EMT Practice Test

1. Question Content...

---

Question1: An administrator makes a configuration change on a Mobility Master (MM) that causes a Managed Controller to lose connectivity with the MM. The MC attempts auto roll-back, but this fails.
How should the administrator recover from this problem?

Question2: Which Aruba Unified Communications and Collaboration (UCC) deployment mode should be used when UCC is disabled on the Mobility Controllers (MCs)?

Question3: Which ArubaOS CLI command can an administrator execute to determine if AP load balancing is enabled in a cluster?

Question4: An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.
Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

Question5: An administrator implements machine authentication in an 802.1X profile. Which user role will be assigned to the user's session if machine authentication passes, but the 802.1X user authentication fails for a user who connects?

Question6: An administrator uses a ClearPass server to perform user authentication and download the role configuration that should be applied to the user's session. The server is associated to an AAA profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the default role.
What must the administrator do to ensure that the role is downloaded and used?

Question7: An administrator needs to apply a patch to an Aruba environment to implement improvements for AirMatch.
What is the Aruba recommended approach for this process without a reboot?

Question8: An administrator configures Unified Communications and Collaboration (UCC) heuristics mode on an Aruba Mobility Master (MM). What should be modified in order to send items such as VoIP sessions and monitored information about adds, updates, deletions, and periodic snapshots of those VoIP sessions on the MM or the Aruba Mobility Controller (MC)?

Question9: An administrator supports a RAP at a branch office. A user's device that is attached to the Ethernet port is assigned an 802.1X AAA policy and is configured for tunneled node.
How is the user's traffic transmitted to the corporate office?

Question10: An administrator creates service-based policies for AirGroup on the Mobility Master (MM). The administrator can define location-based policy limits based on which information?

Question11: An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller's local database. The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.
Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

Question12: An administrator defines credentials in the Mobility Master> Configuration> System section to configure a Mobility Master (MM). The administrator then accesses AirWave and adds the MM in Monitor-Only mode.
The administrator expects AirWave to automatically discover the Aruba Virtual Mobility Controllers (VMCs) also managed by the MM, but does not see these under APs/Devices> New section in AirWave.
What should the administrator do to solve this problem?

Question13: Refer to the exhibit.

An administrator supports a RAP at a branch office shown in the exhibit. The company has one Mobility Controller (MC) at the Primary DMZ site and one at the Secondary DMZ site. The RAP is configured to connect to only the MC at the Primary DMZ site. A network outage with the ISP at the Primary DMZ site causes the RAP to reboot. Upon reboot, the RAP cannot build a tunnel to the Secondary DMZ site MC because the administrator forgot to add the Second LMS IP address to the AP Group configuration. Once the RAP can successfully connect, the administrator can add the Secondary DMZ MC as a backup LMS to fix the AP Group.
What should the administrator implement to allow the RAP to connect to the MC at the Secondary DMZ site while the outage at the primary site persists?

Question14: An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.
Given this scenario, what is true about the implementation of Multizone?

Question15: An administrator creates a user role that department A in a company uses. Various other roles exist for other departments. All employees connect to the same ESSID, which authenticates to an external AAA server. How should the administrator configure to assign the appropriate roles to the employees?

Question16: What must an administrator configure in order for the ClearPass server to execute a RADIUS Change of Authorization (CoA) to Aruba Mobility Controllers (MCs) in a cluster?

Question17: On the Aruba Mobility Master (MM), when is an AP configured to act as Mesh Portal or Mesh Point?

Question18: An administrator configures two Mobility Masters (MMs) for redundancy and database synchronization.
Which protocol transports database information between the two MMs?

Question19: Refer to the exhibit.

Which controller connection with the Aruba as the cluster leader?

Question20: An AP connects to a controller. Then, the AP loses power and reboots.
Which parameters will the AP remember and use from its initial connection? (Select two.)

Question21: An administrator configures an ArubaOS switch for per-user tunneled node. Which protocol does the switch use to communicate with the Aruba Mobility Controller (MC)?

Question22: Which device can terminate to a cluster of Aruba Mobility Controllers (MCs) that run ArubaOS.8.x?

Question23: IEEE 802.11r relies on which technology to reduce re-authentication delays when clients roam between APs?

Question24: An administrator wants to implement the MultiZone feature in a company's network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company's DMZ.
What is true about the implementation of MultiZones in this scenario?

Question25: An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access.
However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.
What should the administrator have done before running the network scan?

Question26: Which protocol do Mobility Controllers (MCs) use to detect a failed Mobility Master (MM)?

Question27: Refer to the exhibit.

An administrator configures policies to allow RAPs to connect to the corporate office and remote users to access resources. Which function does the VPN address pool serve in this situation?

Question28: An administrator mistakenly configures the wrong VLAN setting on a managed controller's interface. This causes the controller to lose management access to the Mobility Master (MM).
Which mechanism will then attempt to restore the previous working configuration on the managed controller?

Question29: An administrator supports a cluster of four Aruba Mobility Controllers (MCs) with management addresses of
10.1.100.101, 10.1.100.102, 10.1.100.103, and 10.1.202.181. The administrator can an administrator this cluster, reboots it and accesses apboot mode. The administrator executes the printenv command. Which AP parameter contains the IP addresses of the cluster members that the AP should use to connect to the cluster?

Question30: An administrator supports a network that contains ArubaOS-Switches and Mobility Controllers (MCs).
Restrictive MC firewall policies, control wireless access. The administrator wants to implement a feature to apply the same MC firewall policies to users connected to the Ethernet switch ports.
Which ArubaOS-Switch feature provides this capability?

Question31: An administrator needs to support Unified Communications and Collaboration (UCC) in a company's network. The network infrastructure requires the OpenFlow protocol to support SDN-capable applications.
Which controller topology meets these requirements?

Question32: An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic.
But, when users connect with their wired desktops, they have full access to corporate resources.
What must the administrator do to restrict desktop usage based on the users' role assignment?

Question33: Where on the Mobility Master (MM) can an administrator configure the VIA connection profile?

Question34: A customer uses an SIP application that is not supported by Aruba United Communications and Collaboration (UCC). Which voice deployment mode should the administrator implement on Aruba Mobility Controllers (MCs) to support this application?

Question35: An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.
Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

Question36: An administrator at Campus A manages Aruba Mobility Controllers (MCs). The administrator defines a server group that includes a local ClearPass server and a remote Microsoft RADIUS server. The ClearPass server has the credentials for users at Campus A and the Microsoft RADIUS server has the credentials for users at Campus B. Users at Campus A successfully authenticate and connect to the Campus A wireless network.
However, when users from Campus B visit Campus A they fail authentication.
What can the administrator do to solve this problem?

Question37: In the WebUI of an Aruba Mobility Controller (MC), where recommended approach for this process generate a tech support file that the Aruba Technical Support team can use to help customers?

Question38: Refer to the exhibit.

An administrator implements the MultiZone feature. The administrator sets up five zones as shown in the exhibit.
-Zone A has six controllers that form a cluster.
-Zone B has three controllers that from a cluster.
-Zones C, D, and E have a single standalone controller each.
A total of 13 VAPs are created across the five zones. A zone needs to accept RAP connections form branch offices. All zones have the same AP Group name. One of the zones will not accept connections from the MultiZone APs.
Which could be a cause of this problem?

Question39: A branch office location has two buildings: an office and a small warehouse that are within 20 meters of each other. A RAP at the branch office provides connectivity to the corporate office network. This RAP is also configured as a Remote Mesh Portal (RMP).
Which solution should the administrator implement to provide connectivity between the office and small warehouse buildings at the branch office location?

Question40: An administrator configures a network scan set in AirWare to scan a subnet to discover new switches. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.
To prevent this problem in the future, what should the administrator complete prior to running the network scan?

Question41: An administrator enables AP load balancing for a cluster of Mobility Controllers (MCs). APs connected to the cluster have an LMS IP address configured in their AP Group configuration. No other parameters are changed in the cluster.
If the two load AP thresholds are reached, what occurs?

Question42: An administrator has a cluster of Aruba Mobility Controllers (MCs). The administrator wants to manually reboot one of the controllers.
Before rebooting, which command should the administrator use to move the APs?

Question43: An administrator wants to change the default roles for the pre- and post-authentication user roles for a WLAN on a Mobility Master (MM). The controllers in the network perform all authentication.
Under the Managed Network hierarchy, where can the administrator assign these roles?

Question44: Refer to the exhibit.

What can an administrator determine from this Aruba device output?

Question45: An administrator manages an AirWave Management Platform (AMP). The AMP server receives many SNMP traps from managed devices, but no alerts are generated on the AMP for certain critical traps.
Which rule should the administrator create to cause the AMP server to generate an alert based on receipt of a critical SNMP trap from an Aruba Mobility Controller (MC)?

Question46: Refer to the exhibit.

The branch office RAP shown in the exhibit provides secure wireless employee access. Because of security concerns, the company's security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP's Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannot access Internet resources on Port 3.
How can the administrator provide guest users Internet access?

Question47: A company has a wireless network that contains a cluster of four Aruba 7030 Mobility Controllers (MC) managed by a Mobility Master (MM) located in the data center. The company has Aps deployed that are nearing the capacity of the cluster. The administrator wants to increase AP capacity.
How can the administrator solve the problem?

Question48: What are the responsibilities of a cluster leader in a cluster of Aruba Mobility Controllers (MCs)? (Choose two.)

Question49: Refer to the exhibit.

An administrator examines the configuration of an AP from apboot mode shown in the exhibit.
What can the administrator determine from the configuration?

Question50: An administrator needs to authenticate users connected to an ArubaOS-Switch where the switch authenticates the user, assign the firewall policies to the user, and processes some of the users' traffic. Which connection method should the administrator configure on the ArubaOS-Switch?

Question51: Refer to the exhibit. An administrator implements an L2 cluster of Aruba Mobility Controllers (MCs) as shown in the exhibit. An external RADUIS AAA server authenticates clients associated with the Active User Anchor Controller (A-UAC), where the NAS IP address sent from Controller B is 10.254.1.2.

By default, what happens to the user's session when it is handed over to the Standby UAC (S-UAC) after a failover?

Question52: Which configuration command needs to be executed on an Aruba Mobility Controller (MC) to forward AP statistical data to an AirWave Management Platform (AMP)?

Question53: An administrator adds local administrative accounts to manage the Aruba Mobility Controllers (MCs). Which role should be assigned to an administrator who needs to only generate reports and monitor WLANS and ports?

Question54: An administrator has ArubaOS-Switches that support tunneled node. The administrator wants to tunnel all user traffic from the Ethernet ports on the switches, and have the controllers authenticate the user traffic and apply the appropriate user role.
Which implementation meets these requirements?

Question55: An administrator supports a group of engineers that commonly troubleshoot company problems from any location without wired connectivity. They need secure connectivity to a corporate web-based portal with their Android smartphones. Which solution should the administrator recommend to solve the engineer's connectivity problem?

Question56: An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile?

Question57: An administrator wants to implement a Live Upgrade (in-service upgrade) of a cluster in an Aruba wireless solution. Which ArubaOS feature does the Mobility Master (MM) use to ensure RF redundancy, so that when one or more APs are rebooted there is no loss of wireless coverage for users?

Question58: An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.
Which two items should the administrator verify that might be the cause of this problem? (Choose two.)

Question59: An administrator wants to reduce downtime of the wireless network when controllers are upgraded. Which Aruba OS feature should the administrator implement to reduce the amount of downtime the Aps will experience at the time of the upgrade process?

Question60: An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic.
But, when users connect with their wired desktops, they are assigned an initial role and routed to a Captive Portal page.
What must the administrator do to enable desktop usage based on the user's role assignment?