Question 1

Refer to the exhibits.


A network administrator deploys User Based Tunneling (UBT) in a corporate network to unify the security policies enforcement. When users authenticate with 802.1X, ClearPass shows Accept results, and sends the Aruba-User-Role attribute as expected. However, the AOS-CX based switch does not seem to build the tunnel to the Mobility Controller (MC) for this user.
Why does the switch fail to run UBT for the user?
  • Question 2

    A joint venture between two companies results in a fully functional WLAN Aruba solution. The network administrator uses the following script to integrate the WLAN solution with two radius servers, radius1 and radius2.

    While all users authenticate with [email protected] type of credentials, radius1 has user accounts with the domain name portion.
    Which additional configuration is required to authenticate corp1.com users with radius1 and corp2 users with radius2?
  • Question 3

    A company with 535 users deploys an Aruba solution with more than 1000 Aruba APs, two 7220 Mobility Controllers, and a single Mobility Master (MM) virtual appliance at the campus server farm. The MCs run a HA Fast failover group in dual mode and operate at 50% AP capacity.
    If there is an MM or MC failure, the network administrator must ensure that the network is fully manageable and the MC load does not exceed 80%.
    What can the network administrator do to meet these requirements?
  • Question 4

    Refer to the exhibit.

    A 7008 Branch Office Controller (BOC) is deployed in a remote office behind a core router. This core does not support 802.1q encapsulation. The Mobility Controller (MC) is the gateway for two tunneling mode SSIDs, as shown in the exhibit.
    Which two different configuration options ensure that wireless users are able to reach the branch network through the router? (Choose two.)
  • Question 5

    Refer to the exhibit.

    The network administrator must ensure that the configuration will force users to authenticate periodically every eight hours. Which configuration is required to effect this change?