HPE6-A71 Practice Exam Questions with Answers Aruba Certified Mobility Professional Exam Certification

An administrator supports Aruba Mobility Controllers (MCs) managed by a Mobility Master (MM) in a noncluster deployment. The administrator performs these tasks on the MM for the MCs:

• Enables L3 IP mobility for the respective VAPs on the MCs
• Creates a L3 domain and places the MCs in the domain

However, roaming does not work when users roam from an AP connected to one controller in the domain to an AP connected to a different controller in the domain.

What must the administrator do to fix this problem?

D18912E1457D5D1DDCBD40AB3BF70D5D

An administrator implements per-user tunneled node that involves ArubaOS-Switches and Aruba Mobility Controllers (MCs). What always happens when a wired client connects to the network?

An administrator currently manages an L2 cluster with Aruba Mobility Controllers (MCs) that run ArubaOS 8.x. What happens when the administrator enables AP load balancing?

Refer to the exhibit.

An administrator implements AP licensing on a Mobility Master (MM).

Network engineers at CampusA want to deploy an additional 100 APs. Currently all of the AP licenses in CampusA and CampusB are allocated, but only 200 of the AP licenses in CampusC are allocated.

• Each campus is responsible to purchase its own AP licenses.
• There are 900 AP licenses deployed in the global pool.
• There are three dedicated pools.
• From the global pool, 300 AP licenses are assigned to each dedicated pool.

What can the administrator do to add capacity for CampusA in alignment with campus policies?

Refer to the exhibits.

Exhibit 1: WLAN VAP configuration

Exhibit 2: Microsoft NPS server configuration

Exhibit 3: Server group configuration for the VAP.

An employee authenticates with the username employee and the correct password. However, once the user authenticates, an administrator notices that the employee is assigned the authenticated role and not the desired employee role.

What should the administrator do to solve this problem?

Which forwarding mode is used for a WLAN if a RAP needs to decrypt all user traffic and forward it locally?

An administrator wants to use AirWave to manage the configuration policy settings of a set of ArubaOS-Switches. Where should the administrator perform this action?

Refer to the exhibit.

What can be determined from the command output shown in the exhibit?

An administrator purchases a RAP and has it shipped directly to a branch office. The branch office plugs in the RAP and the RAP contacts Aruba Activate. The RAP learns the Mobility Controller (MC) IP address and connects to it. However, the connection fails.

Upon verifying the MC IP address in Aruba Activate, what should the administrator do to allow the RAP connection to succeed?

An administrator sets up a firewall policy that implements split-tunneling for RAPs. Which firewall rule action should the administrator specify for traffic that the RAP should forward directly to the Internet?

An administrator deploys a RAP at a branch office. The RAP should send all employee corporate traffic to the Mobility Controller (MC) and Internet traffic should stay local.

Which forwarding mode should the administrator configure for the employee WLAN to allow for this forwarding?

Refer to the exhibit.

The branch office RAP shown in the exhibit provides secure wireless employee access. Because of security concerns, the company’s security policy does not allow wireless guest access. Some customers that visit the Branch office need Internet access. A RAP’s Ethernet Port 3 is used for wired guest access and Port2 is used for wired employee access. When employees connect to Port2, they are authenticated successfully and split-tunnel policy allows them access to both corporate and Internet resources from the Branch office. Guest users, however, cannot access Internet resources on Port 3.

How can the administrator provide guest users Internet access?

Which network components are tracked by Aruba Clarity? (Choose two.)

An administrator mistakenly configures the wrong VLAN setting on a managed controller's interface. This

causes the controller to lose management access to the Mobility Master (MM). The administrator knows that the auto roll-back feature will revert the managed controller to a previous configuration that was used prior to the change.

Which command can the administrator use to validate that the rollback process is successful?

Which configuration command needs to be executed on an Aruba Mobility Controller (MC) to forward AP statistical data to an AirWave Management Platform (AMP)?

An administrator needs to support Unified Communications and Collaboration (UCC) in a company’s network. The network infrastructure requires the OpenFlow protocol to support SDN-capable applications.

Which controller topology meets these requirements?

What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture?

Which Aruba Unified Communications and Collaboration (UCC) deployment mode should be used when UCC is disabled on the Mobility Controllers (MCs)?

Refer to the exhibit. What can the determined from the command shown in the exhibit?

An administrator mistakenly configures the wrong VLAN setting on a managed controller’s interface. This causes the controller to lose management access to the Mobility Master (MM).

Which mechanism will then attempt to restore the previous working configuration on the managed controller?

In the WebUI of an Aruba Mobility Controller (MC), where recommended approach for this process generate a tech support file that the Aruba Technical Support team can use to help customers?

An administrator sets up a network scan set in AirWave to scan a subnet to identify devices for a firmware upgrade. The scan completes and AirWave successfully uses the SNMP credentials to validate SNMP access. However, SSH access fails and the administrator must manually configure the SSH credentials used for all of these devices.

What should the administrator have done before running the network scan?

Which methods can be used to configure RAP redundancy when connected to two redundant Aruba Mobility Controllers (MCs) in the DMZ? (Select two.)

Refer to the exhibit.

An administrator configures a policy for an AP Group. Port 3 of a RAP is a trunk that connects to a switch at a branch office. VLAN 1 is untagged and VLANs 10 (for data) and 11 (for voice) are tagged. The administrator applies an ACL inbound on Port 3 of the RAP.

How does this configuration affect traffic on Port 3?

A customer uses an SIP application that is not supported by Aruba United Communications and Collaboration (UCC). Which voice deployment mode should the administrator implement on Aruba Mobility Controllers (MCs) to support this application?

Where would an administrator define the split-tunneling mode for a RAP located at a branch office?

An administrator supports an Aruba wireless network. The administrator configures as AAA profile referenced in a WLAN profile, where:

• The initial role assigned in the AAA profile is logon
• The MAC authentication default role is guest
• The 802.1X authentication role is authenticated

ClearPass is used to verify the 802.1X user credentials. A user authenticates and is assigned the authenticated default role instead of the role assigned in the ClearPass server configuration.

What must the administrator do so that the ClearPass role is assigned to the user?

Refer to the exhibit.

An administrator configures a split-tunnel policy to be used by RAPs at branch offices. Under the Configuration section on the Mobility master (MM) shown in the exhibit, where should the administrator configure the split-tunnel mode so that it can be deployed to the RAPs?

An administrator implements a cluster of four Aruba Mobility Controllers (MCs) managed by a Mobility Master (MM). An AP Group is configured with two VAPs and deployed to an AP that will connect to the cluster. Each AP contains two radios.

How many GRE tunnels will be built from the AP to the Active AP Anchor Controller (A-AAC)?

An administrator needs to implement multiple configuration changes on a set of Aruba Mobility Controllers

(MCs) that involve both VLAN and interface configurations at the same time. The controllers are deployed in a cluster.

How can the administrator accomplish this task?

An administrator configures an ArubaOS-Switch for per-user tunneled node. Which protocols does the switch use to establish and maintain a connection with the Aruba Mobility Controller (MC)? (Select two.)

Refer to the exhibit.

A user uses a wireless client for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session?

A network of Mobility Controllers (MCs) is managed by a Mobility Master (MM). An administrator misconfigures the IP addressing on an MC and the MC loses connectivity to the MM.

How should the administrator fix this problem?

An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they have full access to corporate resources.

What must the administrator do to restrict desktop usage based on the users’ role assignment?

Refer to the exhibit.

A user uses Microsoft Windows for a wireless session. Based on the output shown in the exhibit for the selected Aruba AP, what is the possible problem with this user’s wireless session?

An administrator wants to implement bandwidth limits for guest users to restrict their Internet usage. On the Mobility Master (MM), where would the administrator define these limits?

An administrator configures the MultiZone feature for a company network, where a mobility cluster is the primary zone and a standalone controller in the company’s DMZ represents a secondary data zone. The administrator configures two AP Groups and respective VAPs for the zones on the Mobility Master (MM) in the primary zone. When the APs boot up and establish connections to both zones, the administrator notices that no data connections are established to the data zone.

What must the administrator do to fix this problem?

An administrator creates a user role that department A in a company uses. Various other roles exist for other departments. All employees connect to the same ESSID, which authenticates to an external AAA server. How should the administrator configure to assign the appropriate roles to the employees?

An administrator wants to implement AAA in an Aruba wireless environment that references two ClearPass servers for redundancy. To use these servers, what must the administrator create that will be referenced in the AAA profile?

What is true about clustering and AP connections to cluster members?

An administrator moves an AP from Campus 1 to Campus 2. At the Campus 2, the moved AP does not connect to a controller and download an AP Group configuration.

Which process should the administrator perform to reset the AP back to its initial default state?

An administrator wants to simulate network traffic and analyze results in an Aruba wireless network to test components such as WPA-2, DHCP, and other protocols. Which Aruba solution implements these functions?

Refer to the exhibit.

An administrator implements the MultiZone feature. The administrator sets up five zones as shown in the exhibit.

-Zone A has six controllers that form a cluster.

-Zone B has three controllers that from a cluster.

-Zones C, D, and E have a single standalone controller each.

A total of 13 VAPs are created across the five zones. A zone needs to accept RAP connections form branch offices. All zones have the same AP Group name. One of the zones will not accept connections from the MultiZone APs.

Which could be a cause of this problem?

An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP, where their credentials are validated by the controller’s local database. The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.

Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

Which license type must an administrator purchase to use Spectrum Monitoring?

An administrator has multiple AAA servers, some Microsoft RADIUS and some ClearPass. When 802.1X users authenticate, the administrator wants to ensure that the authentication requests are handled by the appropriate AAA server. Users enter their username in this format: username@domain_name.

What must the administrator implement to ensure the correct AAA server processes the authentication request?