NEW QUESTION 1
Refer to the exhibit.

The exhibit shows output from a Mobility Master (MM) dashboard. What does the health status indicate?

• A. It takes the AP about twice as long to send data to the client as expected if all transmissions succeeded.
• B. About half of the heartbeats the client sends reaches the Mobility Manager (MM).
• C. The maximum data rate that 802.11ac supports is about twice as high as the data rate the client uses.
• D. The client device only complies with about half of the rules in the endpoint health policy.

Answer: A

NEW QUESTION 2
Refer to the exhibit.

A network administrator sets up the Exam_Employees WLAN on an Aruba solution with a default role of guest, as shown in the exhibit. To which users does the guest role apply?

• A. users who successfully authenticate and are assigned to the default role by the RADIUS server
• B. users who successfully authenticate and are not assigned a different role by the RADIUS server
• C. users who have connected to the SSID, but have not yet attempted authentication
• D. users who fail authentication

Answer: B

NEW QUESTION 3
Refer to the exhibit.

The exhibit shows output from a Mobility Master (MM) dashboard. What is a valid reason for the administrator to click the akamai square under applications?

• A. to create filter rules in order to control wireless user access to this application
• B. to download a report about the usage of this application over time
• C. to see more details about this application, such as a list of aggregated sessions
• D. to see the break down for only roles, destinations, WLANs and devices that use this application

Answer: C

NEW QUESTION 4
A company currently uses Instant APs (IAPs), all managed by a virtual controller. The company expects to double in size without the next 18 months. The network manager wants to purchase additional APs to service the increased traffic load. The network manager also wants to deploy a Mobility Controller (MC) to manage all APs.
How should the network administrator adapt the current IAPs to a controlled architecture?

• A. Manage both the MCs and IAP clusters with Aruba Central.
• B. Configure the IAPs to establish CPSec tunnels to the new MCs.
• C. Manage both the MCs and IAP clusters with a Mobility Master (MM).
• D. Convert the IAPs to Campus APs controlled by the new MCs.

Answer: D

NEW QUESTION 5
What is a key difference between an Aruba Air Monitor (AM) and an Aruba Spectrum Analyzer (SA)?

• A. An AM detects threats such as rogue APs, while an SA analyzes RF conditions.
• B. An AM detects rogue APs and provides data services to clients, while an SA only detects rogue APs.
• C. An AM scans on only one 802.11 frequency band, while an SA scans on both 802.11 frequency bands.
• D. An AM both detects wireless intrusion attempts and mitigates them, while an SA only detects wireless intrusion attempts.

Answer: A

NEW QUESTION 6
Refer to the exhibit.

Based on the exhibit, what is the maximum number of APs that this Mobility Master (MM) solution can support?

• A. 1
• B. 32
• C. 500

Answer: C

NEW QUESTION 7
A network administrator has installed PEF licenses in the global pool of a Mobility Master (MM) solution. When the administrator tries to configure roles and policies, an error indicates that the PEF licenses must be installed.
What should the administrator do to correct this issue?

• A. Ensure the PEF licenses were installed at the Managed Network and not at the MM level.
• B. Enable Building 1 as a local license pool.
• C. Enable the PEF feature in the Global Usage window.
• D. Activate the PEF licenses through an Aruba Activate account.

Answer: A

NEW QUESTION 8
A company has an Aruba Mobility Master (MM)-based solution with a WLAN that assigns users to VLANs 10–19. The company wants the Aruba solution to act at Layer 3 to route wireless user traffic.
What must network administrators configure to permit the solution to forward traffic correctly?

• A. VLAN 10–19 interfaces and proper IP settings on the MM nodes
• B. trunk ports that support VLANs 10–19 on the managed Mobility Controllers (MCs)
• C. VLAN 10–19 interfaces on the Mobility Controllers (MCs) as the default gateway for wireless users
• D. trunk ports that support VLANs 10-19 on the MM nodes

Answer: C

NEW QUESTION 9
Refer to the exhibit.

A company has a Mobility Master (MM)-based solution with a guest WLAN. During the captive portal redirection, users who access a non-HTTPS Website see the error shown in the exhibit.
How can a network administrator prevent this error?

• A. Enable automatic CPSec certificate deployment.
• B. Replace the default Mobility Master certificate with a certificate that has the correct hostname.
• C. Replace the default server certificate for mobility controllers with a certificate signed by a trusted CA.
• D. Reconfigure the guest WLAN to use EAP methods that rely on passwords rather than certificates.

Answer: C

NEW QUESTION 10
A network administrator needs to configure firewall rules for three roles:
Finance
Sales
Employee
Several rules apply to both the Employee and Sales roles, but not to the Finance role. What is the simplest way to configure these rules?

• A. Define the Employee and Sales roles as internal roles, and then configure the rules as global rules for internal users.
• B. Apply these rules as a subnet-based policy, and then ensure that only Employee and Sales users are assigned IP addresses in that subnet.
• C. Select either the Employee or Sales role, and then configure these rules within the global policy.
• D. Create a policy with these rules, and then apply that policy to the Employee and Sales roles.

Answer: D

NEW QUESTION 11
What is a valid way to deploy an Aruba Mobility Master (MM)?

• A. as a subscription-based service through the Aruba cloud
• B. as a role on a Mobility Controller 7030 that is deployed as a standalone controller
• C. as a virtual appliance on a server that meets the recommended hardware requirements
• D. as a role on a Mobility Controller 7240 that is deployed as a master controller

Answer: C

NEW QUESTION 12
A company has an Aruba solution and wants to provide guests with wireless access. The company wants to
assign guests IP addresses in subnets that exist only within the Aruba solution.
Which feature should network administrators set up so guests can send traffic on the Internet without changes to the company routing solution?

• A. Enable NAT on the VLAN assigned to the guest WLAN.
• B. Set up a dynamic default gateway on the Mobility Controllers (MCs).
• C. Create destination NAT rules for the guest role.
• D. Enable policy-based routing for the guest traffic.

Answer: A

NEW QUESTION 13
A network administrator wants to use unique digital certificates installed on user devices to authenticate wireless users. Which EAP method should the RADIUS server and clients support?

• A. PEAP and MS-CHAPv2
• B. EAP-TLS
• C. EAP-TTLS and MS-CHAPv2
• D. LEAP

Answer: B

NEW QUESTION 14
An Aruba Mobility Master (MM)-based solution has two Virtual MM nodes, a primary and a backup node. The solution must support 30 Virtual Mobility Controllers (VMCs) that will support a total of 960 APs.
Which VMC licenses meet the needs and DO NOT unnecessarily exceed them?

• A. two 1000 VMC licenses (MC-VA-1000)
• B. one 1000 VMC license (MC-VA-1000)
• C. two 50 VMC licenses (MC-VA-50)
• D. one 50 VMC license (MC-VA-50)

Answer: B

NEW QUESTION 15
A company plans to deploy a Mobility Master (MM) solution with two MM nodes. The MM solution will manage 10 Mobility Controller (MC) appliances that will control a total of 400 APs.
How should the network administrator install the AP licenses?

• A. 40 AP licenses on the MM and no licenses on the MC
• B. 400 AP licenses on the MM and no licenses on the MC
• C. 800 AP licenses on each MC and no licenses on the MC
• D. 800 AP licenses on the MM and 40 AP licenses on each MC

Answer: B

NEW QUESTION 16
A company has a single Aruba Mobility Master (MM)-based solution with two Mobility Controllers (MCs). Network administrators want APs in building 1 to support a WLAN but do not want APs in building 2 to support the WLAN.
How can administrator ensure that they can enforce this rule as they set up the WLAN in the Mobility Master (MM) Interface?

• A. Place APs in different buildings in different AP Groups.
• B. Assign APs in different buildings to different MM nodes.
• C. Configure APs in different buildings to use different frequency bands.
• D. Assign different radio profiles to APs in different buildings.

Answer: A

NEW QUESTION 17
A WLAN in an Aruba Mobility Master (MM)-based solution uses WPA2-Enterprise security. This WLAN currently authenticates users to Active Directory (AD), and users log in with their Windows domain credentials. Network administrators now want to authenticate the Windows clients as well, based on the client Computer Names.
What should the administrators do on MM to achieve this goal?

• A. Set up Machine Authentication on the WLAN.
• B. Set up Mac Authentication on the WLAN.
• C. Bind individual Mobility Controllers (MCs) to AD at the device level.
• D. Import the computer names from AD to the MM internal database.

Answer: A

NEW QUESTION 18
What is a requirement for the Dashboard > Traffic Analysis window on the Aruba Mobility Master (MM) to
show data?

• A. Airmatch and ClientMatch must be enabled.
• B. The solution must have active PEFNG licenses.
• C. Firewall policies must include application filtering rules.
• D. WLANs must use the decrypt-tunnel forwarding option.

Answer: B

NEW QUESTION 19
A company has an Aruba solution that is monitored by AirWave. Several users have recurring connectivity and performance issues with their wireless clients.
How can network administrators use AirWave to minitor these clients more easily?

• A. Specify the clients as Watched Cliesnts and view the tables and graphs for these clients.
• B. Click the Down icon in the Airwave banner to quickly see a list of issues with client connections.
• C. Use the Client > Tags windows to tag the client for periodic checks and analysis.
• D. Run Device Summary reports and filter for the client MAC addresses within the report.

Answer: B

NEW QUESTION 20
An Aruba Remote AP (RAP) operates in split-tunnel mode. How does the AP forward traffic?

• A. It sends all user traffic in a GRE tunnel to a central Mobility Controller (MC), and it sends control traffic in an IPsec tunnel to the controller.
• B. It sends traffic designed to the corporate network in an IPsec tunnel to a central Mobility Controller (MC), and it bridges other traffic locally.
• C. It sends user and control traffic in two separate IPsec tunnels to the Mobility Controller (MC).
• D. It sends all employee and control traffic in a GRE tunnel to a central Mobility Controller (MC), and it bridges all guest traffic locally.

Answer: B

NEW QUESTION 21
A network administrator creates a user account on an Aruba Mobility Master (MM) with the guest-provisioning role. Which task does this user have the rights to perform?

• A. set up portal pages
• B. create guest user accounts
• C. monitor guest clients
• D. create guest WLANs

Answer: B

NEW QUESTION 22
......