An Aruba solution runs ArubaOS 8 and uses a mobility master architecture. Which feature can network administrators use to balance wireless devices across APs on different channels?

A company currently uses Instant APs (IAPs), all managed by a virtual controller. The company expects to double in size without the next 18 months. The network manager wants to purchase additional APs to service the increased traffic load. The network manager also wants to deploy a Mobility Controller (MC) to manage all APs.
How should the network administrator adapt the current IAPs to a controlled architecture?

Which authentication server option would the network administrator choose to authenticate a wireless user directly against an Active Directory (AD) domain controller without NPS or IAS?

A company has an Aruba Mobility Master (MM)-based solution. Where can network administrators look to monitor the health status of all controllers, APs, and clients?

Refer to the exhibit.

The alias in the rule shown in the exhibit is network 10.1.1.0/24.
A wireless client is assigned IP address 10.1.2.10/24 and the "admins" role. The wireless client at 10.1.2.10 attempts to initiate a Web session with a server at 10.1.1.2. A wired client at 10.1.1.3 attempts to initiate an SSH session with the wireless client at 10.1.2.10.
How does the Aruba firewall handle these attempts?