Question 1

A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

While all users authenticate with username@domainname.com type of credentials, radius1 has user accounts with the domain name portion.

Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?

AOption A

BOption B

COption C

DOption D

Answer : A

Question 2

An organization wants to deploy a WLAN infrastructure that provides connectivity to these client categories:

* Employees

* Contractors

* Guest users

* Corporate IoT legacy devices that support no authentication or encryption

Employees and contractors must authenticate with company credentials and get network access based on AD group membership. Guest users are required to authenticate with captive portal using predefined credentials. Only employees will run L2 encryption.

Which implementation plan fulfills the requirements while maximizing the channel usage?

ACreate VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal and L2 fail through.

BCreate a single VAPto run WPA2-AES and 802.1x authentication. MAC authentication L2 fail through, captive portal, and VIA support.

CCreate VAP1 to run WPA2-AES and 802.1x authentication. VAP2 to run opensystem encryption with MAC authentication, and VAP3 to run opensystem with captive portal.

DCreate VAP1 to run WPA2-AES and 802.1x authentication, and VAP2 to run opensystem encryption with MAC authentication and captive portal.

Answer : D

Question 3

Refer to the exhibit.

A network administrator has a Mobility Master (MM) Mobility Controller (MC) architecture along with the MC in the DMZ for terminating RAPs. The network firewall has been provisioned to allow access to the MC in the DMZ for both UDP 500 and 4500. Then he proceeds to provision an AP as shown in the exhibit.

Which additional configuration steps must the administrator to assure RAPs successfully contact the MC? (Choose two.)

ACreate the RAP1 account in the InternalDB of the MC.

BCreate an IP local pool and PSK at the device node level.

CCreate the RAP1 account in the InternalDB of the MM.

DAdd the RAP1 entry in the CPsec whitelist at the MM level.

ECreate an IP local pool and PSK at the /mm/mynode level.

Answer : D, E

Question 4

Refer to the exhibits.

Exhibit 1

Exhibit 2

A network administrator adds a new Mobility Controller (MC) to the production Mobility Master (MM) and deploys APs that start broadcasting the employee SSID in the West wing of the building. Suddenly, the employees report client disconnects. When accessing the MM the network administrator notices that the MC is unreachable, then proceeds to access the MC's console and obtains the outputs shown in the exhibits.

What should the network administrator do next to solve the current problem?

AOpen a TAC case and send the output of tar crash.

BKill two zombie processes then reboot the MC.

CVerify the license pools in the MM.

DDecommission the MC from the MM, and add it again.

Answer : C

Question 5

Refer to the exhibit.

After deploying several cluster pairs, the network administrator notices that all APs assigned to Cluster1 communicate with MC1 instead of being distributed between members of the cluster. Also, no IP addresses are shown under the Standby IP column.

What should the network administrator do to fix this situation?

AApply the same cluster profile to both members.

BEnable Cluster AP load balancing.

CRename the cluster profile as 'CLUSTER1'.

DPlace MCs at the same hierarchical group level.