NEW QUESTION 1
The customer has an office environment with users who have laptops that can connect with wired or wireless. Users also bring one or two of their own devices. An architect creates a proposal with Aruba AP-325s, 7210 Mobility Controllers (MCs), a Mobility Master (MM), and Aruba 2930M switches at the access layer to support the laptops and APs.
The architect plans to recommend 802.1X authentication without tunnelled node on Aruba 2930M switch ports that connect to laptops. What is one advantage of this form of authentication?

• A. ensures that Aruba firewall policies apply to wired user traffic.
• B. prevents users from connection attempts with more than three devices
• C. enables user access control and ensures only authorized users connect.
• D. provides a second layer of protection for wireless users at the internal perimeter

Answer: C

NEW QUESTION 2
Refer to the exhibit.

The exhibit shows the current plan for a wired network upgrade.
As much as possible, the customer wants to flatten the architecture and avoid recabling. However, each Building 2 switch must also maintain connectivity to the core if one link fails. What should the architect propose to meet the customer requirements?

• A. Use two additional 2930F switches to act as an aggregation layer for Building 2; connect them to the core on 40 GbE connections.
• B. Connect each Building 2 switch directly to the core on a single fiber strand through the use of SFP+-SR transceivers.
• C. Combine the switches in each Building 2 closet as a VSF fabric; establish two 10 GbE connections to the core per fabric.
• D. Extend additional fiber between the buildings so that each Building 2 switch can have a direct 10 GbE connection to the core.

Answer: C

NEW QUESTION 3
Refer to the exhibit.

An architect needs to plan a network solution for a new office building with four floors. Each floor has two wiring closets with the equipment shown in the exhibit. The switches will connect to employee desktops, a few campus APs controlled by MCs, and printers. The switches do not implement tunneled node.
What is a best practice design for the VLANs and subnets for the wired devices?

• A. one VLAN per closet and a /24 subnet for each VLAN
• B. one VLAN per closet and a /25 subnet for each VLAN
• C. one VLAN for the entire building and a /23 subnet
• D. one VLAN per floor and a /24 subnet for each VLAN

Answer: B

NEW QUESTION 4
An architect needs to plan a wireless deployment. The architect conducts a physical walkthrough, but still needs more information. Which significant RF obstacle can be difficult to see visually and might require access to blueprints?

• A. fiberglass
• B. metal firewall
• C. ceiling tiles
• D. drywall

Answer: A

NEW QUESTION 5
A customer needs a networking solution that supports their Microsoft Skype for Business Unified Communications (UC) solution. The architect discovers that user wireless devices are Wi-Fi Multimedia (WMM) capable. Windows policies assign voice traffic DSCP 46 and video traffic DSCP 34.
Which potential issue should the architect explain to the customer about the default QoS settings?

• A. The DSCP values place both voice and video traffic in the video VMM queue, so voice does not receive the prioritization that is should.
• B. The Aruba APs and controllers use different prioritization mechanism from WMM, so they will not accept high priority traffic from the wireless devices.
• C. DSCP is incompatible with WM
• D. The Aruba APs and controllers instead use 802.1p to mark traffic to and from wireless devices.
• E. The DSCP for wireless client traffic is concealed within the GRE packet on the path from the AP to the controller, and does not take effect.

Answer: A

NEW QUESTION 6
A customer has a small office building that needs approximately 32 APs. The solution must support basic rogue AP detection and provide a stateful firewall with role-based policies. The customer would like the simplest, most cost-effective deployment that meets their needs.
What should the architect recommend?

• A. Aruba remote APs
• B. Aruba campus APs and a Virtual Mobility Controller
• C. Aruba Instant APs
• D. Aruba campus APs and an Aruba 7005 Mobility Controller

Answer: D

NEW QUESTION 7
An architect proposes four 7210 Mobility Controllers (MCs) to support about 1,500 client APs. The customer environment will have a maximum of about 20,000 wireless clients. The customer wants hardware MMs with an active and standby deployment. What is the minimum solution that meets the customer requirements?

• A. two MM-HW-10K appliances
• B. two MM-HW-5K appliances
• C. four MM HW-5K appliances
• D. four MM HW-10K appliances

Answer: B

NEW QUESTION 8
For which scenario should an architect recommend Aruba Central Managed Portal (MSP)?

• A. for a service provider who needs to monitor multi-vendor environments
• B. for an enterprise that needs to manage data center services together with the network
• C. for a service provider who needs to manage multiple customer networks
• D. for an enterprise with many branches that needs to manage services centrally

Answer: D

NEW QUESTION 9
Refer to the exhibit.

A customer wants to replace the core and aggregation layer of an existing network. Currently the network routes between the aggregation layer and core, and uses the technologies shown in the exhibit.
The customer now wants to route at the core, instead of the aggregation layer, and extend some of the same VLANs in different buildings. However, the customer cannot eliminate the aggregation layer at this point. What should the architect recommend?

• A. Create a backplane stack at the aggregation layer and a VSF fabric at the core.
• B. Implement broadcast filtering on switch-to-switch links across all of the buildings.
• C. Combine all switches in the aggregation layer and core into a single backplane stack.
• D. Use VRRP on the core and aggregation switches, with the aggregation switches acting as standby.

Answer: C

NEW QUESTION 10
Refer to the exhibit.

An architect selects 5406R switches for the aggregation layer. What is an appropriate amount of bandwidth for the link aggregation between each aggregation layer VSF fabric and the campus core?

• A. 60 Gbps
• B. 160 Gbps
• C. 200 Gbps
• D. 320 Gbps

Answer: C

NEW QUESTION 11
A customer currently has an Instant AP deployment. Which customer requirement would indicate that the customer needs to add a controller to the deployment?

• A. the requirement to apply role-based firewall policies
• B. the requirement for a captive portal for guests
• C. the requirement to provide client-to-site VPN acces for remote users
• D. the requirement for a cloud-based management solution

Answer: D

NEW QUESTION 12
What should an architect use as a guideline to determine when to define another VLAN for wireless devices?

• A. the WLAN or SSID, with a different VLAN for each SSID
• B. the AP deployment, with a different VLAN for each AP that is deployed
• C. the number of devices, with a different VLAN for each 250 devices
• D. the employee roles, with a different VLAN for each role or department

Answer: D

NEW QUESTION 13
An architect needs to plan a very high density (VHD) wireless network at a large events venue, at which thousands of attendees are expected. The architect plans to deploy a cluster of Mobility Controllers (MCs) to control the APs. It is important to support seamless roaming for wireless devise across the venue.
What should the architect ensure for the network services?

• A. DHCP servers can support a high number of scopes with a /24 size.
• B. A third-party firewall integrates with ClearPass to filter the guest user traffic.
• C. A domain CA is set up to deploy certificates to a high volume of guest devices.
• D. DHCP and DNS servers are carrier-grade and support a low transaction time.

Answer: B

NEW QUESTION 14
A customer needs a solution to terminate VPN tunnels for Aruba RAPs. The customer has a single site and a single public IP address for this purpose. Network address translation (NAT) will forward the IPsec traffic to the correct device to terminate the VPN tunnel. The customer also requires N+1 redundancy for the solution. Which solution meets the customer requirements?

• A. two Aruba MCs on the same subnet that use VRRP without clustering
• B. two Aruba MCs deployed as a Layer 3 cluster
• C. two Aruba MCs on different subnets that use VRRP without clustering
• D. two Aruba MCs deployed as a Layer 2 cluster

Answer: B

NEW QUESTION 15
An architect proposes an Aruba wireless solution for a customer that uses Microsoft Skype for Business. What should be set up on the MCs, or MM, to ensure that wireless voice traffic is properly prioritized?

• A. Firewall policies and SDN to mark voice
• B. Broadcast suppression combined with AirGroup
• C. Airtime Fairness set to fair-access
• D. Voice-aware Layer 3 roaming

Answer: D

NEW QUESTION 16
A financial institution has an Aruba wireless system. Each floor is 19 meters by 23 meters (200 feet by 250 feet) and has 20 APs. The organization now requires dedicated Air Monitors (AMs). About how many AMs should the architect recommend per floor?

• A. about 1 or 2 per floor
• B. about 3 to 5 per floor
• C. about 10 to 12 per floor
• D. about 16 to 20 per floor

Answer: A

NEW QUESTION 17
Refer to the exhibit.
Exhibit 1 shows the logical plan, and Exhibit 2 shows the BOM created with IRIS. An architect plans to propose two 5406Rzl switches as a VSF fabric for a campus network core. Which issue with the plan should the architect correct?

• A. Add two QSPF+ MP0 SR4 transceivers.
• B. Change the v2 modules to v3 modules.
• C. Add stacking modules and cables.
• D. Change the power supply type.

Answer: B

NEW QUESTION 18
What typically drives the need for an aggregation layer in modern networks?

• A. insufficient fiber cabling, especially between buildings
• B. lack of high speed uplink capabilities at the access layer
• C. simplification of spanning tree protocol ad the access layer
• D. need to extend VLANs across wider areas

Answer: C

NEW QUESTION 19
An architect needs to plan the RF coverage. Which application has the greatest potential impact on RF design?

• A. print
• B. email
• C. voice
• D. secure web browsing

Answer: D

NEW QUESTION 20
......