2021 100% Free ACMA-6.3 Daily Practice Exam With 88 Questions
ACMA-6.3 exam torrent Aruba study guide
NEW QUESTION 39
What Controller modes of operation are available from the startup wizard (Select three)?
- A. Backup controller
- B. Standalone
- C. Master
- D. Local
- E. Primary
Answer: B,C,D
NEW QUESTION 40
What is the purpose of the validuser ACL?
- A. When an AP needs to transmit data to a user, it checks the validuser ACL to make sure the user has a valid IP address
- B. Before a client is added to the controller's user table, the validuser ACL is checked to make sure the client has a valid IP address
- C. When a user transmits data through the controller, the validuser ACL is used to check if the user is in the layer 3 user-table
- D. The validuser ACL is used during 802.1X authentication to check that the client is in the layer 3 user-table
- E. A list of configured MAC addresses that define the valid users
Answer: B
NEW QUESTION 41
View the Server group screen shot above.
A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY offices. This Server Group is applied for 802.1x authentication at both locations. The user's credentials are only found in the Miami Radius server "RadiusMiami". There is no Radius synchronization and both servers are reachable. What happens when the user attempts to authenticate?
- A. The request is initially sent to RadiusNY1 then RadiusNY1 redirects the controller to send the authentication request to RadiusMiami
- B. RadiusNY1 receives the request and returns a deny. The authentication request will then be sent to RadiusMiami.
- C. The RadiusNY1 sends the request to RadiusMiami that replies to the controller
- D. The controller recognizes the users Domain and sends the authentication request directly to RadiusMiami.
- E. RadiusNY1 receives the request and returns a deny. No other action is taken.
Answer: E
NEW QUESTION 42
Which of the following cannot be accomplished from the startup wizard?
- A. VPN configuration
- B. License installation
- C. Firewall Roles
- D. Basic controller configuration
- E. WLAN configuration
Answer: A
NEW QUESTION 43
In what order does the AP dynamically discover the Master controller?
- A. DHCP option 43, DNS query, ADP Multicast, ADP Broadcast
- B. DNS query, ADP Broadcast, ADP Multicast, DHCP option 43
- C. ADP Multicast, ADP Broadcast, DHCP option 43, DNS query
- D. DHCP option 43, ADP Broadcast, ADP multicast, DNS Query
- E. DHCP option 43, ADP Multicast, ADP Broadcast, DNS query
Answer: E
NEW QUESTION 44
A wired device is connected to an untrusted port on a controller. How can a role be assigned to the device?
- A. Roles are assigned to devices connected to a trusted port
- B. A default Role can be directly assigned to an untrusted port
- C. An initial Role can be assigned directly to the VLAN
- D. Adding a wired AAA profile to a VLAN on the untrusted port
- E. The Role assigned to the untrusted port
Answer: D
NEW QUESTION 45
When local controller is selected as the controller's operation mode in the startup wizard, which is no longer configurable?
- A. VLANs and IP addressing
- B. Controller country code
- C. WLANs
- D. Licenses
- E. Time zone
Answer: C
NEW QUESTION 46
When would you use the Reject action in a firewall policy?
- A. To let your users know they they are in violation of corporate policies
- B. To let hackers know which ports are open on your firewall
- C. To let the system count the violations
- D. To tell down stream routers to use a more appropriate router
- E. To aid in troubleshooting firewall policy configuration
Answer: E
NEW QUESTION 47
In a master-local controller scenario, where is the mobility domain defined?
- A. the master controller
- B. the AP group
- C. the master and the local controllers
- D. the local controller
- E. the master and the local controllers where roaming is needed
Answer: A
NEW QUESTION 48
Which of the following is true about configuring a server group?
- A. Server rules are used to send information to the configured servers
- B. If multiple servers are assigned to the server group, all except the 1st will be ignored
- C. A server group can have more than 1 server
- D. If the internal database is used in the server group, then no external servers can be added
- E. All the servers in a server group will be used round robin style
Answer: C
NEW QUESTION 49
802.11n APs operate in which bands? (Select two)
- A. 900 MHz
- B. 5 MHz
- C. 2.4 MHz
- D. 2.4 GHz
- E. 5 GHz
Answer: D,E
NEW QUESTION 50
What are the serial console commands used to factory default an AP?
- A. Purge, write mem, reload
- B. Purge, save, boot
- C. Purge restart
- D. Write erase all
- E. Purge, save, reload
Answer: B
NEW QUESTION 51
Which is a Device Specific Attribute that can be evaluated in a user derivation rule?
- A. location by AP Name
- B. user login name
- C. controller IP
- D. controller Loopback address
- E. authentication server
Answer: A
NEW QUESTION 52
Which of the following would be appropriate for standalone MAC Authentication?
- A. Laptops
- B. Barcode scanner
- C. Admin user
- D. Guest User
- E. Internal User
Answer: B
NEW QUESTION 53
Guest access can be provided securely by combining the following components of an Aruba system: (Select two)
- A. Use restrictive firewall policies to limit the guest user's access to internal resources
- B. DoS guest users off of the system and make them use wired ports
- C. Dedicated APs
- D. Authenticate users with the internal captive portal against the internal database or other server
- E. Providing guests their own APs and controllers
Answer: A,D
NEW QUESTION 54
When configuring the Mobility Controller's internal DHCP via the startup wizard which option is NOT available for configuration (select two)?
- A. Default router
- B. Domain name
- C. Pod name
- D. Option 43
- E. Netbios name server
Answer: C,D
NEW QUESTION 55
In decrypt-tunneled forwarding mode, which of the following is true?
- A. The AP decrypts the 802.11 frame, encrypts it as an Ethernet frame and sends it to the controller
- B. The AP decrypts the 802.11 frame and bridges it on the wire
- C. The AP decrypts and then the 802.11 frame is sent in a GRE tunnel to the controller
- D. Client sets up an IPSEC tunnel with the controller
- E. Clients decrypted traffic is sent down the GRE tunnel
Answer: C
NEW QUESTION 56
Which of the following is NOT available for configuration in the startup wizard?
- A. Radius Server
- B. Administrator and enable passwords
- C. Native VLANs on a per port basis
- D. RF Plan
- E. WPA-PSK encryption
Answer: D
NEW QUESTION 57
Clients connecting to a remote AP at a branch office can get an IP address through which of the following methods? (Select three)
- A. Address must be statically assigned
- B. DHCP server at a branch office
- C. DHCP server inside the Remote AP
- D. DHCP server connected to the Remote AP's controller
- E. DHCP from global content server for Remote APs
Answer: B,C,D
NEW QUESTION 58
Which of the following is true of an Aruba Mobility Controller acting as a layer 3 router? (Select two):
- A. The Mobility Controller is the client's default router.
- B. The Mobility Controller supports BGP.
- C. DHCP can be provided by the network infrastructure or the Mobility Controller.
- D. OSPF must be configured
- E. The Mobility Controller acts as a bridge.
Answer: A,C
NEW QUESTION 59
802.1X authentication takes place:
- A. Prior to granting access to L2 media
- B. After the user has an IP address
- C. After the user sees the captive portal page
- D. Once the IPSEC tunnel is up
- E. Prior to the user associating with the AP
Answer: A
NEW QUESTION 60
Which role is assigned prior to launching the captive portal splash screen?
- A. AAA role
- B. Pre-authentication role
- C. Post-authentication role
- D. CP default role
- E. AAA-CP role
Answer: B
NEW QUESTION 61
Time range is applied directly to which one of the following:
- A. Interface
- B. ROLE
- C. Profile
- D. Firewall Rule
- E. Firewall Policy
Answer: D
NEW QUESTION 62
Which of the following deployment types is NOT a valid option when using the AP Wizard?
- A. LAN Mesh
- B. Remote Mesh
- C. LAN
- D. Roaming
- E. Remote
Answer: D
NEW QUESTION 63
......
Use Valid New ACMA-6.3 Test Notes & ACMA-6.3 Valid Exam Guide: https://www.testbraindump.com/ACMA-6.3-exam-prep.html
