100% Passing Guarantee - Brilliant ACMA-6.3 Exam Questions PDF [Dec-2021]
ACMA-6.3 Dumps 2021 - NewAruba ACMA-6.3 Exam Questions
NEW QUESTION 22
Firewall policy should be written from:
- A. Least specific to most specific
- B. Order is not important
- C. Most important resources first
- D. Most specific to least specific
- E. Policies with the most rules 1st
Answer: D
NEW QUESTION 23
Which is the strongest encryption type?
- A. DES
- B. MSCHAPv2
- C. WEP
- D. AES
- E. TKIP
Answer: D
NEW QUESTION 24
When configuring roles under 'Access Control' in the Controller's Configuration page, what does the 'show reference' action tell us?
- A. Which profiles refer to the role
- B. What users are currently assigned that role
- C. What authentication methods use Roles with these policies
- D. Which firewall hits were detected that refer to the role
- E. What policies are inside the role
Answer: A
NEW QUESTION 25
Which match condition can be used by a server derivation rule? (Choose two)
- A. greater than
- B. inverse of
- C. less than
- D. equals
- E. contains
Answer: D,E
NEW QUESTION 26
A port firewall policy is applied to a trunk port that denies controller access. An "allow all" Vlan firewall policy is applied to VLAN 33 on the same port. A user connected to VLAN 33 on that port attempts to gain access to the controller. Which of the following statements is true?
- A. You cannot place a firewall policy on a Ports Vlan when the Port already has a policy, therefore no controller access
- B. The Vlan policy is applied, therefore access to the controller is allowed
- C. The Port policy is applied, therefore no controller access
- D. When locally connected to a controller's port you always have controller access
- E. The Vlan policy is applied, then the port policy, therefore no controller access
Answer: B
NEW QUESTION 27
Remote AP in tunnel mode, by default, uses which of the following to encrypt user traffic back to the mobility controller?
- A. The AP does not encrypt user traffic. The user's link layer encryption is used.
- B. L2TP over IPSec is used to carry user traffic and control traffic
- C. Remote AP traffic is unencrypted
- D. Certificate based tunnel
- E. PPTP is used to tunnel user traffic
Answer: A
NEW QUESTION 28
Which ARM function converts APs with excess capacity into Air Monitors?
- A. Airtime fairness
- B. Band Steering
- C. Client aware scanning
- D. Coordinated access to a single channel
- E. Co-channel interference mitigation
Answer: E
NEW QUESTION 29
Which of these are NOT a client attribute that can be configured in user derivation rules?
- A. MAC address
- B. DHCP option value
- C. BSSID
- D. encryption
- E. Filter ID
Answer: E
NEW QUESTION 30
When configuring a guest WLAN via the WLAN section of the startup wizard, which
security option is NOT available?
- A. Captive Portal with no authentication or registration
- B. Captive portal with authentication via credentials
- C. Direct access to the internet with no captive portal
- D. Captive portal with email registration
- E. WEP encryption
Answer: E
NEW QUESTION 31
Which role is assigned prior to launching the captive portal splash screen?
- A. AAA-CP role
- B. CP default role
- C. Post-authentication role
- D. Pre-authentication role
- E. AAA role
Answer: D
NEW QUESTION 32
A port on a controller has been configured as untrusted. No wired access AAA profile or Global AAA profile is configured. When a user connects to that port which of the following statements is true?
- A. Since there is no wired access AAA profile, only port policies will be applied
- B. The user will fall into the default wired access AAA profile and will be given the initial role.
- C. Since there is no wired access AAA profile or Global AAA profile the user will be given the logon role.
- D. the user is denied all access automatically because no wired access AAA or Global AAA profile is assigned.
- E. When configuring the port as untrusted, an error message of "no wired access AAA profile exists" Therefore this is an invalid configuration.
Answer: C
NEW QUESTION 33
Which method can APs use to discover a controller?
- A. HTTPS
- B. PAPI
- C. Dynamic DNS (DDNS)
- D. DHCP
- E. PnP
Answer: D
NEW QUESTION 34
The Guest Provisioning user account has the ability to do which of the following?
- A. Add a new employee to the internal database
- B. Assign a Role to a guest account
- C. Change the available data fields on the guest provisioning page
- D. Change the "look" and "feel" of the guest provisioning page
- E. Add a guest user to the internal database
Answer: E
NEW QUESTION 35
How many Aruba controllers can be added to a single mobility domain?
- A. 256 controllers with no more than 1024 subnets
- B. There is no controller limit
- C. Controllers supporting up to 6000 AP's
- D. 128 controllers supporting 2000 users
- E. 64 controllers of any type
Answer: B
NEW QUESTION 36
Which of the following is true of an Aruba Mobility Controller acting as a layer 3 router? (Select two):
- A. The Mobility Controller is the client's default router.
- B. The Mobility Controller acts as a bridge.
- C. DHCP can be provided by the network infrastructure or the Mobility Controller.
- D. The Mobility Controller supports BGP.
- E. OSPF must be configured
Answer: A,C
NEW QUESTION 37
Which of the following core components of ARM enables intelligent distribution of clients across available channel capacity?
- A. Multi-band scan
- B. Rogue AP detection
- C. Coordinated Access to a Single Channel
- D. Spectrum load balancing
- E. Band steering
Answer: D
NEW QUESTION 38
Where in the controller would we configure a wireless network NOT to use encryption?
- A. ARM profile
- B. AAA profile
- C. VAP profile
- D. Radio profile
- E. SSID profile
Answer: E
NEW QUESTION 39
What is the IP address of the controller when using the startup wizard?
- A. 192.168.1.1
- B. 172.16.0.254
- C. 172.16.0.1
- D. 10.1.10.100
- E. 10.1.1.1
Answer: B
NEW QUESTION 40
View the Server group screen shot above.
A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. This Server Group is applied for 802.1x authentication at both locations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronization and both servers are reachable. What happens when the user attempts to authenticate?
- A. RadiusNY1 receives the request and returns a deny. The authentication request will then be sent to RadiusMiami.
- B. The controller recognizes the users Domain and sends the authentication request directly to RadiusMiami.
- C. The RadiusNY1 sends the request to RadiusMiami that replies to the controller
- D. The request is initially sent to RadiusNY1 then RadiusNY1 redirects the controller to send the authentication request to RadiusMiami
- E. RadiusNY1 receives the request and returns a deny. No other action is taken.
Answer: E
NEW QUESTION 41
Which of these are supported by the Aruba Controller? (Select two)
- A. AES Encryption
- B. HSRP
- C. SNMP
- D. BGP
- E. Blowfish encryption
Answer: A,C
NEW QUESTION 42
When adding licenses in the startup wizard license screen a reboot is required:
- A. After each license is installed
- B. Once the last License is added
- C. Only if the Policy Enforcement Firewall license is installed
- D. A reboot is not required until you have completed the configuration wizard
- E. Before any other configuration can take place
Answer: D
NEW QUESTION 43
......
Free ACMA-6.3 braindumps download: https://www.prep4pass.com/ACMA-6.3_exam-braindumps.html
ACMA-6.3 Dumps for Pass Guaranteed - Pass ACMA-6.3 Exam: https://drive.google.com/open?id=18yAKVzIExPhNDzlfe1MdT-AFxIX6Y0v3
