NEW QUESTION 1
Which VPN component must be configured on the Mobility Master (MM) to allow a RAP to use the built-in certificate to successfully connect to a Mobility Controller (MC)?

• A. IP Address pool
• B. VPN username and password
• C. IPSec pre-shared key
• D. CPSec auto-whitelist

Answer: C

NEW QUESTION 2
An administrator has ArubaOS-Switches that support tunneled node. The administrator wants to tunnel all user traffic from the Ethernet ports on the switches, and have the controllers authenticate the user traffic and apply the appropriate user role.
Which implementation meets these requirements?

• A. Role-based tunneled node with the controllers configured for standalone mode
• B. Role-based tunneled node with the controllers configured in a cluster
• C. Per-port tunneled node with the controllers configured for standalone mode
• D. Per-port tunneled node with the controllers configured in a cluster

Answer: B

NEW QUESTION 3
An AP connects to a controller. Then, the AP loses power and reboots.
Which parameters will the AP remember and use from its initial connection? (Select two.)

• A. AP group
• B. Server IP
• C. AP IP address and subnet mask
• D. Mobility Master IP
• E. AirWave server name

Answer: AC

NEW QUESTION 4
IEEE 802.11r relies on which technology to reduce re-authentication delays when clients roam between APs?

• A. Fast BSS Transition
• B. Temporal Key Integrity
• C. Robust Security Network
• D. Opportunistic Key Caching

Answer: A

NEW QUESTION 5
An administrator migrates Aruba Mobility Controllers (MCs) from ArubaOS.6x to ArubaOS.8. x. In the 6.x. configuration, the administrator configures GRE tunnels on the local controllers to a controller in the DMZ to keep guest traffic off the corporate network. The problem with the solution is that is creates suboptimal routing paths.
Which feature should the administrator implement to solve this problem?

• A. MultiZone
• B. Mobility
• C. Clustering
• D. AirMatch

Answer: B

NEW QUESTION 6
Refer to the exhibit.

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session?

• A. The AP has reached the limit for number of users that are allowed to connect to the radio.
• B. The controller cannot reach the AAA server to perform the authentication.
• C. The user is configured for PEAP, but the WLAN profile on the controller implemented EAP-TLS.
• D. The user misconfigured the Managed Network Settings profile in Windows.

Answer: A

NEW QUESTION 7
Refer to the exhibit.

What can be determined from the command output shown in the exhibit?

• A. The synchronized data is protected by VRRP.
• B. The command was executed on the standby Mobility Master (MM).
• C. The synchronization period is at its default value.
• D. The other Mobility Master (MM) is the active license server.

Answer: D

NEW QUESTION 8
Where on the Mobility Master (MM) can an administrator configure the VIA connection profile?

• A. L2 Authentication
• B. L3 Authentication
• C. AAA Profiles
• D. User Roles

Answer: B

NEW QUESTION 9
An administrator suspects that the network drops frames between a wireless client and an Aruba Mobility Controller (MC). The administrator wants to examine the frames between the AP and the controller to determine if any frames are missing.
Which solution allows the administrator to use a protocol analyzer to examine the contents of the 802.11 frames between the AP and controller?

• A. Implement bridge mode
• B. Implement decrypt-tunnel mode.
• C. Implement GRE mode.
• D. Implement split-tunnel mode.

Answer: A

NEW QUESTION 10
An administrator creates a mesh cluster profile and has defined the RF band and cluster name. What else must the administrator configure in the profile?

• A. IPSec
• B. CPSec
• C. WPA hexkey or passphrase
• D. Mesh portal IP address(es)

Answer: C

NEW QUESTION 11
An administrator purchases a pair of Mobility Masters (MM) and wants to deploy 16 Virtual Mobility Controllers (VMCs). What is the minimum number of clusters that the administrator needs to implement to support the number of VMCs?

• A. 1
• B. 2
• C. 4
• D. 8

Answer: D

NEW QUESTION 12
Refer to the exhibit.

What is true about the configuration shown in the exhibit?

• A. This is an ArubaOS-Switch configured for per-user tunneled node.
• B. This is an ArubaOS controller configured for per-user tunneled node.
• C. This is an ArubaOS-Switch configured for per-port tunneled node.
• D. This is an ArubaOS controller configured for per-user tunneled node.

Answer: C

NEW QUESTION 13
An administrator stages an AP and re-provisions it as a RAP from the Mobility Master (MM). When
re-provisioning the RAP, the administrator must enter a user’s credentials. What is the purpose of these credentials?

• A. to authenticate users on wired and wireless ports
• B. to authenticate the RAP device
• C. to authenticate users on wireless ports
• D. to authenticate users on wired ports

Answer: B

NEW QUESTION 14
Refer to the exhibit.

What can an administrator determine from this Aruba device output?

• A. A switch is connected to a standalone Mobility Controller.
• B. An AP is connected to a Mobility Controller in a cluster.
• C. An AP is connected to a standalone Mobility Controller.
• D. A switch is connected to a Mobility Controller in a cluster.

Answer: D

NEW QUESTION 15
An administrator at Campus A manages Aruba Mobility Controllers (MCs). The administrator defines a server group that includes a local ClearPass server and a remote Microsoft RADIUS server. The ClearPass server has the credentials for users at Campus A and the Microsoft RADIUS server has the credentials for users at Campus B. Users at Campus A successfully authenticate and connect to the Campus A wireless network. However, when users from Campus B visit Campus A they fail authentication.
What can the administrator do to solve this problem?

• A. Enable FastConnect on the Campus A Mobility Controllers.
• B. Enable machine authentication on the Mobility Controllers.
• C. Enable EAP-TTLS with EAP Termination on the Mobility Controllers.
• D. Enable EAP termination on the ClearPass server.

Answer: A

NEW QUESTION 16
An administrator implements a per-port tunneled node configuration for an Aruba Mobility Controller (MC) that runs ArubaOS 8.x. The controller performs both MAC and 802.1X authentication.
What must the administrator specify on the controller to allow for 802.1X authentication to succeed?

• A. Define External RADIUS servers in the AAA profile.
• B. Enable L2 Authentication Fail Through in the AAA profile.
• C. Define MAC addresses in the local database for the 802.1X users.
• D. Enable server roles in the AAA profile.

Answer: D

NEW QUESTION 17
Refer to the exhibit.

An administrator supports a RAP at a branch office shown in the exhibit. The company has one Mobility Controller (MC) at the Primary DMZ site and one at the Secondary DMZ site. The RAP is configured to connect to only the MC at the Primary DMZ site. A network outage with the ISP at the Primary DMZ site
causes the RAP to reboot. Upon reboot, the RAP cannot build a tunnel to the Secondary DMZ site MC because the administrator forgot to add the Second LMS IP address to the AP Group configuration. Once the RAP can successfully connect, the administrator can add the Secondary DMZ MC as a backup LMS to fix the AP Group.
What should the administrator implement to allow the RAP to connect to the MC at the Secondary DMZ site while the outage at the primary site persists?

• A. Dynamic discovery through DHCP Option 43
• B. Static configuration from apboot mode
• C. Dynamic discovery through DHCP Option 60
• D. Dynamic discovery through multicast ADP

Answer: A

NEW QUESTION 18
Refer to the exhibit.

Once connected to a WLAN, a user cannot reliably access resources in a company’s network. Based on the output shown in the exhibit, what can be determined about the user’s connection?

• A. The user has successfully authenticated through use of PEAP.
• B. The user is connected to a controller through use of the VIA client.
• C. The user is connected wirelessly to a controller.
• D. The user is connected to an ArubaOS-Switch.

Answer: A

NEW QUESTION 19
A company network implements Skype for Business, where voice and video calls, desktop sessions, and file sharing sessions need to be prioritized. These applications are used across a wireless network, implemented with Aruba APs and Aruba Mobility Controllers (MC) that run ArubaOS 8.x.
Which Unified Communications and Collaboration (UCC) deployment mode should an administrator recommend for this customer?

• A. WMM-only
• B. SDN API
• C. Zones
• D. Heuristics

Answer: D

NEW QUESTION 20
An administrator wants to implement the MultiZone feature in a company’s network to segregate corporate and guest traffic. Corporate traffic will have APs establish connections to a cluster managed by a Mobility Master (MM), and guest traffic will have the same APs establish connections to a standalone controller at the company’s DMZ.
Given this scenario, what is true about the implementation of Multizone?

• A. A management session is established only with the primary zone, but data sessions are established to all zones.
• B. Only the primary zones can reboot, upgrade, or provision MultiZone APs.
• C. The primary and data zones must be in the same L2 subnet.
• D. A MultiZone AP can initially connect to any zone to obtain its configuration.

Answer: D

NEW QUESTION 21
An administrator implements two redundant Aruba Mobility Masters (MMs). Which protocol should the administrator use to detect a failure in a single subnet?

• A. PAPI
• B. SNMP
• C. VRRP
• D. IPSec

Answer: C

NEW QUESTION 22
Refer to the exhibit.

What is true about the operation of the Aruba Mobility Controller (MC) shown in the exhibit?

• A. The Mobility master is in disaster recovery mode and will push changes to a Managed Controller.
• B. The disaster recovery mode is enabled, and no changes will be forwarded to the Mobility Master.
• C. The disaster recovery mode is disabled, and changes will be sent to the Mobility Master.
• D. The disaster recovery mode is enabled, and changes will be sent to the Mobility Master.

Answer: D

NEW QUESTION 23
Refer to the exhibit.

An administrator implements AP licensing on a Mobility Master (MM).
Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses in CampusC are allocated.
Each campus is responsible to purchase its own AP licenses.
There are 900 AP licenses deployed in the global pool.
There are three dedicated pools.
From the global pool, 300 AP licenses are assigned to each dedicated pool.
What can the administrator do to add capacity for CampusA in alignment with campus policies?

• A. Allow CampusA to share from the CampusC pool.
• B. Add 100 more AP licenses and assign them to the CampusA pool.
• C. Move 100 licenses from the CampusC pool to the global pool.
• D. Add 100 more AP licenses to the global pool.

Answer: B

NEW QUESTION 24
An administrator uses a ClearPass server to perform user authentication and download the role configuration that should be applied to the user’s session. The server is associated to an AAA profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the default role.
What must the administrator do to ensure that the role is downloaded and used?

• A. Enable download role for CPPM in the VAP’s WLAN profile.
• B. Enable server derivation in the ClearPass’ RADIUS configuration.
• C. Enable server derivation in the server group.
• D. Enable server derivation in the AAA Server Group.

Answer: B

NEW QUESTION 25
......