Page: 1
/ 12
Total 60 questions
A network administrator creates the role employees and adds this rule to it: user any any permit
The first several wireless clients assigned to the employees role are assigned IP addresses in the 10.10.10.0/24 subnet. Several other wireless clients with the employees role are then assigned IP addresses in the 10.10.20.0/24.
When the Aruba firewall matches traffic from these clients to the user any any permit rule, what does it do?
- A. It permits traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet as long as the packet has a source IP.
- B. It permits the traffic from wireless clients in the 10.10.20.0/24 subnet, but drops the traffic from wireless clients in the 10.10.10.0/24 subnet.
- C. It drops traffic from wireless clients in both the 10.10.10.0/24 and 10.10.20.0/24 subnet.
- D. It permits the traffic from wireless clients in the 10.10.10.0/24 subnet, but drops the traffic from wireless clients in the 10.10.20.0/24 subnet.
Answer : A
A company has many 7220 controllers in its Aruba wireless architecture. A network administrator wants to use the Traffic Analysis dashboard in order to monitor which type of applications are being used by wireless users.
What is required for this implementation?
- A. AirMatch and ClientMatch must be enabled.
- B. The solution must have active PEFNG licenses.
- C. WLANs must use the decrypt-tunnel forwarding option.
- D. Firewall policies must include application filtering rules.
Answer : B
A network administrator configures an Aruba Mobility Master (MM)-based solution to provide wireless access to employees. The solution must meet these criteria:
-> Authenticate users to a network RADIUS server
-> Enforce different Aruba firewall rules based on the user department
How can the administrator meet these criteria in the simplest way?
- A. Create a different WLAN and SSID for each department. Apply different firewall policies to each WLAN.
- B. Have the RADIUS server send different roles for users in different departments. Apply role-based firewall policies.
- C. Create multiple zones on the MM. Assign different departments are sets of firewall policies to different zones.
- D. Have the RADIUS server assign users in different departments to different VLANs. Apply firewall policies based on IP ranges.
Answer : B
A network administrator configures this policy:
Users to which this policy apply are unable to receive IP addresses with DHCP. How should the administrator fix the issue?
- A. Move the user any svc-dhcp permit rule to the bottom of the list.
- B. Remove the deny rule from the policy.
- C. Use the correct service alias in the user any svc-dhcp permit rule.
- D. Change user to any in the user any svc-dhcp permit rule.
Answer : C
31 days access 