Question 6 of 49

An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8 x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.

Which two items should the administrator verify that might be the cause of this problem? (Choose two.)

    Correct Answer: B, D

    To address the issue of the ClearPass server assigning a different role than expected to an authenticated user, the administrator should verify two key aspects. First, the spelling of the role on the ClearPass server should be checked. A misspelled role name could prevent proper mapping between the ClearPass server and the wireless controller. Second, the administrator should ensure that the role exists on the Managed Network. If the role defined in ClearPass does not exist on the network infrastructure, the system will not be able to apply it correctly to the user.

Question 7 of 49

A customer uses an SIP application that is not supported by Aruba United Communications and Collaboration (UCC). Which voice deployment mode should the administrator implement on Aruba Mobility Controllers (MCs) to support this application?

    Correct Answer: A

    Heuristic mode should be implemented on Aruba Mobility Controllers (MCs) to support SIP applications that are not specifically supported by Aruba UCC. This mode allows the controller to dynamically identify and prioritize voice traffic without needing prespecified application identification profiles, ensuring that the quality of service is maintained for the SIP application.

Question 8 of 49

A company has a wireless network that contains a cluster of four Aruba 7030 Mobility Controllers (MC) managed by a Mobility Master (MM) located in the data center. The company has Aps deployed that are nearing the capacity of the cluster. The administrator wants to increase AP capacity.

How can the administrator solve the problem?

    Correct Answer: A

    To increase the AP capacity, the administrator needs to add a new controller to the Mobility Master. Since the current cluster of four 7030 controllers is at its maximum capacity and an existing cluster does not support adding a 72xx controller or a Virtual Mobility Controller, adding a new 7030 controller to the Mobility Master is the appropriate solution. This will allow for the expansion without exceeding the capacity limitations of the existing controllers.

Question 9 of 49

An Administrator supports a group of employees that connect to the corporate office using the VIA client. An Aruba Mobility Controller (MC), behind a corporate firewall, terminates the users VPN sessions. The VPN sessions fail to establish because of the existing firewall rules.

Which connections must the administrator allow on the firewall? (Choose three.)

    Correct Answer: B, D, E

    To establish a VPN connection, the administrator must allow specific connections on the firewall. UDP port 4500 is used for IPsec NAT-T (NAT Traversal), and TCP port 443 is used for HTTPS, which is essential for secure communication. TCP port 4443 is also required as it is used for VIA client communication. Therefore, the required connections that must be allowed on the firewall are UDP 4500, TCP 443, and TCP 4443.

Question 10 of 49

A group of users on the same floor of a campus residence experience connectivity problems continuously throughout the morning. The administrator suspects that it is a L1 problem with physical interference.

What can the administrator do to find the cause of this problem?

    Correct Answer: A

    The administrator can access a controller’s spectrum analysis data directly from AirWave with Quick Links. This would allow them to quickly identify any physical interference issues that might be causing connectivity problems for users on the same floor of the campus residence.