ACMA-6.3 Exam Questions - Real & Updated Questions PDF
Pass Guaranteed Quiz 2022 Realistic Verified Free Aruba
NEW QUESTION 48
What are some best practices when configuring the Aruba Firewall (Select two)?:
- A. Create a different policy for each unique rule
- B. Use aliases when possible
- C. Take actions like blacklisting when users violate policies
- D. Write rules from least specific to most specific
- E. Create different policies for access to different servers
Answer: B,C
NEW QUESTION 49
WPA and WPA2 can use the following authentication methods: (Select two)
- A. PSK
- B. WEP Keys
- C. Captive Portal
- D. IPSEC
- E. 802.1X
Answer: A,E
NEW QUESTION 50
Which is a Device Specific Attribute that can be evaluated in a user derivation rule?
- A. controller IP
- B. location by AP Name
- C. controller Loopback address
- D. user login name
- E. authentication server
Answer: B
NEW QUESTION 51
In a Campus AP deployment, an access point has been provisioned statically with an IP address, subnet mask, default gateway and Controller IP address. Control Plane Security has been disabled. Both the Controller and the Access Point are using 6.3 firmware. If a 3rd party firewall is placed in between the AP and controller, what traffic would need to be allowed for the AP to boot successfully and broadcast Wireless Networks? (Select two)
- A. PAPI
- B. NTP
- C. SNMP
- D. GRE
- E. DHCP
Answer: A,D
NEW QUESTION 52
Which match condition can be used by a server derivation rule? (Choose two)
- A. greater than
- B. inverse of
- C. less than
- D. equals
- E. contains
Answer: D,E
NEW QUESTION 53
When looking at clients in the 'Monitoring Clients' section of the Controller, which of the following information is NOT visible?
- A. Role
- B. Age
- C. Method of authentication
- D. MAC address
- E. Output power of client radio
Answer: E
NEW QUESTION 54
What type of authentication servers are selectable in the WLAN wizard? (Select three):
- A. RADIUS
- B. Kerberos
- C. Tacacs
- D. Internal database
- E. LDAP
Answer: A,D,E
NEW QUESTION 55
In decrypt-tunneled forwarding mode, which of the following is true?
- A. Client sets up an IPSEC tunnel with the controller
- B. The AP decrypts the 802.11 frame and bridges it on the wire
- C. The AP decrypts the 802.11 frame, encrypts it as an Ethernet frame and sends it to the controller
- D. Clients decrypted traffic is sent down the GRE tunnel
- E. The AP decrypts and then the 802.11 frame is sent in a GRE tunnel to the controller
Answer: E
NEW QUESTION 56
What is the IP address of the controller when using the startup wizard?
- A. 192.168.1.1
- B. 172.16.0.254
- C. 172.16.0.1
- D. 10.1.10.100
- E. 10.1.1.1
Answer: B
NEW QUESTION 57
Which answer correctly orders the following AP boot processes as they occur?
a.AP Transfers OS from controller
b.AP builds GRE tunnel to the controller
c.AP determines IP address of the controller
d.AP Radio is enabled
- A. b, d, a, c.
- B. c, a, b, d.
- C. c, b, a, d.
- D. a, c, d, b.
- E. a, b, c, d.
Answer: B
NEW QUESTION 58
Which of these are NOT a client attribute that can be configured in user derivation rules?
- A. MAC address
- B. DHCP option value
- C. BSSID
- D. encryption
- E. Filter ID
Answer: E
NEW QUESTION 59
802.11n APs operate in which bands? (Select two)
- A. 5 GHz
- B. 2.4 MHz
- C. 900 MHz
- D. 5 MHz
- E. 2.4 GHz
Answer: A,E
NEW QUESTION 60
How many Aruba controllers can be added to a single mobility domain?
- A. 256 controllers with no more than 1024 subnets
- B. There is no controller limit
- C. Controllers supporting up to 6000 AP's
- D. 128 controllers supporting 2000 users
- E. 64 controllers of any type
Answer: B
NEW QUESTION 61
When would you use the Reject action in a firewall policy?
- A. To aid in troubleshooting firewall policy configuration
- B. To let the system count the violations
- C. To tell down stream routers to use a more appropriate router
- D. To let your users know they they are in violation of corporate policies
- E. To let hackers know which ports are open on your firewall
Answer: A
NEW QUESTION 62
Which of the following is NOT available for configuration via startup wizard?
- A. Country Code
- B. VLAN IP
- C. Controller name
- D. Firewall Roles
- E. Loopback IP
Answer: E
NEW QUESTION 63
Which ARM function converts APs with excess capacity into Air Monitors?
- A. Airtime fairness
- B. Band Steering
- C. Client aware scanning
- D. Coordinated access to a single channel
- E. Co-channel interference mitigation
Answer: E
NEW QUESTION 64
Which of these are supported by the Aruba Controller? (Select two)
- A. AES Encryption
- B. HSRP
- C. SNMP
- D. BGP
- E. Blowfish encryption
Answer: A,C
NEW QUESTION 65
A port on a controller has been configured as untrusted. No wired access AAA profile or Global AAA profile is configured. When a user connects to that port which of the following statements is true?
- A. Since there is no wired access AAA profile, only port policies will be applied
- B. The user will fall into the default wired access AAA profile and will be given the initial role.
- C. Since there is no wired access AAA profile or Global AAA profile the user will be given the logon role.
- D. the user is denied all access automatically because no wired access AAA or Global AAA profile is assigned.
- E. When configuring the port as untrusted, an error message of "no wired access AAA profile exists" Therefore this is an invalid configuration.
Answer: C
NEW QUESTION 66
......
Get to the Top with ACMA-6.3 Practice Exam Questions: https://www.passtestking.com/Aruba/ACMA-6.3-practice-exam-dumps.html