Aruba Certified Mobility Professional 6.1 (ACMP-6.1) Free Practice Test

Question 1

When creating a firewall policy, which of the following parameters are required? (Choose all the correct answers.)

A. Action

B. Source

C. Destination

D. Log

E. Service

Correct Answer: A,B,C,E

Question 2

Which profiles are required in an AP Group to enable an SSID with VLAN 1, WPA2 and LMSIP?

A. 802.1X authentication profile wlan ssid-profile virtual-ap profile

B. Wlan ssid-profile ap-system-profile virtual-ap profile

C. Virtual-ap
ap mesh-radio-profile ap system profile

D. Virtual-ap profile ap-system profile aaa profile

Correct Answer: B

Question 3

Which of the following APs do not support dual radio operations? (Choose all the correct answers.)

A. AP 120

B. RAP - 5

C. AP 125

D. AP 124

Correct Answer: A,B

Question 4

A customer has configured a 3000 controller with the following commands:
Vlan 55
Vlan 56
Vlan 57
Interface gigabitethernet 1/0 switchport mode trunk
switchport trunk native vlan 55
switchport trunk allowed vlan 55-57
Which of the following sentences best describes this port?

A. All traffic in vlan 55, 56 and 57 will be trunked with an 802.1Q tag

B. All traffic in vlan 56 and 57 will be sent with an 802.1Q tag while vlan 55 traffic will be trunked untagged

C. All traffic in vlan 55 will be dropped and all traffic in vlan 56 and 57 will be trunked with and 802.1Q tag

D. All traffic in vlan 55 will be sent with an 802.1Q tag while vlan 56 and 57 traffic will be trunked untagged

Correct Answer: B

Question 5

Which types of encryption will an Aruba access point perform on traffic sent through a Campus AP Virtual AP (VAP) profile in Tunnel forwarding mode?

A. None of the above

B. TKIP & AES

C. WEP, TKIP, & AES

D. WEP & AES

E. WEP & TKIP

Correct Answer: A

Question 6

Referring to the diagram provided for this question, representing an office wireless LAN deployment, there will be approximately 250 users in the offices section of the building.

According to Aruba best practice, which network device is the best choice for the wireless clients' default gateway?

A. device 'C'

B. device 'D'

C. device 'A'

D. device 'B'

Correct Answer: D

Question 7

When a port has been configured as untrusted, but no wired access AAA profile has been configured. A user connects to that port. What happens next?

A. When configuring the port as untrusted, an error message of "no wired access AAA profile exists". Therefore this is an invalid configuration.

B. Since there is no wired access AAA profile the user will be given the logon role

C. The user will fall into the default wired access AAA profile and will be given the initial role

D. Since there is no wired access AAA profile, only port policies will be applied

Correct Answer: B

Question 8

An AP was configured to use dynamic controller discovery and assigned to an AP group, then powered off for over a week. When the AP is redeployed, what previous configuration will it retain?

A. It's Serial Number

B. The controllers IP address

C. The controller IP address and the AP Group

D. It's AP name and AP Group

E. After a few days all configurations is lost

Correct Answer: D

Question 9

A user logged in with the Captive Portal settings shown in the above screen capture.

What does the user need to do to logout?

A. click Logout on the browser screen

B. wait 60 minutes then logout

C. he cannot logout

D. wait 30 minutes then logout

Correct Answer: A

Question 10

View the Server group screen shot above.

A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. This Server Group is applied for 802.1x authentication at both locations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronization. What happens when the user attempts to authenticate?

A. RadiusNY1 receives the request and returns a deny. No other action is taken.

B. The controller recognizes the users Domain and sends the authentication request directly to RadiusMiami.

C. The request is initially sent to RadiusNY1 then RadiusNY1 redirects, the controller, to send the authentication request to RadiusMiami

D. RadiusNY1 receives the request and returns a deny. The authentications request will then be sent to RadiusMiami.

Correct Answer: A

Question 11

Which of the following controllers has an integrated single radio AP?

A. 3200

B. 620

C. 650

D. 651

Correct Answer: D

Question 12

A client device associates with an SSID provisioned with 802.1X authentication. The client is set for LEAP authentication. EAP termination (AAA Fastconnect) is enabled on the controller. But the client continuously cycles through the authentication process. Which of the following could cause this?

A. The controller does not support LEAP in this mode.

B. The DHCP server is not enabled.

C. The client has an expired or revoked server certificate.

D. The VLAN is missing for the SSI

E. The Radius server is rejecting the client credentials.

Correct Answer: A

Question 13

Which of the following are valid RAP forwarding modes (select all that apply)?

A. Tunnel

B. Backup

C. Bridge

D. Split-Tunnel

Correct Answer: A,C,D

Question 14

Which of the following statement is true of the Spectrum Mode?

A. Spectrum mode can only be configured for one AP at a time

B. An AP can be in spectrum mode for both 2.4 and 5G bands at the same time

C. Spectrum Mode is configured under Spectrum Profile

D. No licenses are required to run an AP in Spectrum mode

Correct Answer: B

Welcome to TestSimulate

Aruba Certified Mobility Professional 6.1 (ACMP-6.1) Free Practice Test