Which authentication server option would the network administrator choose to authenticate a wireless user directly against an Active Directory (AD) domain controller without NPS or IAS?
A. LDAP server
B. RFC 3576 server
C. TACACS server
D. RADIUS server
An Aruba Remote AP (RAP) operates in split-tunnel mode. How does the AP forward traffic?
A. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller.
B. It sends traffic designed to the corporate network in an IPsec tunnel to a central Mobility Controller (MC), and it bridges other traffic locally.
C. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC).
D. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally.
Refer to the exhibit.
What is a valid way to help the APs discover devices that can control them?
A. Set up an Aruba Central subscription, and ensure that APs can reach the Internet.
B. Enable CPSec, and ensure the Mobility Master (MM) and Mobility Controllers (MCs) trust the Aruba certificates installed on the APs at the factory.
C. Specify the Mobility Master (MM) IP address in DHCP option 43 on the network DHCP server.
D. Map the Mobility Controller (MC) IP addresses to the aruba-master name on the network DNS server.
If the decrypt-tunnel forwarding mode is selected in an employee WLAN, where is the user traffic decrypted?
A. at the switch
B. at the AP
C. at the controller
D. at the RADIUS server
Refer to the exhibit.
The alias in the rule shown in the exhibit is network 10.1.1.0/24. A wireless client is assigned IP address 10.1.2.10/24 and the "admins" role. The wireless client at 10.1.2.10 attempts to initiate a Web session with a server at 10.1.1.2. A wired client at 10.1.1.3 attempts to initiate an SSH session with the wireless client at
10.1.2.10.
How does the Aruba firewall handle these attempts?
A. The firewall drops the traffic from the wireless client. The firewall drops the traffic from the wired client.
B. The firewall permits the traffic from the wireless client, but drops the return traffic from the server.The firewall drops the traffic from the wireless client.
C. The firewall permits the traffic from the wireless client and also permits the return traffic from the server. The firewall permits the traffic from the wired client and also permits the return traffic from the wireless client.
D. The firewall permits the traffic from the wireless client and also permits the return traffic from the server. The firewall drops the traffic from the wired client.
What is an example of a Layer2 wireless threat that a wireless intrusion detection system (WIDS) should detect?
A. 802.11 association floods
B. RF jamming
C. Bluetooth interference
D. spyware
A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution will manage 10 Mobility Controller (MC) appliances that will control a total of 400 APs. How should the network administrator install the AP licenses?
A. 40 AP licenses on the MM and no licenses on the MC
B. 400 AP licenses on the MM and no licenses on the MC
C. 800 AP licenses on each MC and no licenses on the MC
D. 800 AP licenses on the MM and 40 AP licenses on each MC
Refer to the exhibit.
Which role must AP1 play?
A. Instant AP (IAP)
B. Mesh Point AP
C. Mesh Portal AP
D. Remote AP (RAP)
Refer to the exhibit.
The exhibit shows the AAA profile for a WLAN on an Aruba solution. This WLAN uses 802.1X to
authenticate users to a RADIUS server. A user successfully authenticates with 802.1X, but the RADIUS
server does not send a role assignment.
How does the Aruba firewall handle the role assignment for this user?
A. It does not assign a role.
B. It applies the Aruba VSA role employee.
C. It assigns the logon role.
D. It assigns the authenticated role.
Refer to the exhibit.
The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?
A. to see the break down for only the roles, destinations, WLANs, and devices that use this application
B. to download a report about the usage of this application over time
C. to create filter rules in order to control wireless user access to this application
D. to set up bandwidth rule in order to control wireless user access to this application
