ACA Aruba Associate Cloud & Mobility 2 — Questions and Answers
Question 1: What is the role of Aruba Mobility Master in a large campus deployment?
- To serve as the top-level controller that manages multiple Mobility Controllers (Correct answer)
- To provide Layer 3 routing between campus buildings
- To authenticate wireless users via RADIUS
- To generate SSL certificates for captive portals
Correct answer: To serve as the top-level controller that manages multiple Mobility Controllers
Aruba Mobility Master is the hierarchical top-level management device that oversees and manages multiple Mobility Controllers in an enterprise deployment.
Question 2: What does IPsec provide in Aruba VPN deployments?
- Encrypted and authenticated tunnels for secure site-to-site or remote access connectivity (Correct answer)
- Dynamic IP address assignment for VPN clients
- Quality of service prioritization for VPN traffic
- Automatic failover between WAN links
Correct answer: Encrypted and authenticated tunnels for secure site-to-site or remote access connectivity
IPsec provides authenticated, encrypted tunnels ensuring confidentiality and integrity for site-to-site or remote access VPN connections.
Question 3: In Aruba Central, what is a 'Group' used for?
- A logical collection of devices that share the same configuration templates (Correct answer)
- A set of users with the same access permissions
- A geographic cluster of buildings or floors
- A collection of VLANs assigned to a site
Correct answer: A logical collection of devices that share the same configuration templates
Groups in Aruba Central are logical collections of devices that share common configuration templates, making bulk configuration easier.
Question 4: What is the purpose of Aruba's Client Match feature?
- To intelligently steer clients to the best AP or radio band based on RF conditions (Correct answer)
- To match client certificates during 802.1X authentication
- To synchronize client databases between mobility controllers
- To assign clients to VLANs based on their MAC address
Correct answer: To intelligently steer clients to the best AP or radio band based on RF conditions
Client Match uses real-time RF data to proactively steer clients to the optimal AP or band, improving overall wireless performance.
Question 5: Which WAN connectivity types does Aruba SD-WAN support for branch internet breakout?
- MPLS, broadband internet, and LTE/5G simultaneously (Correct answer)
- Only MPLS dedicated circuits
- Only broadband DSL connections
- Only satellite connectivity
Correct answer: MPLS, broadband internet, and LTE/5G simultaneously
Aruba SD-WAN supports simultaneous use of MPLS, broadband internet, and cellular LTE/5G links with intelligent path selection.
Question 6: What is the key benefit of Aruba cloud-auth capability in ClearPass?
- It allows ClearPass to perform device authentication checks against cloud identity providers (Correct answer)
- It migrates ClearPass entirely to a public cloud environment
- It enables wireless clients to bypass local authentication
- It provides cloud-based firmware updates for ClearPass appliances
Correct answer: It allows ClearPass to perform device authentication checks against cloud identity providers
Cloud-auth in ClearPass enables policy enforcement to leverage cloud-based identity providers like Azure AD or Google Workspace for authentication.
ACA Aruba Associate Cloud & Mobility 2
What is the role of Aruba Mobility Master in a large campus deployment?