ERASED TEST, YOU MAY BE INTERESTED ON Aruba Campus Access Professional - part 3
COMMENTS |
STATISTICS |
RECORDS
|
|---|
TAKE THE TEST
|
Title of test:
Aruba Campus Access Professional - part 3 Description: Aruba Campus Author:
Creation Date: 20/11/2024 Category: Others Number of questions: 20 |
Share the Test:
New Comment
No comments about this test.
Content:
|
A company recently deployed new Aruba Access Points at different branch offices Wireless
802.1X authentication will be against a RADIUS server in the cloud. The security team is concerned
that the traffic between the AP and the RADIUS server will be exposed.
What is the appropriate solution for this scenario? A. Enable EAP-TLS on all wireless devices
B. Configure RadSec on the AP and Aruba Central.
C. Enable EAP-TTLS on all wireless devices.
D. Configure RadSec on the AP and the RADIUS server
. A new network design is being considered to minimize client latency in a high-density environment. The design needs to do this by eliminating contention overhead by dedicating subcarriers to clients. Which technology is the best match for this use case? A. OFDMA B. MU-MIMO C. QWMM D. Channel Bonding . Which statements regarding Aruba NAE agents are true? (Select two ) A. A single NAE script can be used by multiple NAE agents B. NAE agents are active at all times C. NAE agents will never consume more than 10% of switch processor resources D. NAE scripts must be reviewed and signed by Aruba before being used E. A single NAE agent can be used by multiple NAE scripts. . When setting up an Aruba CX VSX pair, which information does the Inter-Switch Link Protocol configuration use in the configuration created? A. QSVI B. MAC tables C. UDLD D. RPVST+ . A customer wants to deploy a Gateway and take advantage of all the SD-WAN features. Which persona role option should be selected? A. ArubaOS 10 Branch B. ArubaOS 10 VPN Concentrator C. ArubaOS 10 Wireless D. ArubaOS 10 Mobility . You need to create a keepalive network between two Aruba CX 8325 switches for VSX configuration How should you establish the keepalive connection? A. SVI, VLAN trunk allowed all on ISL in default VRF B. routed port in custom VRF C. loopback 0 and OSPF area 0 in default VRF D. SVI, VLAN trunk allowed all on ISL in custom VRF . Your Director of Security asks you to assign AOS-CX switch management roles to new employees based on their specific job requirements After the configuration was complete, it was noted that a user assigned with the administrators role did not have the appropriate level of access on the switch. IT Certification Guaranteed, The Easy Way! 32 The user was not limited to viewing nonsensitive configuration information and a level of 1 was not assigned to their role Which default management role should have been assigned for the user? A. sysadmin B. operators C. helpdesk D. config . What is a primary benefit of BSS coloring? A. BSS color tags improve performance by allowing clients on the same channel to share airtime. B. BSS color tags are applied to client devices and can reduce the threshold for interference C. BSS color tags are applied to Wi-Fi channels and can reduce the threshold for interference D. BSS color tags improve security by identifying rogue APs and removing them from the network. . On AOS10 Gateways, which device persona is only available when configuring a Gateway-only group'? A. Mobility B. VPN Concentrator C. Branch D. Edge . You need to ensure that voice traffic sent through an ArubaOS-CX switch arrives with minimal latency What is the best scheduling technology to use for this task? A. Strict queuing B. Rate limiting C. QoS shaping D. DWRR queuing . You are implementing ClearPass Policy Manager with EAP-TLS for authenticating all corporate-owned devices. What are two possible solutions to the problem of deploying client certificates to corporate MacBooks that are joined to a Windows domain? (Select two.) A. ClearPass OnBoard B. Windows Server PKl and a GPO C. Apple Configurator and a GPO D. ClearPass OnGuard E. Mobile Device Manager . With the Aruba CX switch configuration, what is the first-hop protocol feature that is used for VSX L3 gateway as per Aruba recommendation? A. Active Gateway B. Active-Active VRRP C. SVI with vsx-sync D. VRRP . You are building a configuration in Central that will be used for a standardized network design for small sites for your company, you want to use GUI configuration for gateways and Aps, while template configuration for switches. You need to align with Aruba best practices. Which set of actions will satisfy these requirements? A. Create one group in Central for switches a second group for APs. and a third group for gateways Create a unique site for each location, and assign devices to the appropriate site. B. Create one group in Central for switches and a second group for APs and gateways. Create a unique site for each location, and assign devices to the appropriate site. C. Create a single group in Central. Create a unique site for each location, and assign devices to the appropriate site. D. Create a single group in Central. Create a unique site for each type of device, and assign devices to the appropriate site. The administrator notices that wired guest users that have exceeded their bandwidth limit are not being disconnected Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch. An administrator has performed the following configuration: What is the most likely cause of this issue? A. Change of Authorization has not been globally enabled on the switch B. The SSL certificate for CPPM has not been added as a trust point on the switch C. There is a mismatch between the RADIUS secret on the switch and CPPM. D. There is a time difference between the switch and the ClearPass Policy Manager . Refer to Exhibit: A company has deployed 200 AP-635 access points. To take advantage of the 6 GHz band, the administrator has attempted to configure a new WPA3-OWE SSID in Central but is not working as expected. What would be the correct action to fix the issue? A. Change the SSID to WPA3-Enterprise (CNSA). B. Change the SSID to WPA3-Personal. C. Change the SSID to WPA3-Enhanced Open. D. Change the SSID to WPA3-Enterprise (CCM). . A customer wants to enable wired authentication across all their CX switches One of the requirements is that the switch must be able to authenticate a single computer connected through a VoIP phone. Which feature should be enabled to support this requirement? A. Multi-Domain Authentication B. Device-Based Mode C. MAC Authentication D. Multi-Auth Mode . A company deployed Dynamic Segmentation with their CX switches and Gateways After performing a security audit on their network, they discovered that the tunnels built between the CX switch and the Aruba Gateway are not encrypted. The company is concerned that bad actors could try to insert spoofed messages on the Gateway to disrupt communications or obtain information about the network. Which action must the administrator perform to address this situation? A. Enable Secure Mode Enhanced B. Enable Enhanced security C. Enable Enhanced PAPI security D. Enable GRE security . Refer to the exhibit. With Core-1. what is the default value for config-revision? A. 0 B. 1 C. 1-0 D. 0. 0. List the WPA 4-Way Handshake functions in the correct order. Distributes an encrypted GTK to the client Exchanges messages for generating PTK Proves knowledge of the PMK Sets first initialization vector (IV). List the firewall role derivation flow in the correct order Authentication default role Initial role assigned Server derived role User derived role. |
Report abuse