Question 1

Refer to the exhibit.  An AP is connected to a cluster of controllers. An AAA server provides all authentication and authorization functions for wireless users. A wireless user connects to an AP, and Active User Anchor Controller (A-UAC) and Standby UAC (S-UAC) tunnels are built from the AP to the respective controllers in the cluster. Why would an administrator create four VRRP groups with four Virtual IP (VIP) addresses in the cluster?

Accepted Answer

A)   to allow the AAA Server to enforce RADIUS CoA in case the A-UAC experiences an outage
B)   to allow High Availability (H
A)   Fast Failover to function in case a controller experiences an outage
C)   to allow the AP to establish redundant AP Anchor Controller (AA
C)   connections to the cluster
D)   to provide a VRRP group for election of the cluster leader A

Question 2

A branch office location has two buildings: an office and a small warehouse that are within 20 meters of each other. A RAP at the branch office provides connectivity to the corporate office network. This RAP is also configured as a Remote Mesh Portal (RMP). Which solution should the administrator implement to provide connectivity between the office and small warehouse buildings at the branch office location?

Accepted Answer

A)   Deploy a Remote Mesh Point AP in the warehouse building to connect to the Remote Mesh Portal in the office building.
B)   Deploy an ArubaOS-Switch in the warehouse building with tunneled node to connect to the Remote Mesh Portal in the office building.
C)   Deploy a Mesh Point AP in the warehouse building to connect to the Remote Mesh Portal in the office building.
D)   Deploy a Remote Mesh Portal in the warehouse building to connect to the Remote Mesh Portal in the office building. C

Question 3

What can the administrator determine from the configuration shown below?

Accepted Answer

A)   ??2 is the Mobility Master.
B)   All the controllers run in standalone mode.
C)   All the controllers run in a cluster.
D)   VRRP is used for Mobility Master redundancy. D

Question 4

An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server. Which two items should the administrator verify that might be the cause of this problem? (Choose two.)

Accepted Answer

A)   role existence on the Managed Network
B)   order assignment that the controller uses to select a user role
C)   server-derived role assignment on the ClearPass server
D)   spelling of the role on the ClearPass server
E)   enablement of user roles on the controller

Question 5

An administrator deploys an Aruba wireless solution comprised of: a pair of Mobility Masters (MMs) multiple Mobility Controllers (MCs) and Virtual Mobility Controllers (VMCs) an AirWave server a ClearPass server The Aruba Mobility solution runs ArubaOS 8.X. Which component in this environment globally defines and deploys VLANs for wireless users?

Accepted Answer

A)   ClearPass server
B)   AirWave server
C)   Mobility Master
D)   Mobility Controller or Virtual Mobility Controller

Question 6

A VIA client tries to initially connect to a corporate office controller through an intermediate firewall. However, the VPN connection fails. The administrator examines the firewall rules and determines that rules for UDP 4500 and UDP 500 are configured. Which additional protocol must be allowed in the firewall rules to resolve this connection failure?

Accepted Answer

A)   TCP 22
B)   UDP 8200
C)   ESP
D)   TCP 443

Question 7

An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

Accepted Answer

A)   route:dst-nat
B)   route:src-nat
C)   permit
D)   split-tunnel

Question 8

A guest establishes an authenticated wireless session to an Aruba Mobility Controller (MC). The controller uses a ClearPass server for all AAA functions. Which AAA component disconnects the user when the guest exceeds their allowed duration?

Accepted Answer

A)   SNMP Disconnect
B)   Active Directory Session Limits
C)   RADIUS Authorization Profile
D)   RADIUS Change of Authorization

Question 9

Refer to the exhibit.  An administrator wants to centralize administrative access to the Aruba Mobility Controllers (MC) and Mobility Master (MM). ClearPass is set up and the preferred authentication protocol is TACACS+. Where should the administrator perform this configuration in the MM hierarchy shown in the exhibit?

Accepted Answer

A)   at the Managed Network level
B)   at both the Mobility Master and Managed Network levels
C)   at the two campus levels
D)   at the controller levels

Question 10

Refer to the exhibit.  Which controller shown in the exhibit is elected as the cluster leader?

Accepted Answer

A)   Controller A
B)   Controller ?
C)   Controller C
D)   Controller D

Question 11

Refer to the exhibit.  Controllers are configured in a cluster as shown in the exhibit. These are the network details. A Mobility Master (MM) manages the cluster. The cluster contains two controllers C1 and C2. AP1 and AP2 use C1 as their Active AP Anchor Controller (A-AAC), with C2 as their Standby AAC (S-AAC). AP3 and AP4 use C2 as their A-AAC, with C1 as their S-AAC. User1 establishes a wireless connection via AP1, where the Active User Anchor Controller (A-UAC) assigned is C1, with C2 as the standby. What happens when User1 roams the wireless network and eventually their session is handled by AP3?

Accepted Answer

A)   The AP3's A-AAC switches to C1, and the user's A-UAC switches to C2.
B)   The AP3's A-AAC switches to C1, and the user's A-UAC remains on C1.
C)   The AP3's A-AAC remains on C2, and the user's A-UAC switches to C2.
D)   The AP3's A-AAC remains on C2, and the user's A-UAC remains on C1.

Question 12

An administrator uses a ClearPass server to perform user authentication and download the role configuration that should be applied to the user's session. The server is associated to an AAA profile of a VAP. However, when a user connects to the SSID of the VAP, they are assigned the default role. What must the administrator do to ensure that the role is downloaded and used?

Accepted Answer

A)   Enable server derivation in the AAA Server Group.
B)   Enable server derivation in the server group.
C)   Enable server derivation in the ClearPass' RADIUS configuration.
D)   Enable download role for CPPM in the VAP's WLAN profile.

Question 13

An administrator supports an Aruba wireless solution that uses ClearPass to implement server role assignment. A user reports that they are not able to access the correct department resources. The administrator determines from the connected controller that the user is associated to the login user profile instead of the department user profile. What should the administrator examine on the ClearPass server to determine the Aruba VSA User Role value that ClearPass returns to the controller?

Accepted Answer

A)   Accounting
B)   Audit Viewer
C)   Event Viewer
D)   Access Tracker

Question 14

Which configuration command enables an Aruba Mobility Controller (MC) to send AMON messages to an AirWave System?

Accepted Answer

A)   snmp-server
B)   auth-server
C)   mgmt-server
D)   tunneled-node-server

Question 15

What can be determined from the command output shown below?

Accepted Answer

A)   The synchronized data is protected by VRRP.
B)   The command was executed on the standby Mobility Master (MM) .
C)   The synchronization period is at its default value.
D)   The other Mobility Master (MM)  is the active license server.

Question 16

In a cluster-controller environment, which Aruba component in a network builds a cache table of mDNS records that can be used to help user devices access Apple Bonjour services?

Accepted Answer

A)   the Mobility Master
B)   the Mobility Master and cluster members
C)   the Mobility Controllers that are cluster members
D)   any Aruba Mobility Controller

Question 17

An administrator troubleshoots a roaming problem where a user loses connectivity to the network during the roaming process. To help troubleshoot this problem, which device or devices in a wireless network initiates the roaming process?

Accepted Answer

A)   the AP
B)   both the client and the controller
C)   the client
D)   the controller

Question 18

An administrator stages an AP and re-provisions it as a RAP from the Mobility Master (MM). When re-provisioning the RAP, the administrator must enter a user's credentials. What is the purpose of these credentials?

Accepted Answer

A)   to authenticate the RAP device
B)   to authenticate users on wireless ports
C)   to authenticate users on wired and wireless ports
D)   to authenticate users on wired ports

Question 19

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session?

Accepted Answer

A)   The controller cannot reach the AAA server to perform the authentication.
B)   The user misconfigured the Managed Network Settings profile in Windows.
C)   The AP has reached the limit for number of users that are allowed to connect to the radio.
D)   The user is configured for PEAP, but the WLAN profile on the controller implemented EAP-TLS.

Question 20

What must the administrator configure on AirWave to monitor and run operational commands on the Aruba Mobility Masters (MMs) and Mobility Controllers (MCs)?

Accepted Answer

A)   PAPI and SNMP
B)   PAPI and SSH/telnet
C)   SNMP and HTTPS
D)   SNMP and SSH/telnet

Exam 17: Aruba Certified Mobility Associate Exam

What can the administrator determine from the configuration shown below?

An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

A guest establishes an authenticated wireless session to an Aruba Mobility Controller (MC) . The controller uses a ClearPass server for all AAA functions. Which AAA component disconnects the user when the guest exceeds their allowed duration?

Refer to the exhibit. Which controller shown in the exhibit is elected as the cluster leader?

Which configuration command enables an Aruba Mobility Controller (MC) to send AMON messages to an AirWave System?

What can be determined from the command output shown below?

In a cluster-controller environment, which Aruba component in a network builds a cache table of mDNS records that can be used to help user devices access Apple Bonjour services?

An administrator troubleshoots a roaming problem where a user loses connectivity to the network during the roaming process. To help troubleshoot this problem, which device or devices in a wireless network initiates the roaming process?

An administrator stages an AP and re-provisions it as a RAP from the Mobility Master (MM) . When re-provisioning the RAP, the administrator must enter a user's credentials. What is the purpose of these credentials?

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user's wireless session?

What must the administrator configure on AirWave to monitor and run operational commands on the Aruba Mobility Masters (MMs) and Mobility Controllers (MCs) ?