What are the types of server derivation rules that can be applied to clients? (Select two)
A. AP
B. Role
C. VLAN
D. SSID
E. MAC
A Company wants to replace their current wireless solution with new Aruba Mobility Controller and Aruba Aps. Which authentication method requires the use of certificate to be deployed in this network?
A. EAP-GTC
B. EAP-PEAP
C. EAP-TTLS
D. EAP-FAST
An administrator manages a network that includes three campuses. The network uses Aruba Mobility Controllers and Aruba Aps. Each campus is managed separately, where each campus has its own master-local topology. The administrator wants to simplify the operations of control plane security (CPSec) to allow Aps to be centrally provisioned but can be placed in any campus.
What must the administrator do to allow an AP to securely connect to any controller in any campus?
A. Set up a third-party solution to provide root certificate Authority (CA) and subordinate CA services.
B. Set up three cluster domains with a single CPSec Trust Anchor for the entire network
C. Se up one master controller as a CPSec Trust Anchor and the order master controllers as cluster members.
D. Set up master controller as a CPSec Trust Anchor at each of the three campuses.
A port firewall policy is applied to a trunk port that denies controller access. An "allow all" VLAN firewall policy is applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain access to the controller. Which of the following statements is true?
A. The Port policy is applied, therefore no controller access
B. The VLAN policy is applied, then the port policy, therefore no controller access
C. The VLAN policy is applied, therefore access to the controller is allowed
D. You cannot place a firewall policy on a Ports VLAN when the Port already has a policy, therefore no controller access
E. When locally connected to a controller's port you always have controller access
An Aruba based network has a Master and four local controllers deployed. But one of the locals, a new installation, is not seen by the Master. What might be wrong? (Choose two.)
A. PAPI is not enabled on the local controller.
B. The master controller can only support three local controllers.
C. IPSec is blocked by the internal network between the local and the master controllers.
D. The passphrase does not match on the master and local controllers.
E. GRE is blocked between the master and local controllers.
With CPSec disabled, Aruba access points are Layer 3 connected to controllers using which protocol?
A. 802.1q
B. LWAPP
C. PPTP
D. GRE
E. HTTPs
Which netdestination aliases are built into the controller? (Choose three)
A. logon
B. any
C. user D. guest
E. localip
Which of the following APs support remote AP operation?
A. AP 105
B. AP 125
C. RAP2
D. All of the above
In tunneled node configuration the Aruba 3500 mobility access switch acts as a:
A. Authentication server
B. Security gateway
C. Wired to Wireless AP
D. Wired AP
When configuring split tunnel mode on a Remote AP (RAP) where is the routing function for the split tunnel defined?
A. On the IP routing tab in the configuration screen.
B. On the AP provisioning screen.
C. In the RAP static routing tables
D. In the Firewall policy
E. In the RAP whitelist
