, all other traffic is untrusted

  Correct Answer: B

• Question 59:

  A port firewall policy is applied to a trunk port that denies controller access. An "allow all" VLAN firewall policy is applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain access to the controller. Which of the following statements is true?

  A. The Port policy is applied, therefore no controller access

  B. The VLAN policy is applied, then the port policy, therefore no controller access

  C. The VLAN policy is applied, therefore access to the controller is allowed

  D. You cannot place a firewall policy on a Ports VLAN when the Port already has a policy, therefore no controller access

  E. When locally connected to a controller's port you always have controller access

  Correct Answer: C

• Question 60:

  A university, has 2 departments. Department 1 has its own mobility domain with one controller. Department

  2 has multiple controllers configured in a second domain. The university is planning on offering a new

  application and needs users to be able to roam between both mobility domains.

  What is the best way to accomplish this?

  A. The 2 existing domains should be left as they are. A 3rd mobility domain should then be created and all 3 controllers need to be added to it

  B. Merge the controllers into the same mobility domain

  C. The IP subnets of all controllers need to be configured to match

  D. This cannot be accomplished

  E. Create a new domain between a department 1 controller and one of the department 2 controllers

  Correct Answer: B