Aruba Certified Mobility Associate Exam Exam Questions

Here you have the best HP HPE6-A70 practice exam questions.

Some things you may want to keep in mind about this practice exam questions:

You have 60 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on September 13, 2024

Question 1 of 60

A network administrator creates the role employees and adds this rule to it: user any any permit

The first several wireless clients assigned to the employees role are assigned IP addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees role are then assigned IP addresses in the 10.10.20.0/24.

When the Aruba firewall matches traffic from these clients to the user any any permit rule, what does it do?

A.

It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet as long as the packet has a source IP.

B.

It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops the traffic from wireless clients in the 10.10.10.0/24 subnet.

C.

It drops traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet.

D.

It permits the traffic from wireless clients in the 10.10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet.

Correct Answer: A

The rule 'user any any permit' indicates that traffic is allowed for any source IP (associated with the 'user' alias), any destination IP, and any destination service or port, with the action set to permit. Since the clients within both 10.10.10.0/24 and 10.10.20.0/24 subnets are assigned to the 'employees' role, they match the 'user' condition in the rule. Consequently, the firewall permits traffic from wireless clients in both subnets as long as there is a source IP assigned to them.

Question 2 of 60

A company has many 7220 controllers in its Aruba wireless architecture. A network administrator wants to use the Traffic Analysis dashboard in order to monitor which type of applications are being used by wireless users.

What is required for this implementation?

A.

AirMatch and ClientMatch must be enabled.

B.

The solution must have active PEFNG licenses.

C.

WLANs must use the decrypt-tunnel forwarding option.

D.

Firewall policies must include application filtering rules.

Correct Answer: B

The correct implementation to monitor which type of applications are being used by wireless users through the Traffic Analysis dashboard requires the solution to have active PEFNG licenses. This is because the PEFNG (Policy Enforcement Firewall Next Generation) license provides the necessary functionality for application visibility and control within the Aruba wireless architecture.

Question 3 of 60

A network administrator configures an Aruba Mobility Master (MM)-based solution to provide wireless access to employees. The solution must meet these criteria:

✑ Authenticate users to a network RADIUS server

✑ Enforce different Aruba firewall rules based on the user department

How can the administrator meet these criteria in the simplest way?

A.

Create a different WLAN and SSID for each department. Apply different firewall policies to each WLAN.

B.

Have the RADIUS server send different roles for users in different departments. Apply role-based firewall policies.

C.

Create multiple zones on the MM. Assign different departments are sets of firewall policies to different zones.

D.

Have the RADIUS server assign users in different departments to different VLANs. Apply firewall policies based on IP ranges.

Correct Answer: B

To meet the criteria of authenticating users to a network RADIUS server and enforcing different firewall rules based on the user department, the simplest way is for the RADIUS server to send different roles for users in different departments. Then, role-based firewall policies can be applied. This method allows for centralized management and dynamic assignment of roles and policies without needing to create multiple WLANs or VLAN configurations.

Question 4 of 60

A network administrator configures this policy:

Users to which this policy apply are unable to receive IP addresses with DHCP. How should the administrator fix the issue?

A.

Move the user any svc-dhcp permit rule to the bottom of the list.

B.

Remove the deny rule from the policy.

C.

Use the correct service alias in the user any svc-dhcp permit rule.

D.

Change user to any in the user any svc-dhcp permit rule.

Correct Answer: D

The issue is with the 'user' keyword in the 'user any svc-dhcp permit' rule. In this context, the user has not yet received an IP address from the DHCP server, and therefore the term 'user' is not applicable. Changing 'user' to 'any' allows the rule to accommodate packets from any source, including the DHCP server, enabling DHCP transactions to proceed correctly.

Question 5 of 60

An Aruba solution runs ArubaOS 8 and uses a mobility master architecture. Which feature can network administrators use to balance wireless across APs on different channels?

A.

AppRF

B.

ARM

C.

Client Match

D.

AirMatch

Correct Answer: D

AirMatch is the feature used in ArubaOS 8 with a mobility master architecture to balance wireless across APs on different channels. AirMatch focuses on automatic RF planning and optimizing channel assignments and power settings for APs, which helps in balancing the wireless load across different channels efficiently. This makes it the appropriate choice for the given scenario.