Practice ACMA-6.3 Questions With Certification guide Q&A from Training Expert DumpsValid
Free Aruba ACMA-6.3 Test Practice Test Questions Exam Dumps
NEW QUESTION 27
Which of the following would be appropriate for standalone MAC Authentication?
- A. Barcode scanner
- B. Internal User
- C. Admin user
- D. Laptops
- E. Guest User
Answer: A
NEW QUESTION 28
When would you use the Reject action in a firewall policy?
- A. To tell down stream routers to use a more appropriate router
- B. To let hackers know which ports are open on your firewall
- C. To aid in troubleshooting firewall policy configuration
- D. To let your users know they they are in violation of corporate policies
- E. To let the system count the violations
Answer: C
NEW QUESTION 29
Which of the following is NOT available for configuration via startup wizard?
- A. Firewall Roles
- B. VLAN IP
- C. Loopback IP
- D. Controller name
- E. Country Code
Answer: C
NEW QUESTION 30
Which method can APs use to discover a controller?
- A. HTTPS
- B. DHCP
- C. PnP
- D. Dynamic DNS (DDNS)
- E. PAPI
Answer: B
NEW QUESTION 31
Which firewall action is necessary in a guest pre-authentication role to display the captive portal login screen?
- A. allow CP
- B. allow all
- C. route
- D. DST-NAT
- E. SRC-NAT
Answer: D
NEW QUESTION 32
Which match condition can be used by a server derivation rule? (Choose two)
- A. greater than
- B. inverse of
- C. less than
- D. contains
- E. equals
Answer: D,E
NEW QUESTION 33
Which roles must be configured via the startup wizard when captive portal is being configured (Select Two)
- A. Authenticated role
- B. Pre-Authentication role
- C. Unauthenticated role
- D. Roles are not used on the Aruba system
- E. The Logon Role
Answer: A,B
NEW QUESTION 34
Which of the following is NOT available for configuration in the startup wizard?
- A. WPA-PSK encryption
- B. Radius Server
- C. RF Plan
- D. Native VLANs on a per port basis
- E. Administrator and enable passwords
Answer: C
NEW QUESTION 35
The characteristics of 802.1X Authentication include (Select three):
- A. Port based authentication
- B. Support of RADIUS external authentication
- C. L3 Authentication
- D. EAP terminates on authenticator
- E. Extensible Authentication Protocol
Answer: A,B,E
NEW QUESTION 36
Which is the strongest encryption type?
- A. MSCHAPv2
- B. AES
- C. WEP
- D. TKIP
- E. DES
Answer: B
NEW QUESTION 37
A port firewall policy is applied to a trunk port that denies controller access. An "allow all" Vlan firewall policy is applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain access to the controller. Which of the following statements is true?
- A. The Vlan policy is applied, then the port policy, therefore no controller access
- B. The Port policy is applied, therefore no controller access
- C. The Vlan policy is applied, therefore access to the controller is allowed
- D. When locally connected to a controller's port you always have controller access
- E. You cannot place a firewall policy on a Ports Vlan when the Port already has a policy, therefore no controller access
Answer: C
NEW QUESTION 38
Which of the following is true about configuring a server group?
- A. If multiple servers are assigned to the server group, all except the 1st will be ignored
- B. If the internal database is used in the server group, then no external servers can be added
- C. A server group can have more than 1 server
- D. All the servers in a server group will be used round robin style
- E. Server rules are used to send information to the configured servers
Answer: C
NEW QUESTION 39
When configuring the Mobility Controller's internal DHCP via the startup wizard which option is NOT available for configuration (select two)?
- A. Option 43
- B. Domain name
- C. Default router
- D. Pod name
- E. Netbios name server
Answer: A,D
NEW QUESTION 40
Remote AP in tunnel mode, by default, uses which of the following to encrypt user traffic back to the mobility controller?
- A. Remote AP traffic is unencrypted
- B. L2TP over IPSec is used to carry user traffic and control traffic
- C. The AP does not encrypt user traffic. The user's link layer encryption is used.
- D. PPTP is used to tunnel user traffic
- E. Certificate based tunnel
Answer: C
NEW QUESTION 41
View the Server group and User Roles screen shots above.
A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of "employee".
What Role will the user get?
- A. The User will get the Emp Role
- B. The User will get the Employee Role
- C. The User will get the 802.1x authentication default Role
- D. The User will get the employee Role
- E. The User will get the initial Role
Answer: C
NEW QUESTION 42
Guest access can be provided securely by combining the following components of an Aruba system: (Select two)
- A. Dedicated APs
- B. Providing guests their own APs and controllers
- C. Authenticate users with the internal captive portal against the internal database or other server
- D. DoS guest users off of the system and make them use wired ports
- E. Use restrictive firewall policies to limit the guest user's access to internal resources
Answer: C,E
NEW QUESTION 43
Which answer correctly orders the following AP boot processes as they occur?
a.AP Transfers OS from controller
b.AP builds GRE tunnel to the controller
c.AP determines IP address of the controller
d.AP Radio is enabled
- A. c, b, a, d.
- B. a, b, c, d.
- C. b, d, a, c.
- D. c, a, b, d.
- E. a, c, d, b.
Answer: D
NEW QUESTION 44
Which of the following is NOT one of the four continuous functions of ARM?
- A. Collecting and classifying information obtained during background scans
- B. Monitoring the environment for the current operating and alternate channels
- C. Determining the best controller for APs to terminate
- D. Computing the best channel and power level to operate on
- E. Create two indices for each AP, for each channel
Answer: C
NEW QUESTION 45
......
Prepare Top Aruba ACMA-6.3 Exam Audio Study Guide Practice Questions Edition: https://testprep.dumpsvalid.com/ACMA-6.3-brain-dumps.html