A network administrator creates the role employees and adds the rule to it:
user any any permit
The first several wireless clients assigned to the employees role are assigned IP
addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees
role are then assigned IP addresses in the 10.10.20.0/24.
When the Aruba firewall matches traffic from these clients to the user any any permit rule,
what does it do?

A.

It drops traffic from wireless clients in both the 10.10.0/24 subnet and
10.10.20.0/24 subnet.

B.

It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24
subnet as long as the packet has a source IP.

C.

It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops
the traffic from wireless clients in the 10.10.10.0/24 subnet.

D.

It permits the traffic from wireless clients in the 10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet.

A network administrator examines a list of 2.4GHz clients with low performance in the
Mobility Master (MM) dashboard. Which property for a client should pose a concern as
a potential performance issue?

A.

Radio PHY of HT 20MHz

B.

Max speed of 72Mbps

C.

SNR of 18

D.

Usage of 10 MB

What is the minimum space between channels in the 2.4GHz range to prevent overlap?

A.

1 channel

B.

3 channels

C.

5 channels

D.

7 channels

What is an example of a Layer2 wireless threat that a wireless intrusion detection system
(WIDS) should detect?

A.

802.11 association floods

B.

RF jamming

C.

Bluetooth interference

D.

spyware

Refer to the exhibit

A network administrator sets up the Exam_Employees WLAN on an Aruba solution with a default role of guest, as shown in the exhibit. To which users does the guest role apply?

A.

users who successfully authenticate and are assigned to the default role by the RADIUS server

B.

users who successfully authenticate and are not assigned a different role by
the RADIUS server

C.

users who have connected to the SSID, but have not yet attempted authentication

D.

users who fail authentication

A network administrator wants to assign an authentication server group to the
WPA2-Enterprise WLAN. Which profile should the administrator modify?

A.

Virtual AP

B.

SSID

C.

AAA

D.

L2 Authentication

If the decrypt-tunnel forwarding mode is selected in an employee WLAN, where is the user traffic decrypted?

A.

at the switch

B.

at the AP

C.

at the controller

D.

at the RADIUS server

An Aruba Mobility Master (MM)-based solution has a WLAN that uses WPA2-
Enterprise security. A test login on a wireless client fails.
How can a network administrator determine whether the RADIUS server rejected the credentials or another issue occurred?

A.

View Technical Support information for the MM.

B.

Ping the IP address configured as the RADIUS server.

C.

Use the MM AAA Server Test Diagnostic tool.

D.

Use the tools in the MM Dashboard > Security window.

A company has an Aruba Mobility Master (MM)-based solution. Under which circumstance
will an AP radio change channel without the use of the Mobility Master (MM)?

A.

when the MM detects that a different channel has significantly better quality

B.

when the Mobility Controller (MC) detects a rogue AP on the channel

C.

when the AP detects a large amount of interference on its channel

D.

when the Client Match rules indicate that nearby clients do not support the current channel

Refer to the exhibit

What is a valid way to help the APs discover devices that can control them?

A.

Set up an Aruba Central subscription, and ensure that APs can reach the Internet.

B.

Enable CPSec, and ensure the Mobility Master (MM) and Mobility Controllers
(MCs) trust the Aruba certificates installed on the APs at the factory.

C.

Specify the Mobility Master (MM) IP address in DHCP option 43 on the network DHCP server.

D.

Map the Mobility Controller (MC) IP addresses to the aruba-master name on the network DNS server.

A company has an Aruba Mobility Master (MM)-based solution. A network
administrator wants to collect and analyze information about clients and access points
(APs) over extended periods of time.
What should the administrator do to achieve this goal?

A.

Add Aruba AirWave to the solution.

B.

Run a Traffic Analysis report on the MM.

C.

Make sure that MM has sufficient AppRF licenses.

D.

Enable archival from the MM interface Maintenance windows.

A network administrator creates a user account on an Aruba Mobility Master (MM) with the
guest-provisioning role. Which task does this user have the rights to perform?

A.

set up portal pages

B.

create guest user accounts

C.

monitor guest clients

D.

create guest WLANs