NEW QUESTION 1
A company plans to deploy a Mobility Master (MM). The MM will manage 50 Mobility Controller (MC) appliances that will control a total of 700 APs, and 10 Virtual Mobility Controllers (VMCs) that will control a total of 200 APs.
How many MM licenses does the company require?

• A. 60
• B. 210
• C. 900
• D. 960

Answer: D

Explanation:
Starting with ArubaOS 8.0.1, the MM license is required to terminate devices (controllers or APs) on Mobility Master. If the Mobility Master does not have sufficient MM licenses and an AP fails to obtain a license, that
AP can get an IP address and connect to its controller, but will not broadcast an SSID.

NEW QUESTION 2
A Mobility Controller (MC) runs ArubaOS 8. What is a valid reason for an administrator to set the MC to master-local mode?

• A. The company already has a partially hierarchical deployment based on the 6.x code and wants to keep the current architecture.
• B. The company needs to manage third-party network infrastructure devices with the use of the master controller interface.
• C. The company wants a deployment architecture that allows administrators to configure all MC settings from a single location.
• D. The company requires a centralized licensing architecture that provides global license pools.

Answer: A

NEW QUESTION 3
An Aruba solution runs ArubaOS 8 and uses a standalone controller architecture. Which feature can administrators use to optimize the channel and power plan for the APs?

• A. ARM
• B. Rule Based Client Match
• C. AirMatch
• D. AppRF

Answer: A

NEW QUESTION 4
How can network administrators upgrade AirMatch on an Aruba Mobility Master (MM)?

• A. Upgrade Client Match as part of a global software upgrade, and upgrade AirMatch separately as a loadable service module (LSM).
• B. Upgrade Client Match and AirMatch separately as loadable service modules (LSMs).
• C. Upgrade AirMatch and Client Match through a global software upgrade.
• D. Upgrade AirMatch as part of a global software upgrade, and upgrade Client Match separately as a loadable service module (LSM).

Answer: B

NEW QUESTION 5
A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution will manage 10 Mobility Controller (MC) appliances that will control a total of 400 APs.
How should the network administrator install the AP licenses?

• A. 40 AP licenses on the MM and no licenses on the MC
• B. 400 AP licenses on the MM and no licenses on the MC
• C. 800 AP licenses on each MC and no licenses on the MC
• D. 800 AP licenses on the MM and 40 AP licenses on each MC

Answer: B

NEW QUESTION 6
An Aruba Remote AP (RAP) operates in split-tunnel mode. How does the AP forward traffic?

• A. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller.
• B. It sends traffic designed to the corporate network in an IPsec tunnel to a central Mobility Controller (MC), and it bridges other traffic locally.
• C. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC).
• D. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally.

Answer: B

NEW QUESTION 7
A network administrator wants to use unique digital certificates installed on user devices to authenticate wireless users. Which EAP method should the RADIUS server and clients support?

• A. PEAP and MS-CHAPv2
• B. EAP-TLS
• C. EAP-TTLS and MS-CHAPv2
• D. LEAP

Answer: B

NEW QUESTION 8
Refer to the exhibit.

The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?

• A. to create filter rules in order to control wireless user access to this application
• B. to download a report about the usage of this application over time
• C. to see more details about this application, such as a list of aggregated sessions
• D. to see the break down for only roles, destinations, WLANs and devices that use this application

Answer: C

NEW QUESTION 9
A network administrator configures an Aruba Mobility Master (MM)-based solution to provide wireless access to employees. The solution must meet these criteria:
Authenticate users to a network RADIUS server
Enforce different Aruba firewall rules based on the user department
How can the administrator meet these criteria in the simplest way?

• A. Have the RADIUS server assign users in different departments to different VLAN
• B. Apply firewall policies based on IP ranges.
• C. Have the RADIUS server send different roles for users in different department
• D. Apply role-basedfirewall policies.
• E. Create multiple zones on the M
• F. Assign different departments and sets of firewall policies to different zones.
• G. Create a different WLAN and SSID for each departmen
• H. Apply different firewall policies to each WLAN.

Answer: B

NEW QUESTION 10
Refer to the exhibit.

An Aruba solution uses AirMatch with the default AirMatch profile settings. A network administrator sees that a scheduled optimization was completed, but a plan was not deployed.
Based on the exhibit, why did this occur?

• A. The cost of the new plan exceeds the amount allowed by the feature license
• B. The new plan did not offer significantly improved quality
• C. The solution uses master-local mode
• D. ARM is disabled in the radio profile, so AP radios are considered frozen

Answer: B

NEW QUESTION 11
Refer to the exhibits.
Exhibit 1

Exhibit 2

A company has an Aruba solution. Client 1 is assigned to the users1 role, and client 2 is assigned to the users2 role. The exhibits show current firewall rules for those roles. The network1 alias used to be 10.1.1.0/24, but the network administrator now changes the network1 alias to 172.16.1.0/24. Client 1 and Client 2 both send a packet destined to 172.16.1.10.
How does the firewall handle these packets?

• A. It permits the packet from Client 1 and denies the packet from Client 2.
• B. It permits both packets.
• C. It denies the packet from Client 1 and permits the packet from Client 2.
• D. It denies both packets.

Answer: A

NEW QUESTION 12
A company wants to provide wireless access for guests with their Aruba solution. Which configuration feature requires the customer to purchase PEFNG licenses?

• A. redirection of guests to an external captive portal
• B. provision of DHCP services to unauthenticated guests
• C. addition of custom rules to control access for authenticated guests
• D. customization of the internal captive portal login page

Answer: C

NEW QUESTION 13
A company has an Aruba solution. A network administrator wants to prevent wireless users from accessing shopping web sites with a bad reputation.
What should the administrator set up to deny such traffic?

• A. an AppRF engine
• B. application filters in the Traffic Analysis dashboard
• C. firewall access control rules that specify HTTP and HTTPS services
• D. firewall application rules

Answer: D

NEW QUESTION 14
What is one setting that a network administrator can configure for user roles in an Aruba solution?

• A. DHCP pool
• B. ClientMatch rules
• C. source NAT
• D. Maximum session

Answer: D

NEW QUESTION 15
Which Mobility Master (MM) dashboard should an administrator access to view a list of rogue and interfering APs?

• A. Potential issues
• B. Security
• C. Performance
• D. Network

Answer: B

NEW QUESTION 16
A network administrator wants to assign an authentication server group to the WPA2-Enterprise WLAN. Which profile should the administrator modify?

• A. Virtual AP
• B. SSID
• C. AAA
• D. L2 Authentication

Answer: C

NEW QUESTION 17
Refer to the exhibit.

What is a valid way to help the APs discover devices that can control them?

• A. Set up an Aruba Central subscription, and ensure that APs can reach the Internet.
• B. Enable CPSec, and ensure the Mobility Master (MM) and Mobility Controllers (MCs) trust the Aruba certificates installed on the APs at the factory.
• C. Specify the Mobility Master (MM) IP address in DHCP option 43 on the network DHCP server.
• D. Map the Mobility Controller (MC) IP addresses to the aruba-master name on the network DNS server.

Answer: D

NEW QUESTION 18
Which pre-defined role allows DHCP, DNS, and internal captive portal redirection for a guest WLAN?

• A. exam_guest-guest-logon
• B. authorized
• C. guest-logon
• D. guest

Answer: C

NEW QUESTION 19
Which IEEE standard provides the highest transmission rates in the 2.4GHz frequency band?

• A. 802.11a
• B. 802.11ac
• C. 802.11g
• D. 802.11n

Answer: D

NEW QUESTION 20
What is one networking setting that a network administrator can configure for roles in an Aruba solution?

• A. DHCP pool
• B. ClientMatch rules
• C. source NAT
• D. bandwidth limit

Answer: D

NEW QUESTION 21
A network manager wants to implement an Aruba wireless solution that accommodates 802.1X with EAP-TLS. All wireless users will utilize Active Directory (AD) accounts to authenticate.
Which device will the authenticator forward the authentication requests to in this type of solution?

• A. APs
• B. RADIUS server
• C. Mobility Controller (MC)
• D. Mobility Master (MM)

Answer: B

NEW QUESTION 22
......