EMT Practice Test

1. Question Content...

---

Question1: An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they are assigned an initial role and routed to a Captive Portal page.
What must the administrator do to enable desktop usage based on the user's role assignment?

Question2: An administrator wants to add a new folder in AirWave. Where would the administrator perform this action?

Question3: An administrator mistakenly configures the wrong VLAN setting on a managed controller's interface. This causes the controller to lose management access to the Mobility Master (MM).
Which mechanism will then attempt to restore the previous working configuration on the managed controller?

Question4: An administrator makes a configuration change on a Mobility Master (MM) that causes a Managed Controller to lose connectivity with the MM. The MC attempts auto roll-back, but this fails.
How should the administrator recover from this problem?

Question5: Which ArubaOS CLI command can an administrator execute to determine if AP load balancing is enabled in a cluster?

Question6: An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to establish sessions to the data zone cluster.
What must the administrator do to solve this problem?

Question7: Refer to the exhibit.

An administrator configures a policy for an AP Group. Port 3 of a RAP is a trunk that connects to a switch at a branch office. VLAN 1 is untagged and VLANs 10 (for data) and 11 (for voice) are tagged. The administrator applies an ACL inbound on Port 3 of the RAP.
How does this configuration affect traffic on Port 3?

Question8: An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile?

Question9: Refer to the exhibit.

An administrator wants to centralize administrative access to the Aruba Mobility Controllers (MC) and Mobility Master (MM). ClearPass is set up and the preferred authentication protocol is TACACS+. Where should the administrator perform this configuration in the MM hierarchy shown in the exhibit?

Question10: An administrator defines credentials in the Mobility Master> Configuration> System section to configure a Mobility Master (MM). The administrator then accesses AirWave and adds the MM in Monitor-Only mode.
The administrator expects AirWave to automatically discover the Aruba Virtual Mobility Controllers (VMCs) also managed by the MM, but does not see these under APs/Devices> New section in AirWave.
What should the administrator do to solve this problem?

Question11: An administrator manages an Aruba wireless network. ClearPass is used to centralize AAA functions. The administrator wants to implement server role derivation.
Which information will the ClearPass server return in regards to the user role assignment?

Question12: Refer to the exhibit.

An administrator configures a cluster with only the members shown in the exhibit. AP load balancing is enabled. There are no other cluster parameters configured. What occurs when a cluster member experiences a failure?

Question13: Which methods can be used to configure RAP redundancy when connected to two redundant Aruba Mobility Controllers (MCs) in the DMZ? (Select two.)

Question14: An administrator wants to determine if an IPSec session is established. In order to tunnel and protect the GRE data traffic between a RAP and an Aruba Mobility Controller (MC). Which MC command provides this information?

Question15: An administrator needs to support Unified Communications and Collaboration (UCC) in a company's network. The network infrastructure requires the OpenFlow protocol to support SDN-capable applications.
Which controller topology meets these requirements?

Question16: Refer to the exhibit.

Controllers are configured in a cluster as shown in the exhibit. These are the network details.
-A Mobility Master (MM) managers the cluster.
-The cluster contains two controllers: C1 and C2.
-AP1 and AP2 use C1 as their Active AP Anchor Controller (A-AAC), with C2 as their Standby AAC (S- AAC).
-AP3 and AP4 use C2 as their A-AAC with, C1 as their S-AAC.
User1 establishes a wireless connection via AP1, where the Active User Controller (U-UAC) assigned is C1, with C2 as the standby. What happens when User1 roams the wireless network and eventually their session is handled by AP3?

Question17: An administrator wants to change the default roles for the pre- and post-authentication user roles for a WLAN on a Mobility Master (MM). The controllers in the network perform all authentication.
Under the Managed Network hierarchy, where can the administrator assign these roles?

Question18: An administrator wants to implement a Live Upgrade (in-service upgrade) of a cluster in an Aruba wireless solution. Which ArubaOS feature does the Mobility Master (MM) use to ensure RF redundancy, so that when one or more APs are rebooted there is no loss of wireless coverage for users?

Question19: An administrator has ArubaOS-Switches that support tunneled node. The administrator wants to tunnel all user traffic from the Ethernet ports on the switches, and have the controllers authenticate the user traffic and apply the appropriate user role.
Which implementation meets these requirements?

Question20: An administrator supports a RAP to a branch office. Employees at the branch office connect to an employee SSID that allows for split tunneling of the employee traffic. The RAP initially connects to the corporate office controller, but later loses connectivity to it.
Which operating mode should the administrator configure for a secondary SSID to be advertised during the loss of connectivity?

Question21: An administrator purchases a pair of Mobility Masters (MM) and wants to deploy 16 Virtual Mobility Controllers (VMCs). What is the minimum number of clusters that the administrator needs to implement to support the number of VMCs?

Question22: An administrator implements a standalone controller that runs ArubaOS 8.x. Which feature should the administrator configure to optimize the RF operation for the company's WLAN?

Question23: On the Aruba Mobility Master (MM), when is an AP configured to act as Mesh Portal or Mesh Point?

Question24: Which IEEE standard should user devices support to implement Fast BSS Transition when a network implements wireless roaming (mobility)?

Question25: A cluster has two Aruba 7240 Mobility Controllers (MCs) and two Aruba 7220 Mobility Controllers (MCs).
How is the cluster leader elected if all controllers have the default priority?

Question26: Where on the Mobility Master (MM) can an administrator configure the VIA connection profile?

Question27: An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.
What should the administrator have done before running the network scan?

Question28: Refer to the exhibit.

An administrator examines the configuration of an AP from apboot mode shown in the exhibit.
What can the administrator determine from the configuration?

Question29: An administrator implements machine authentication in an 802.1X profile. Which user role will be assigned to the user's session if machine authentication fails, but the 802.1X user authentication passes for a user who connects?

Question30: What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture?

Question31: An administrator has multiple AAA servers, some Microsoft RADIUS and some ClearPass. When 802.1X users authenticate, the administrator wants to ensure that the authentication requests are handled by the appropriate AAA server. Users enter their username in this format: username@domain_name.
What administrator implement to ensure the correct AAA server processes the authentication request?

Question32: An administrator deploys Aruba Mobility Controller 7005s to a company's branch offices. The administrator wants to disable the console port to prevent unauthorized access to the controllers.
Which controller command should the administrator use to implement this policy?

Question33: When they operate in a cluster, Aruba APs obtain AP Group configuration information form which device?

Question34: Refer to the exhibit.

An administrator implements AP licensing on a Mobility Master (MM).
Each campus is responsible to purchase its own AP licenses.

There are 900 AP licenses deployed in the global pool.

There are three dedicated pools.

From the global pool, 300 AP licenses are assigned to each dedicated pool.

Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses in CampusC are allocated.
What can the administrator do to add capacity for CampusA in alignment with campus policies?

Question35: An administrator supports a network that contains ArubaOS-Switches and Mobility Controllers (MCs).
Restrictive MC firewall policies, control wireless access. The administrator wants to implement a feature to apply the same MC firewall policies to users connected to the Ethernet switch ports.
Which ArubaOS-Switch feature provides this capability?

Question36: Which Aruba AP mode constantly scans the radio environment to gather IDS and RF information?

Question37: An administrator configures Unified Communications and Collaboration (UCC) heuristics mode on an Aruba Mobility Master (MM). What should be modified in order to send items such as VoIP sessions and monitored information about adds, updates, deletions, and periodic snapshots of those VoIP sessions on the MM or the Aruba Mobility Controller (MC)?

Question38: An administrator needs to authenticate users connected to an ArubaOS-Switch. The Aruba Mobility Controller (MC) authenticates the user and assigns user roles to wired users.
Which mode should the administrator configure on the MC?

Question39: Which protocol communicates RF neighborhood information to an Aruba Mobility Master (MM) for use by AirMatch?

Question40: An administrator creates a cluster of four Mobility Controllers (MCs). When the administrator verifies the cluster operation, the administrator notices that it is operating as an L3-connected cluster.
What should the administrator do to ensure that the cluster operates as an L2-connected cluster? (Choose two.)

Question41: An administrator deploys an Aruba wireless solution comprised of:
-a pair of Mobility Masters (MMs)
-multiple Mobility Controllers (MCs) and virtual Mobility Controllers (VMCs)
-an AirWave server
-a ClearPass server
The Aruba Mobility solution runs ArubaOS 8.X.
Which component in this environment globally defines and deploys VLANs for wireless users?

Question42: Refer to the exhibit.

An administrator sets up a cluster of Aruba Mobility Controllers (MCs). What can the administrator determine about the cluster from the command output shown in the exhibit?

Question43: An administrator configures a network scan set in AirWare to scan a subnet to discover new switches. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.
To prevent this problem in the future, what should the administrator complete prior to running the network scan?

Question44: An administrator wants to implement 802.1X authentication on Ethernet ports on branch office controllers.
What must the administrator do to implement this policy?

Question45: An administrator moves an AP from one campus to another. However, at the second campus, the moved AP does not connect to a controller and download an AP Group configuration.
Which process should the administrator perform to reset the AP to the initial state?

Question46: An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.
Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

Question47: In a cluster-controller environment, which Aruba component in a network builds a cache table of mDNS records that can be used to help user devices access Apple Bonjour services?

Question48: An administrator creates service-based policies for AirGroup on the Mobility Master (MM). The administrator can define location-based policy limits based on which information?

Question49: An administrator inherits an Aruba Mobility Controller (MC) that has an unknown username and password.
Which credentials should the administrator enter to reset the administrative access?

Question50: An administrator currently manages an L2 cluster with Aruba Mobility Controllers (MCs) that run ArubaOS
8.x. What happens when the administrator enables AP load balancing?

Question51: An administrator implements a per-port tunneled node configuration for an Aruba Mobility Controller (MC) that runs ArubaOS 8.x. The controller performs both MAC and 802.1X authentication.
What must the administrator specify on the controller to allow for 802.1X authentication to succeed?

Question52: An administrator configures two Mobility Masters (MMs) for redundancy and database synchronization.
Which protocol transports database information between the two MMs?

Question53: Refer to the exhibits.
Exhibit 1: WLAN VAP configuration

Exhibit 2: Microsoft NPS server configuration

Exhibit 3: Server group configuration for the VAP.

An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.
What should the administrator do to solve this problem?

Question54: An administrator creates a mesh cluster profile and has defined the RF band and cluster name. What else must the administrator configure in the profile?

Question55: An administrator configures AirGroup policies to define which Apple services are visible and available to wireless users in a campus WLAN. However, the policies are not being enforced.
Where must the administrator enable the AirGroup functionality on the Mobility Master (MM) so that the policies will be in effect?

Question56: An administrator creates new pre-and post-authentication roles for a new WLAN. For which profile should the administrator assign these new roles under the Managed Network section?

Question57: Refer to the exhibit. What can the administrator determine from the configuration shown in the exhibit?

Question58: A Microsoft RADIUS server is used to centralize AAA functions by a company. Upon a successful authentication lookup performed by an Aruba Mobility Controller (MC), the administrator wants to have the RADIUS server pass back the correct post-authentication role name that the controller should apply to the user's traffic.
Which additional task must the administrator perform for the controller's configuration to implement this process?

Question59: Which VPN component must be configured on the Mobility Master (MM) to allow a RAP to use the built-in certificate to successfully connect to a Mobility Controller (MC)?

Question60: Which configuration command needs to be executed on an Aruba Mobility Controller (MC) to forward AP statistical data to an AirWave Management Platform (AMP)?

Question61: A guest establishes an authenticated wireless session to an Aruba Mobility Controller (MC). The controller uses a ClearPass server for all AAA functions.
Which AAA component disconnects the user when the guest exceeds their allowed duration?

Question62: An administrator needs to authenticate users connected to an ArubaOS-Switch where the switch authenticates the user, assign the firewall policies to the user, and processes some of the users' traffic.
Which connection method should the administrator configure on the ArubaOS-Switch?

Question63: An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.
Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

Question64: What must an administrator configure in order for the ClearPass server to execute a RADIUS Change of Authorization (CoA) to Aruba Mobility Controllers (MCs) in a cluster?

Question65: What are the responsibilities of a cluster leader in a cluster of Aruba Mobility Controllers (MCs)? (Choose two.)

Question66: An administrator implements machine authentication in an 802.1X profile. Which user role will be assigned to the user's session if machine authentication passes, but the 802.1X user authentication fails for a user who connects?

Question67: An administrator stages an AP and re-provisions it as a RAP from the Mobility Master (MM). When re- provisioning the RAP, the administrator must enter a user's credentials. What is the purpose of these credentials?

Question68: A branch office location has two buildings: an office and a small warehouse that are within 20 meters of each other. A RAP at the branch office provides connectivity to the corporate office network. This RAP is also configured as a Remote Mesh Portal (RMP).
Which solution should the administrator implement to provide connectivity between the office and small warehouse buildings at the branch office location?

Question69: An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller's local database. The company purchases Android tablets to use with an inventory tracking system The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.
Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

Question70: An administrator adds local administrative accounts to manage the Aruba Mobility Controllers (MCs).
Which role should the administrator assign to an administrator who should have the same privileges as the default admin account?

Question71: An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.
What is true about the implementation of MultiZones in this scenario?

Question72: Refer to the exhibit.

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session?

Question73: Which network components are tracked by Aruba Clarity? (Choose two.)

Question74: Which device can terminate to a cluster of Aruba Mobility Controllers (MCs) that run ArubaOS.8.x?

Question75: Refer to the exhibit.

Once connected to a WLAN, a user cannot reliably access resources in a company's network. Based on the output shown in the exhibit, what can be determined about the user's connection?

Question76: An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

Question77: An administrator moves an AP from Campus 1 to Campus 2. At the Campus 2, the moved AP does not connect to a controller and download an AP Group configuration.
Which process should the administrator perform to reset the AP back to its initial default state?

Question78: Refer to the exhibit.

An administrator implements the MultiZone feature. The administrator sets up five zones as shown in the exhibit.
-Zone A has six controllers that form a cluster.
-Zone B has three controllers that from a cluster.
-Zones C, D, and E have a single standalone controller each.
A total of 13 VAPs are created across the five zones. A zone needs to accept RAP connections form branch offices. All zones have the same AP Group name. One of the zones will not accept connections from the MultiZone APs.
Which could be a cause of this problem?

Question79: An administrator wants to simulate network traffic and analyze results in an Aruba wireless network to test components such as WPA-2, DHCP, and other protocols. Which Aruba solution implements these functions?

Question80: An administrator implements two redundant Aruba Mobility Masters (MMs). Which protocol should the administrator use to detect a failure in a single subnet?

Question81: An administrator implements clustering on Aruba Mobility Controllers (MCs) that run ArubaOS 8.x. An AP is connected to a cluster member. The administrator accidentally powers off the AP.
How does the AP determine that it should failover to an alternate controller in the cluster?

Question82: An administrator configures the MultiZone feature for a company network, where a mobility cluster is the primary zone and a standalone controller in the company's DMZ represents a secondary data zone. The administrator configures two AP Groups and respective VAPs for the zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish connections to both zones, the administrator notices that no data connections are established to the data zone.
What must the administrator do to fix this problem?

Question83: Which Aruba Mobility Controller (MC) command should an administrator execute to determine whether an ArubaOS-Switch successfully registers to an MC?

Question84: Refer to the exhibit.

The administrator expects the AP to connect to a cluster, but the AP fails to connect. The administrator examines the configuration of an AP from apboot mode shown in the exhibit. What can the administrator determine about the configuration of the AP?

Question85: An administrator has a standalone controller that runs ArubaOS 8.x software and wants to upgrade it to a newer release. The upgrade will be performed from the front panel of the physical controller. The administrator places the new software in the root directory of a USB drive. On the controller's LCD panel, no image is found.
What is the cause of this problem?

Question86: When an administrator manually adds a Mobility Controller (MC) on the Mobility Master (MM) hierarchy, which parameters must be specified? (Select three.)

Question87: Which protocol is used between Aruba Mobility Controllers (MC) and ArubaOS-Switches to negotiate tunneled node?

Question88: An administrator supports a group of engineers that commonly troubleshoot company problems from any location without wired connectivity. They need secure connectivity to a corporate web-based portal with their Android smartphones. Which solution should the administrator recommend to solve the engineer's connectivity problem?

Question89: An administrator deploys an AP at a branch office. The branch office has a private WAN circuit that provides connectivity to a corporate office controller. An Ethernet port on the AP is connected to a network storage device that contains sensitive information. The administrator is concerned about sending this traffic in clear-text across the private WAN circuit.
What can the administrator do to prevent this problem?

Question90: Refer to the exhibit.

An administrator configures a split-tunnel policy to be used by RAPs at branch offices, Under the Configuration section on the Mobility master (MM) shown in the exhibit, where should the administrator configure the split-tunnel mode so that it can be deployed to the RAPs?

Question91: An administrator migrates Aruba Mobility Controllers (MCs) from ArubaOS.6x to ArubaOS.8. x. In the 6.x.
configuration, the administrator configures GRE tunnels on the local controllers to a controller in the DMZ to keep guest traffic off the corporate network. The problem with the solution is that is creates suboptimal routing paths.
Which feature should the administrator implement to solve this problem?

Question92: An administrator needs to apply a patch to an Aruba environment to implement improvements for AirMatch. What is the Aruba recommended approach for this process without a reboot?

Question93: An administrator suspects that the network drops frames between a wireless client and an Aruba Mobility Controller (MC). The administrator wants to examine the frames between the AP and the controller to determine if any frames are missing.
Which solution allows the administrator to use a protocol analyzer to examine the contents of the 802.11 frames between the AP and controller?

Question94: What is true about clustering and AP connections to cluster members?

Question95: An administrator uses a ClearPass server to perform user authentication and download the role configuration that should be applied to the user's session. The server is associated to an AAA profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the default role.
What must the administrator do to ensure that the role is downloaded and used?

Question96: In the WebUI of an Aruba Mobility Controller (MC), where can an administrator generate a tech support file that the Aruba Technical Support team can use to help customers?