Aruba Certified Mobility Professional 6.4 (ACMP-6.4) Free Practice Test
Question 1
What are the types of user derivation rules that can be applied to a user? (Choose two)
Correct Answer: A,C
Question 2
What is true about an AP in Hybrid Spectrum mode?
Correct Answer: A
Question 3
The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).
Which is the default use of this statement in an Aruba controller configuration?
Which is the default use of this statement in an Aruba controller configuration?
Correct Answer: E
Question 4
Which of the following licenses are consumed by Mesh APs advertising an SSIDs?
Correct Answer: B
Question 5
An administrator creates a WLAN in which non-registered users will be assigned the captive portal policy.
Which role should these users be placed in.
Which role should these users be placed in.
Correct Answer: D
Question 6
Referring to the diagram provided for this question, in which locations must you define the new data VLANs for wireless client traffic? (Choose two)
Correct Answer: A,D
Question 7
Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon
access-list List
----------------
Position Name Location
-------- ---- --------
1 logon-control
2 captiveportal
logon-control
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit
captiveportal
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?
(example) #show rights logon
access-list List
----------------
Position Name Location
-------- ---- --------
1 logon-control
2 captiveportal
logon-control
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit
captiveportal
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?
Correct Answer: A
Question 8
An administrator deploys a Remote AP (RAP) at a branch office. The RAP connects back to an Aruba Mobility Controller at the corporate office over the Internet. The RAP broadcasts two SSIDs: employee and guest. These are the WLAN requirements:
* Guest traffic should be sent directly to the Internet from the branch office and the RAP should broadcast the guest SSID even if the RAP loses connection with the controller.
* Corporate traffic should be tunneled back to the corporate controller, but the Internet traffic should be bridged locally.
Which RAP forwarding and operating mode should the administrator configure?
* Guest traffic should be sent directly to the Internet from the branch office and the RAP should broadcast the guest SSID even if the RAP loses connection with the controller.
* Corporate traffic should be tunneled back to the corporate controller, but the Internet traffic should be bridged locally.
Which RAP forwarding and operating mode should the administrator configure?
Correct Answer: B
Question 9
How can a role be assigned to a user, connected to an untrusted port, on a controller?
Correct Answer: B,C,D
Question 10
Which of these are NOT a client attribute that can be configured in user derivation rules?
Correct Answer: D
Question 11
Which of the following statements is true?
Correct Answer: E
Question 12
In Visual RF, Floor plans can be imported in what format?
Correct Answer: B,C,E
Question 13
Which access point models support concurrent operations in both the "b/g" band as well as the "a" band?
Correct Answer: A,C,E