ACMA Mobility Solutions 2 — Questions and Answers
Question 1: Which Aruba feature allows a wireless client to roam between APs without re-authenticating to the RADIUS server?
- Opportunistic Key Caching (OKC)
- WPA3-Enterprise
- 802.11r Fast BSS Transition (Correct answer)
- Dynamic RF Management
Correct answer: 802.11r Fast BSS Transition
802.11r Fast BSS Transition enables fast roaming by pre-caching keys, eliminating the need for full re-authentication with the RADIUS server on each roam.
Question 2: In an Aruba Mobility Controller deployment, what is the role of the Master Controller?
- It handles all data plane forwarding for client traffic
- It manages configuration and policies for Local Controllers (Correct answer)
- It acts as the primary RADIUS authentication server
- It performs spectrum analysis for all APs
Correct answer: It manages configuration and policies for Local Controllers
The Master Controller centralizes configuration management and policy distribution to Local Controllers in a hierarchical deployment.
Question 3: What Aruba technology dynamically adjusts AP transmit power and channel selection to minimize interference?
- ClientMatch
- AirMatch (Correct answer)
- AppRF
- RFProtect
Correct answer: AirMatch
AirMatch is Aruba's RF optimization solution that runs nightly batch algorithms to compute optimal channel and power assignments for the entire network.
Question 4: Which tunneling protocol does Aruba use by default to carry wireless client traffic from a Remote AP back to the Mobility Controller?
- GRE
- IPsec (Correct answer)
- L2TP
- CAPWAP
Correct answer: IPsec
Aruba Remote APs use IPsec tunnels to securely carry client traffic back to the Mobility Controller over untrusted networks.
Question 5: In Aruba ClearPass, what component issues 802.1X certificates to wireless devices automatically?
- ClearPass Policy Manager
- ClearPass OnGuard
- ClearPass OnBoard (Correct answer)
- ClearPass Guest
Correct answer: ClearPass OnBoard
ClearPass OnBoard automates device provisioning by enrolling devices and distributing 802.1X certificates for certificate-based authentication.
Question 6: What is the primary purpose of User-Based Tunneling (UBT) in Aruba wired/wireless integration?
- To encrypt all wired traffic with IPsec
- To tunnel wired switch port traffic to the Mobility Controller for policy enforcement (Correct answer)
- To provide QoS prioritization for voice traffic
- To bridge wireless VLANs to wired VLANs
Correct answer: To tunnel wired switch port traffic to the Mobility Controller for policy enforcement
UBT tunnels traffic from Aruba switches to the Mobility Controller so that the same user-role policies applied to wireless clients can be enforced for wired users.
Question 7: Which Aruba solution provides posture assessment to check device compliance before granting full network access?
- ClearPass Guest
- ClearPass OnGuard (Correct answer)
- ClearPass OnBoard
- Aruba Central
Correct answer: ClearPass OnGuard
ClearPass OnGuard performs health checks on endpoints — verifying antivirus, firewall, patch status — and enforces posture-based access policies.
ACMA Mobility Solutions 2
Which Aruba feature allows a wireless client to roam between APs without re-authenticating to the RADIUS server?