EMT Practice Test

1. Question Content...

---

Question1: Which may be applied directly to an VLAN interface? (Choose three)

Question2: Where in the network can Aruba controllers be deployed?

Question3: A Remote AP provisioned with an SSID in "Bridged" forwarding mode has which one of the following characteristics?

Question4: An Aruba based network has a Master and three local controllers. No APs terminate on the
Master controller. IDS is desired, so the administrator wants to install the "RFProtect license." On which controller should the license be installed?

Question5: A client device associates with an SSID provisioned with 802.1X authentication. The client is set for PEAP authentication. EAP termination (AAA Fastconnect) is disabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this? (Choose two)

Question6: A Remote AP was properly functioning before losing its internet connection and now cannot communicate with the controller. What SSID is the AP broadcasting?

Question7: Which of the following functions can be configured in the Controller WIP wizard? (Choose three.)

Question8: An access port has been placed in trusted mode. The VLAN on the port is in Untrusted mode. Which of the following statements is true?

Question9: The Master fails with Central Licensing enabled. What happens to the local Controllers?

Question10: You want to locate a wireless device on the controller GUI. You go to the Clients list from the Monitoring tab and click the Locate button but the controller is unable to locate the client.
Which could be the possible reasons for the error?

Question11: When configuring Fast Failover what are the 3 HA roles that can be selected? (Choose three)

Question12: What is the total number of charts you can simultaneously monitor in a spectrum dashboard?

Question13: A company purchased an indoor mesh deployment using the 7005 controller and the AP
1 15 models, where 5 APs will be deployed on a floor to provide wireless internet access for users. Users may open VPN tunnels using software clients over the wireless network to a
3 rd party VPN concentrator overseas. The company wants to limit wireless user access to
TCP traffic locally and VPN traffic overseas.
In addition to the base AOS, which licenses will be necessary for this deployment?

Question14: What APs can be configured as a Certificate based RAP?

Question15: A client attaches to a secure jack interface set to untrusted. But when the client tries to access the captive portal page, the following message appears, "Web Authentication is not enabled." What might be wrong?

Question16: What is true about an AP in Hybrid Spectrum mode?

Question17: When an 802.11 client roams what device decides when to move the client to another AP?

Question18: When creating a firewall rule on an Aruba controller, which parameter is optional?

Question19: One hundred (100) additional APs were deployed in an existing network. But some APs are not able to connect to the lms-ip address, even though all of the APs belong to the same
AP group. Which of the following are NOT potential causes? (Choose two).

Question20: Which ARM feature addresses the issue of sticky clients by moving clients to associate to
APs with better 802.11 signal quality?

Question21: Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon
access-list List
----------------
Position Name Location
-------- ---- --------
1 logon-control
2 captiveportal
logon-control
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit
captiveportal
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?

Question22: Which of the following will accept named VLANs as a parameter? (Choose three)

Question23: Referring to the above screen capture,

Which tab tells you which licenses are installed on the controller?

Question24: With CPSec disabled, which encryption protocol does a tunnel mode campus AP's use on client traffic ?

Question25: When creating a firewall policy, which of the following parameters are required?

Question26: Which of the following are NOT valid RAP forwarding modes (Choose two)?

Question27: Which method can APs use to discover a controller?

Question28: Which of the following metrics does the ARM feature use to calculate the optimal channel and power level for Access Points? (Choose two)

Question29: Which types of encryption will an Aruba access point perform on traffic sent through a
Campus AP Virtual AP (VAP) profile in Tunnel forwarding mode?

Question30: Refer to the following configuration segment for this item.
ip access-list session anewone
user network 172.16.1.0 255.255.255.0 any permit
user host 172.16.1.1 any deny
user any any permit
An administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, which statements best describe this policy? (Choose two)

Question31: What is the blacklist default time?

Question32: Which protocols does the Aruba controller utilize for controller redundancy (Choose two)?

Question33: Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and
LMSIP? (Choose three)

Question34: As illustrated in the above diagram and screen capture, a wireless hacker injects messages into your network to detach a client from your Aruba AP.

What action should you take to identify and prevent the Intruder from connecting to your system?

Question35: What are the Airtime Allocation Policy options for Airtime Fairness? (Choose three)

Question36: The Controller wizard enables which of the following controller clock configurations?
(Choose three)

Question37: Which actions does ARM (Adaptive Radio Management) perform? (Choose two)

Question38: Exhibit:

Referring to the diagram provided for this question, an employee brought an unauthorized
AP from home and attached it to the cubicle Ethernet port as shown in the diagram. The
APs are in VLANs as shown in the diagram. Only AP1 is within RF range.
How will the Aruba controller classify this AP?

Question39: Which of the following controllers has an integrated single radio AP?

Question40: A Master switch can serve as an AP backup for a local switch.

Question41: What are valid methods of blacklisting a device? (Choose three)

Question42:
In the diagram provided for this question, the Aruba controller terminates one end of a GRE tunnel that carries wireless user traffic.
Where does the other end terminate?

Question43: In the university illustrated in the above diagram, the Life Sciences department has its own mobility domain, as does the engineering department. The university is planning on offering a new application and needs users to be able to roam between both mobility domains.

What is the best way to accomplish this?

Question44:
Referring to the above screen capture, on which controller can you add an administrative user and assign a controller management role?

Question45: What is the first role a user is given when a user associates to an open WLAN?

Question46: How does an Aruba infrastructure calculate a wireless device's location?

Question47: Which of the following statements allows a user to initiate an HTTP session to other devices?

Question48:
In the diagram provided for this question, the wireless user's laptop is associated with an
Aruba AP in tunnel forwarding mode. The AP terminates on the local controller.
When the client transmits, where will the 802.11 headers be removed?

Question49: What information do you need to generate a feature license key for an Aruba controller?

Question50: A port firewall policy is applied to a trunk port that denies controller access. An "allow all"
VLAN firewall policy is applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain access to the controller. Which of the following statements is true?

Question51:
Referring to the screen captures provided for this question, what can you conclude about the two clients from the Packet Rate Distribution screens?

Question52: Which parameter does a Master switch use to determine where a provisioned AP should terminate its GRE tunnel?

Question53: An administrator creates a WLAN with an unmodified default AAA profile. What is the default role the user is placed in?

Question54: Exhibit:

Referring to the diagram provided for this question, an employee brought an unauthorized
AP from home, but did not attach it to the LAN infrastructure. The APs are in the VLANs as shown in the diagram. Only AP1 is within RF range of the employee AP.
By default, how will the Aruba system classify the employee's AP?

Question55: Which of the following parameters can be specified in a rule for AP classification? (Choose three)

Question56: An AP125 has been provisioned as a Campus AP in the default AP group. It has booted but the radio lights are orange. What might be a cause of this? Select all that apply.

Question57: Which of the following licenses are consumed by Mesh APs advertising an SSIDs?

Question58: A university has 2 departments. Department 1 has its own mobility domain with one controller. Department 2 has multiple controllers configured in a second domain. The university is planning on offering a new application and needs users to be able to roam between both mobility domains.
What is the best way to accomplish this?

Question59: By default Centralized licensing messages between master and local controllers are sent
___________________.

Question60: IEEE 802.11r provides support for which of the following:

Question61: Which of the following APs do NOT support dual radio operations?
(Choose two)

Question62: An AP was configured to use dynamic controller discovery and assigned to an AP group, then powered off for over a week. When the AP is redeployed, what previous configuration will it retain?

Question63: Which of the following statements is true of Spectrum Mode?

Question64: Two Aruba 620 controllers are configured as a VRRP pair. One of the controllers fails.
Which is the maximum number of campus APs that the remaining controller can terminate?

Question65: A 3200 controller has 32 PEF-NG license, 16 RFProtect license and 32 AP licenses, how many AP's can terminate on the controller?

Question66:

Screenshots of the Captive Portal authentication profile and server group of a guest network are displayed above.
How was the user authenticated?

Question67: What is the function of Band Steering?

Question68: Which of the following functions cannot be configured in the WIPS wizard?

Question69: A Server Group has been configured with three Radius servers. Load balancing has been enabled. Choose the correct statement?

Question70: An administrator wants to assign a VLAN to a user based upon the authentication process using Vendor Specific Attributes (VSA). Where are Aruba Vendor Specific Attribute (VSA) values provisioned?

Question71: An AP135 has been configured with 3 SSIDs supported on both 2.4Ghz and 5Ghz bands.
How many GRE tunnels will be created between the AP 135 and the controller?

Question72: When direct consoled to an AP, what is the command sequence to factory default the AP and re-bootstrap?

Question73: A customer has a remote AP deployment, where each remote AP has an IPSEC VPN tunnel with L2TP to the controller. 1 of the remote APs is stuck in the user table and hasn't yet transitioned to the AP active table in the controller. The customer suspects that the AP is not setting up its VPN connection successfully. Which of the following commands might be useful in troubleshooting this? (Choose three.)

Question74: The network administrator wishes to terminate the VPN encryption on the Aruba controller.
When writing a firewall rule to accomplish the task of automatically moving the VPN traffic for the wireless clients from a third party VPN concentrator to an Aruba controller, which action needs to be configured in the rule?

Question75: An AP is not communicating with the controller. Upon investigation you find that the AP is not discovering its controller through DNS. Instead, it received a DHCP reply with option 43 specifying the SIP server's IP address. How do you resolve this problem?

Question76: A network administrator wants to terminate VPN sessions on a local controller in the DMZ.
Which statement is true about the PEF-VPN license?

Question77: Which dual radio access point models support concurrent operations in the 2.4Ghz band as well as the 5Ghz band? (Choose three)

Question78: Which of the following statements is true?

Question79: When the controller is configured for Captive Portal and the user is only required to provide an email address for authentication, which option is configured in the GUI?

Question80: In an Aruba controller based system, the L3 mobility tunnel exists between the home agent and which other element?

Question81: In Visual RF, Floor plans can be imported in what format?

Question82: What can NOT be configured from the Aruba controller configuration wizards?

Question83: Which describe "roles" as used on Aruba Mobility Controllers? (Choose two)

Question84: A controller is provisioned in L3 Mode for Wireless Users. What must be configured on the controller to enable DHCP requests to an external DHCP server?

Question85: What cannot be configured from the Initial Configuration wizards?

Question86:
Referring to the diagram provided for this question, in which locations must you define the new data VLANs for wireless client traffic? (Choose two)

Question87: The reusable Aruba Controller wizards are accessible in what way?

Question88: Which of the following could be used to set a user's post-authentication role or VLAN association? (Choose two)

Question89: The corporation has deployed hundreds of RAP3 and all are working. A user has received a RAP3 from the IT department.
At his home he connects the Ethernet port to his DSL modem.
The corporate SSID is not advertises but an Instant SSID is. What could be the problem?

Question90: Which settings cannot be modified directly from a local controller?

Question91: How can a role be assigned to a user, connected to an untrusted port, on a controller?

Question92: When deploying Remote Mesh Portals, what is one of the purposes of the Mesh Private
VLAN?

Question93: By default, which CLI based remote access method is enabled on Aruba controllers?

Question94: A network administrator runs a 'show ap mesh topology' command on an Aruba controller.
Which of the following information would he be able to obtain?

Question95: Which netdestination aliases are built into the controller? (Choose three)

Question96: Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba
Controllers?

Question97: How is an AP redirected to a Local controller after DNS resolution returns the Master's IP address?

Question98: What additional fields must be configured in the configuration wizard if the controller role is selected as a local instead of a standalone controller?

Question99: When configuring split tunnel mode on a Remote AP (RAP) where is the routing function for the split tunnel defined?

Question100: What is the function of Station Handoff Assist, if enabled?

Question101: Other than a user role, what attribute can be applied to a user with a derivation rule?

Question102: Which of the following APs do not support dual radio operations?

Question103: When configuring Captive Portal, which protocols are supported when accessing the
Captive Portal? (Choose two.)

Question104: Which of the following is an Aruba Layer 3 redundancy mechanism?(Choose two)

Question105: A evaluation License is valid for a maximum of ________?

Question106: What are the different methods of configuring AP redundancy between 2 local controllers?

Question107:
Referring to the above screen capture, on which controller can you modify APs configuration to enable ARM?

Question108: A client device associates with an SSID provisioned with 802.1X authentication. The client is set for LEAP authentication. EAP termination (AAA Fastconnect) is enabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this?

Question109: Which of the statements below are TRUE regarding ARM's Spectrum Load Balancing feature? (Choose two)

Question110: Referring to the diagram provided for this question, an employee brought an unauthorized
AP from home and attached the LAN port to the cubicle Ethernet port. All Aruba APs and
AMs as well as the employee AP are in VLAN 170 and within RF range of each other.
No traffic from the wired or wireless network has passed through the AP yet, but the AP began wireless broadcasts.

How will the Aruba system first initially classify the employee's AP?

Question111: Which tunnel protocol is used between controllers to support L2 mobility in an Aruba environment?

Question112: If a Remote AP (RAP) is attempting to contact a controller that is behind a NAT device what protocol must be allowed through the NAT/Firewall?

Question113: A client has not purchased the RF Protect license. Without this license what is still supported, in the basic OS?

Question114: Which of the following configurations can accept a VLAN pool? (Choose two)

Question115: The following licenses have been installed on these controllers:
Master-1: 8 AP licenses
Local-2 : 8 AP licenses
Local-3 : 5 Evaluation AP Licenses
Local-4 : 10 Factory installed AP licenses
Central Licensing is enabled. What is the AP Pool capacity on the Central License Server?

Question116: Which of the following APs support remote AP operation?

Question117:
A user logged in with the Captive Portal settings shown in the above screen capture.
What does the user need to do to logout?

Question118: What Wizards can be used to create a new AP Group?

Question119: A network needs to implement L3 roaming. On the Master Controller, the administrator, enabled IP mobility, created a Domain and created the HAT table with all the IP addresses of the local controllers. He then enabled Mobility on the VAPs. The configuration was then saved.
L3 Mobility is still not working, what could be the cause? (Choose two)

Question120: Exhibit:

Based on the above screen capture for Interfering APs, what can you conclude?

Question121: What are two different methods of configuring AP redundancy between 2 local controllers?
(Choose two.)

Question122: When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

Question123: With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?

Question124: Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and
LMSIP? (Choose three)

Question125:
Referring to the diagram provided for this question, if the Aruba controller is configured to perform L3 switching, what will be the wireless client laptop default gateway?

Question126: Centralized licensing is not enabled in a network of 1 Master and 2 Local controllers, what should be the license count on all controllers to terminate 8 APs on each Local controller and support Local redundancy?

Question127: Which access point models support concurrent operations in both the "b/g" band as well as the "a" band?

Question128: A campus AP has been provisioned with a VAP in bridge forwarding and standard operation modes. Which of the following authentication types are supported? (Choose two)

Question129: What is the function of Band Steering?

Question130: What are aliases used for?

Question131: The permanent licenses on the controller will be deleted with the use of which command?

Question132:
The above diagram has one master and three local controllers. AP1 GRE terminates on controller Local 1. All controllers are configured with the wireless user VLAN 201. A wireless user associates with AP 1. Only L2 mobility is enabled.
Which elements will know about this association?

Question133: Exhibit:

Referring to the diagram provided for this question, representing an office wireless LAN deployment, there will be approximately 250 users in the offices section of the building. All
Switches are setup as L3 routers.
According to Aruba best practice, which network device is the best choice for the wireless clients' default gateway?

Question134: In a master-local controller scenario, where is the mobility domain defined?

Question135: Aruba Client Match does NOT use which of the following parameters to determine the best
AP for a client connection?

Question136:
In the above screen capture, the administrator notes that most of the configuration options are grayed out and have no action.
What is the cause of the problem?

Question137:

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.
If machine authentication passes and user authentication fails, which role will be assigned?

Question138: In a campus environment, where are encryption keys sent or stored when users roam between tunneled mode APs on the same controller using 802.1X?

Question139:

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.
If machine authentication fails and user authentication passes, which role will be assigned?

Question140: In tunneled node configuration the Aruba 3500 mobility access switch acts as a:

Question141: ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user host 10.1.1.1 any deny
user any any permit
Referring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choose two)

Question142: A port on a controller has been configured as untrusted. No wired access AAA profile or
Global AAA profile is configured. When a user connects to that port which of the following statements is true?

Question143: Which of the following needs to be done prior to attempting to use the GUI quick setup of a factory defaulted Aruba S3500 Mobility Access Switch?

Question144: The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).
Which is the default use of this statement in an Aruba controller configuration?

Question145: With CPSec disabled, which tunnel protocol is used between APs and Controllers in an
Aruba environment?

Question146: What is the purpose of Mesh Clusters?

Question147: What are the types of user derivation rules that can be applied to a user? (Choose two)

Question148: Which of the following are valid RAP operating modes?

Question149: Which of the following licenses can be included in the licensing pool for centralized licensing? (Choose three)

Question150: A Valid client laptop is attempting to associate to a Rogue AP. The AM in proximity creates a Tarpit. What are the two mechanisms that the AM can utilize to Tarpit? (Choose two)

Question151: Which is an Aruba specific DSA that can be used in a user derivation rule?

Question152: Which two factors are important when choosing a controller model to support tunneled node?

Question153: Which of these are NOT a client attribute that can be configured in user derivation rules?

Question154:
Referring to the diagram provided for this question, an employee brought an unauthorized
AP from home and attached the LAN port to the cubicle Ethernet port. All Aruba APs and
AMs as well as the employee AP are in VLAN 80 and within RF range of each other. No traffic from the wired or wireless network has passed through the unauthorized AP yet, but the AP began wireless broadcasts.
How will the Aruba system initially classify the employee's non-Aruba AP?

Question155: Which command will show all client association history?

Question156: Exhibit:

In the diagram provided for this question, four buildings are identified on a college campus.
Most of the wireless LAN traffic will be from students accessing the internet.
According to Aruba best practices, which building is the best location to install the Aruba mobility controller?

Question157: Which parameter(s) does a Master controller use to determine where a provisioned AP should terminate its GRE tunnel?

Question158:
View the Server group screen shot above.
A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and
NY offices. This Server Group is applied for 802.1x authentication at both locations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no
Radius synchronization and both servers are reachable. What happens when the user attempts to authenticate?

Question159: When does a RAP's backup SSID begin broadcasting?

Question160: A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which of the following characteristics?

Question161: How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHz radios of Aruba APs?

Question162: (group8) #show ap active
Active AP Table
---------------
Name Group IP Address 11g Clients 11g Ch/EIRP/MaxEIRP 11a Clients 11a
Ch/EIRP/MaxEIRP
---- ----- ---------- --------- ------------------- ----------- -------------------
AP1 building1 10.1.80.150 0 AM 0 AM
AP2 building1 10.1.80.151 0 AM 0 AM
A user called technical support because they cannot see any of their APs in building one.
You perform the "show" command as illustrated above.
What can you conclude about these two APs from this output?

Question163: An AP resolved DNS and found the master controller. How will this AP be redirected to a
Local controller?

Question164: Where should mobility domains be enabled in a network with 1 master, 1 backup master and 5 local controllers?

Question165: When are the system-defined default roles added to the configuration on the controller?

Question166: As an admin/root user, what other type of role-based management users can be created on
Aruba controllers?

Question167: Which match condition can be used by a server derivation rule? (Choose two)

Question168: A client Roams from one Local controller-1 to another Local controller-2.
The controllers are in different subnets and L3 Mobility is enabled.
How is the client traffic sent back to Local-controller-1?

Question169: What is true about Global Session ACL? (Choose two)

Question170: A user connected to a Captive Portal VAP successfully. When the user opens their browser and tries to access their homepage, they get redirected as expected to another URL on the
Aruba Controller. However, they see an error message that web authentication has been disabled. What might be a cause of this?

Question171: With CPSec enabled, which tunnel protocol is used between APs and Controllers in an
Aruba environment?

Question172: The Aruba controller's Command Line Interface can be accessed from WITHIN the browser based Web User Interface using which method?

Question173: What does Aruba's RF self-healing require to operate?

Question174: How many Aruba controllers can be added to a single mobility domain?

Question175: Which of the following commands is most useful in showing the traffic of an individual user?

Question176: What is the best practice regarding licensing for a backup master to support Master
Redundancy in a network without centralized licensing?

Question177: Which feature must be enabled for self-healing to be performed?

Question178: Which statement is true about the Content Security License?

Question179: A customer has configured a 3000 controller with the following commands:
Vlan 55
Vlan 56
Vlan 57
Interface gigabitethernet 1/0
switchport mode trunk
switchport trunk native vlan 55
switchport trunk allowed vlan 55-57
Which of the following sentences best describes this port?

Question180: What are the PEF-NG license limits based on?

Question181: An Aruba controller can be accessed with which CLI based remote access methods?
(Choose two)

Question182: Which of the following charts are available for selection in Spectrum Dashboard for AP
125?

Question183: Which of the following describes a Remote AP provisioned in "Split-Tunnel" Forwarding mode?

Question184: What can an AM do that an AP cannot do?

Question185: When configuring a server group containing 3 servers, a customer Chooses 'fail through mode'. What other configuration option has to be enabled on the controller for this to work with 802.1x authentication?

Question186: An Aruba based network has a Master and four local controllers deployed. But one of the locals, a new installation, is not seen by the Master. What might be wrong? (Choose two.)

Question187: Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choose two.)

Question188: An Aruba controller is configured with the correct IP address and gateway information and is connected to the corporate LAN via a core layer 2 switch. Control Plane Security is not enabled on the network. An access point is provisioned with AP name and group and connected to a different Layer 2 switch on the corporate LAN that has IP connectivity to the core layer 2 switch. The AP powers on and layer 2 connects to the network, but the wireless radios do not power on.
Which could cause this condition? (Choose two.)

Question189: Which command, when executed on a master controller, will show the APs connected to all controllers?

Question190: Which method is NOT supported to provision an Aruba campus AP?

Question191:

View the Server group and User Roles screen shots above.
A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of "employee". The user was placed in the guest Role. What statements below are correct? (Choose two.)

Question192: With Fast-Failover disabled, to which IP address should the Aruba AP terminate its GRE tunnel for layer 2 controller redundancy to work and to support failover of access points?

Question193: Which settings cannot be modified directly from a local controller?

Question194: Refer to the following configuration segment for this item.
netdestination "internal"
no invert
network 172.16.43.0 255.255.255.0 position 1
range 172.16.11.0 172.16.11.16 position 2
!
ip access-list session "My-Policy"
alias "user" alias "internal" service_any permit queue low
!
A user frame is evaluated against this firewall policy with the following attributes:
Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80
Referring to the above file segment, how will the frame be handled by this firewall policy?

Question195: A Remote AP provisioned in "Split-Tunnel" Forwarding mode has which characteristic?

Question196: An Aruba 650 controller is functioning as a standby Master. How many APs can it control while in standby mode?

Question197: Which netdestination aliases are built into the controller? (Choose three)

Question198: Which of the following will occur if a master license server fails with no standby server present? (Choose two)

Question199: What is true about client match? (Choose two)

Question200: Which set of configuration commands are needed to make VLAN 10 the management
VLAN?

Question201: With Visual RF location tracking, show location history can be set for a maximum of?

Question202:
Referring to the above screen capture, if an administrator desires to change a specific AP into a Spectrum Monitor without assigning the AP to a new group, which menus could be used?

Question203: As a user moves through the authentication process, which of the following is not used in a derivation rule?

Question204:

The screen captures above show the 802.1X authentication profile and AAA profile settings for a VAP.
If machine authentication fails and user authentication fails, which role will be assigned?

Question205: Masters communicate configuration information with locals using which tunnel type?

Question206: Fast Failover has been implemented between Local 1 and Local 2 separated by Routers.
During testing Local1 was disabled and all Campus APs backed up to Local 2 flawlessly.
But the RAPs did not, they all failed.
What could be the cause?

Question207: How does the ARM Band Steering feature encourage 5GHz capable clients to move/connect to the 5GHz radios of Aruba APs?

Question208: The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (src-nat).
Which is a use of this statement in an Aruba configuration?

Question209: (group8) #show ap arm history ap-name AP1
Interface :wifi0
ARM History
-----------
Time of Change Old Channel New Channel Old Power New Power Reason
-------------- ----------- ----------- --------- --------- ------
2015-1-28 07:58:53 157+ 149+ 21 21 I
2015-1-28 07:52:06 149+ 157+ 21 21 M
2015-1-28 07:16:59 157+ 149+ 21 21 I
Interface :wifi1
ARM History
-----------
Time of Change Old Channel New Channel Old Power New Power Reason
-------------- ----------- ----------- --------- --------- ------
2 015-1-28 08:52:53 6 1 21 21 I
Referring to the output above. What can you conclude about AP1?

Question210: A Remote AP provisioned with an SSID in the operational mode always has which one of the following characteristics?

Question211: When APs boot up, in which order do they Select a controller?

Question212: Referring to the diagram provided for this question, an employee brought an unauthorized
AP from home, but did not attach it to the LAN infrastructure. The APs are in the VLANs as shown in the diagram. Only AP1 is within RF range of the employee AP.

By default, how will the Aruba system classify the employee's AP?

Question213: An Aruba Controller is configured with VLAN 1,5, 200, and 4095. All VLANs have IP addresses assigned. Which is the default management VLAN on the Aruba controller?

Question214: An administrator is setting up a factory default controller. No new AP groups were created.
When adding a WLAN SSID in the Campus WLAN wizard what AP group is available?

Question215:
In the above diagram, the system shows two Aruba access points.
Which VLANs must be configured on trunk link D between the router and Aruba controller to support wireless users when the controller is provisioned for L2 operations?

Question216: What type of license is required on the Aruba S3500 for tunneled node operation?

Question217: By default, how long will an AP scan a single channel when ARM is enabled?

Question218:
In the above diagram, the system shows two Aruba access points and a wired user.
Which VLAN(s) do NOT need to be configured on link A between the L2 switch and router to support the wireless users?

Question219: ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user any any permit
host 10.1.1.1 host 10.2.2.2 any deny
A user sends a frame with the following attributes:
Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25
Based on the above Mobility Controller configuration file segment, what will this policy do with the user frame?

Question220:
As illustrated in the above diagram, a company has two campus locations and a building headquarters all located in different cities.
Following best practices, what would be the best way to construct mobility domains for the company?

Question221: Which of the following functions cannot be done in the offline Visual RF plan?

Question222: An AP 105 was converted into a RAP. The RAP can authenticate its IPSec tunnel to a controller using which of the following methods? (Choose two.)

Question223: Centralized licensing is not in use on an Aruba based network which has a Master and three local controllers. No APs terminate on the Master controller. Roles and Firewall policies need to be created and applied, hence PEF-NG license is required.
On which controller should the license be installed?

Question224: What settings need to be changed on a factory default AP in order for it to use ADP to discover the Aruba Controller?

Question225:
Refer to the above screen capture. By default, which controller's internal database will be used for user authentication?

Question226: When configuring ports in the Controller wizard, which of the following are NOT configuration options? (Choose two)

Question227: A wired device is connected to an untrusted port on a controller. How can a role be assigned to the device?

Question228: A customer forgot all passwords for a controller. What method could you use to reset the passwords?

Question229: When an Aruba 6000 controller has two M3 modules installed, for which uses may the modules be used?

Question230:
Referring to the above screen capture, on which Controller can you create a VLAN?