Aruba Certified Mobility Associate (ACMA) Exam — Questions and Answers
Question 1: Which authentication method is considered the weakest for WPA2-Enterprise deployments because it only validates the server, not the client?
- EAP-MD5 (Correct answer)
- EAP-TLS
- EAP-TTLS
- EAP-PEAP with MSCHAPv2
Correct answer: EAP-MD5
EAP-MD5 provides only one-way authentication (server to client is not validated) and sends a challenge-response that is vulnerable to offline dictionary attacks.
Question 2: When a wireless client is placed in a VLAN after 802.1X authentication, which component on an Aruba controller sends the VLAN assignment back to the AP?
- ClearPass
- RADIUS server
- Mobility Controller (Correct answer)
- DNS server
Correct answer: Mobility Controller
The Aruba Mobility Controller receives the RADIUS Access-Accept (with VLAN attributes) and then communicates the VLAN assignment to the AP over the GRE tunnel.
Question 3: What is the purpose of AirWave's VisualRF feature?
- To display a graphical floor plan with AP placement and RF coverage overlays (Correct answer)
- To configure per-SSID QoS policies
- To encrypt wireless client traffic
- To dynamically assign IP addresses to APs
Correct answer: To display a graphical floor plan with AP placement and RF coverage overlays
VisualRF in AirWave provides a graphical representation of building floor plans with access point locations and color-coded RF coverage maps to help administrators visualize wireless coverage.
Question 4: A network admin needs to verify that an Aruba controller is correctly forwarding RADIUS authentication requests. Which command shows RADIUS server reachability and statistics?
- show radius server status
- show aaa radius debug
- show authentication server radius
- show aaa authentication-server radius statistics (Correct answer)
Correct answer: show aaa authentication-server radius statistics
'show aaa authentication-server radius statistics' displays packet counts, success/failure rates, and server reachability for configured RADIUS servers.
Question 5: In Aruba ClearPass, what is an 'Endpoint' context used for in an authorization policy?
- To specify the EAP method the supplicant must use
- To define the RADIUS shared secret for the network device
- To query device attributes (OS, posture, MDM status) stored in the Endpoints repository (Correct answer)
- To set the VLAN for the authentication session
Correct answer: To query device attributes (OS, posture, MDM status) stored in the Endpoints repository
The Endpoint context in ClearPass authorization policies allows rules to reference device attributes such as OS type, MDM enrollment status, or posture check results.
Question 6: Which standard defines the EAP-TLS authentication method commonly deployed in Aruba enterprise WLANs?
- RFC 3748
- IEEE 802.11i
- IEEE 802.1X
- RFC 5216 (Correct answer)
Correct answer: RFC 5216
RFC 5216 defines EAP-TLS, which uses mutual certificate-based authentication and is the strongest EAP method for enterprise deployments.
Question 7: In Aruba's tunneled node architecture, client traffic from a wired port is tunneled to the Mobility Controller — what encapsulation protocol is used?
- GRE (Generic Routing Encapsulation) (Correct answer)
- VXLAN
- L2TP
- IPsec ESP
Correct answer: GRE (Generic Routing Encapsulation)
Aruba uses GRE tunnels to carry client traffic from APs and tunneled wired ports back to the Mobility Controller for centralized policy enforcement.
Question 8: In Aruba's 'bridge mode' AP deployment, where is user traffic policy applied?
- At the upstream firewall only
- At the Mobility Controller
- On the AP itself using locally configured policies (Correct answer)
- By ClearPass after the fact
Correct answer: On the AP itself using locally configured policies
In bridge mode, APs apply firewall and policy rules locally and forward client traffic directly onto the local network without tunneling to the controller.
Question 9: What is the main RF challenge introduced by deploying APs in a high-density environment such as a stadium or conference center?
- Lack of 802.11ac support in high-density venues
- Insufficient AP transmit power to cover the venue
- Co-channel interference caused by many APs operating on the same or adjacent channels in close proximity (Correct answer)
- Inability to use directional antennas indoors
Correct answer: Co-channel interference caused by many APs operating on the same or adjacent channels in close proximity
In high-density environments, the close proximity of many APs creates significant co-channel and adjacent channel interference, requiring careful channel planning and reduced transmit power.
Question 10: After upgrading ArubaOS on a Mobility Controller, some APs remain on the previous firmware version. What is the correct way to upgrade AP firmware?
- Re-provision each AP from scratch using ZTP
- Use the 'upgrade-firmware' option in the AP image management section of the controller
- AP firmware upgrades automatically when the AP reboots after controller upgrade (Correct answer)
- Manually TFTP the firmware to each AP's console port
Correct answer: AP firmware upgrades automatically when the AP reboots after controller upgrade
Aruba APs automatically download and install the firmware image from the controller the next time they reboot or reconnect, so a controller upgrade triggers AP firmware updates on reconnection.
Question 11: What is the primary security benefit of Aruba's GRE tunnel mode for remote APs (RAPs)?
- It tunnels all client traffic back to the controller, bypassing untrusted local networks (Correct answer)
- It encrypts management traffic only
- It allows split tunneling for guest traffic
- It uses IPsec for data plane encryption only
Correct answer: It tunnels all client traffic back to the controller, bypassing untrusted local networks
GRE tunnel mode sends all RAP client traffic through an encrypted tunnel to the controller, ensuring it does not traverse untrusted local networks unprotected.
Question 12: What does SNR (Signal-to-Noise Ratio) measure in a wireless network?
- The percentage of packets that arrive without errors
- The ratio of the AP's transmit power to its antenna gain
- The number of clients connected relative to total AP capacity
- The difference in dB between the received signal strength and the background noise floor (Correct answer)
Correct answer: The difference in dB between the received signal strength and the background noise floor
SNR is the difference between the received signal level and the noise floor in dB; a higher SNR indicates a cleaner, more reliable wireless connection.
Question 13: What type of antenna pattern radiates power equally in all directions in the horizontal plane?
- Directional
- Omni-directional (Correct answer)
- Yagi
- Patch
Correct answer: Omni-directional
An omni-directional antenna radiates RF energy equally in all horizontal directions, producing a donut-shaped 3D radiation pattern.
Question 14: What does WPA3 encryption provide in wireless networks?
- It focuses on increasing the network's bandwidth
- It offers weak encryption and makes networks vulnerable to attacks
- It eliminates the need for passwords in wireless networks
- It provides enhanced security with stronger encryption and protection against attacks (Correct answer)
Correct answer: It provides enhanced security with stronger encryption and protection against attacks
WPA3 (Wi-Fi Protected Access 3) is the latest security standard for wireless networks, offering significant improvements over its predecessor, WPA2. It provides stronger encryption algorithms, enhanced protection against brute-force password attacks, and individualized data encryption for public Wi-Fi networks (Wi-Fi Enhanced Open). This makes wireless communications much more secure and private.
Question 15: Which Aruba feature prevents a wireless client from communicating directly with other clients on the same SSID at Layer 2?
- Client isolation (also called wireless client isolation or PSPF) (Correct answer)
- WPA2 isolation
- Role-based access control
- VLAN isolation
Correct answer: Client isolation (also called wireless client isolation or PSPF)
Client isolation (Publicly Secure Packet Forwarding / PSPF) blocks direct client-to-client Layer 2 forwarding on the same SSID, commonly used in guest networks.
Question 16: Which Aruba mechanism prevents a compromised controller from being used to intercept AP communication by validating controller identity?
- PAPI encryption with shared secrets
- AP Whitelist
- ArubaOS Firewall
- Certificate-based AP provisioning using factory-installed certificates (Correct answer)
Correct answer: Certificate-based AP provisioning using factory-installed certificates
Aruba APs use factory-installed X.509 certificates to mutually authenticate with controllers, preventing rogue controller attacks.
Question 17: Why is network access control (NAC) important in wireless networking?
- To enforce security policies and prevent unauthorized access to the network (Correct answer)
- To reduce the number of devices connected to the network
- To monitor network usage without enforcing security measures
- To allow any device to connect to the network without restrictions
Correct answer: To enforce security policies and prevent unauthorized access to the network
Network Access Control (NAC) is vital in wireless networking for maintaining security. It acts as a gatekeeper, ensuring that only authorized and compliant devices and users can connect to the network. NAC solutions enforce security policies, perform device posture checks, and assign appropriate access privileges, thereby preventing unauthorized access and mitigating potential threats from compromised or non-compliant devices.
Question 18: Which tool in the Aruba ecosystem is specifically designed to automate the initial provisioning and onboarding of new Aruba devices?
- ClearPass
- AirWave
- Aruba Central
- Aruba Activate (Correct answer)
Correct answer: Aruba Activate
Aruba Activate is a cloud-based provisioning service that automatically configures new Aruba devices and directs them to the correct management platform upon first boot.
Question 19: When configuring WPA3-SAE on an Aruba controller, what must also be enabled to support legacy WPA2 clients simultaneously?
- WPA3 Transition Mode (SAE Mixed) (Correct answer)
- PMF Optional mode
- 802.11r Fast BSS Transition
- OWE Transition Mode
Correct answer: WPA3 Transition Mode (SAE Mixed)
WPA3 Transition Mode (SAE Mixed) allows both WPA2-PSK and WPA3-SAE clients to connect to the same SSID simultaneously.
Question 20: Which tunneling protocol does Aruba use by default to carry wireless client traffic from a Remote AP back to the Mobility Controller?
- CAPWAP
- IPsec (Correct answer)
- L2TP
- GRE
Correct answer: IPsec
Aruba Remote APs use IPsec tunnels to securely carry client traffic back to the Mobility Controller over untrusted networks.
Question 21: What is the most important professional competency for ACMA certification in rf principles?
- Deep knowledge combined with practical application skills (Correct answer)
- Memorization of all reference materials
- Speed of task completion
- Ability to work alone exclusively
Correct answer: Deep knowledge combined with practical application skills
Professional competency requires both deep knowledge of the subject matter and the ability to apply that knowledge in practical situations.
Question 22: When Aruba ClearPass OnGuard performs a posture check, which of the following would cause a client to be assigned to a 'quarantine' role?
- Client's antivirus definitions are out of date (Correct answer)
- Client uses WPA3-Personal
- Client connects from an approved MAC address
- Client authenticates with a valid certificate
Correct answer: Client's antivirus definitions are out of date
Outdated antivirus definitions fail posture requirements, causing ClearPass to assign the client to a restricted quarantine role.
Question 23: What is RF absorption in the context of wireless networking?
- The interference caused by overlapping RF channels
- The process by which an antenna captures incoming RF energy
- The conversion of RF signal energy into heat as it passes through a material (Correct answer)
- The gain added by a high-gain antenna to a transmitted signal
Correct answer: The conversion of RF signal energy into heat as it passes through a material
RF absorption occurs when materials convert RF energy into heat as the signal passes through them, reducing the signal's strength on the other side.
Question 24: Which forwarding mode sends all client traffic through the controller for policy enforcement before reaching the network?
- Distributed mode
- Tunnel mode (Correct answer)
- Mesh mode
- Bridged mode
Correct answer: Tunnel mode
Tunnel mode encapsulates all client traffic in GRE and sends it to the controller, ensuring centralized policy enforcement for all users.
Question 25: In RF terminology, what does the term 'noise floor' refer to?
- The lowest frequency supported by a wireless standard
- The background level of unwanted RF energy present in the environment (Correct answer)
- The minimum transmit power level of an access point
- The attenuation caused by structural materials
Correct answer: The background level of unwanted RF energy present in the environment
The noise floor is the sum of all background RF interference and thermal noise present in the environment, measured in dBm, and defines the minimum signal level that can be detected.
Question 26: Why is a site survey important before deploying a wireless network?
- To avoid using encryption protocols on the network
- To limit the number of devices that can connect to the network
- To assess coverage, identify interference, and optimize access point placement (Correct answer)
- To determine the number of devices that will connect to the network
Correct answer: To assess coverage, identify interference, and optimize access point placement
A site survey is a critical first step before deploying a wireless network. It involves physically evaluating the environment to determine optimal access point locations, identify potential sources of interference (like other wireless devices or building materials), and ensure adequate signal coverage throughout the desired area. This proactive assessment helps design a robust, high-performing, and reliable wireless network.
Question 27: What is the role of the 'conductors' (formerly master) and 'members' hierarchy in ArubaOS 8 Mobility Master architecture?
- Mobility Master acts as the central policy manager while Managed Devices handle data plane forwarding (Correct answer)
- Both Mobility Master and Managed Devices equally share AP management and data forwarding
- Mobility Master forwards all client traffic while Managed Devices handle policy
- Managed Devices manage APs and Mobility Master only handles licensing
Correct answer: Mobility Master acts as the central policy manager while Managed Devices handle data plane forwarding
In ArubaOS 8, Mobility Master centralizes configuration and policy management while Managed Devices (controllers) handle local data plane forwarding for connected APs.
Question 28: Which Aruba controller component is responsible for enforcing firewall policies on user traffic?
- ARM
- AirMatch
- Policy Enforcement Firewall (PEF) (Correct answer)
- UCC
Correct answer: Policy Enforcement Firewall (PEF)
The Policy Enforcement Firewall (PEF) module on the controller inspects and enforces stateful firewall policies on wireless user traffic.
Question 29: In ACMA practice, what is the best approach to quality improvement in mobility solutions?
- Wait for problems to occur before acting
- Make changes without measuring results
- Copy what other organizations do without analysis
- Use data-driven methods with measurable outcomes (Correct answer)
Correct answer: Use data-driven methods with measurable outcomes
Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.
Question 30: An Aruba AP is configured for ARM (Adaptive Radio Management). A technician notices clients on 2.4 GHz are experiencing high interference. What ARM feature automatically moves clients to 5 GHz?
- Channel Reuse
- Band Steering (Correct answer)
- Coverage Hole Detection
- Transmit Power Control
Correct answer: Band Steering
Band Steering in ARM proactively encourages dual-band clients to connect to the less congested 5 GHz band.
Question 31: What is RF refraction in wireless networking?
- The spreading of RF energy as it travels away from the antenna
- The bending of RF signals as they pass through materials with different densities (Correct answer)
- The bouncing of RF signals off smooth surfaces
- The cancellation of RF signals due to phase differences
Correct answer: The bending of RF signals as they pass through materials with different densities
RF refraction is the bending of a radio wave as it passes through mediums of different densities, similar to how light bends through water or glass.
Question 32: In an Aruba environment, what does a 'captive portal' primarily provide in terms of network security?
- Deep packet inspection for malware
- Encrypted tunneling for guest users
- 802.1X authentication for corporate devices
- User identity collection and acceptance of terms before granting network access (Correct answer)
Correct answer: User identity collection and acceptance of terms before granting network access
A captive portal redirects unauthenticated users to a web page for credential entry or ToS acceptance before granting internet access.
Question 33: What Aruba infrastructure feature enables multiple physical controllers to appear as a single logical controller to APs and clients?
- Controller cluster (Correct answer)
- VSF (Virtual Switching Framework)
- Redundancy pairs
- Master-Local hierarchy
Correct answer: Controller cluster
Aruba controller clusters present a unified control plane so APs and clients can roam freely without re-authenticating when moving between physical controllers.
Question 34: Which 2.4 GHz channels are considered non-overlapping in North America?
- 1, 5, 9, 13
- 1, 6, 11 (Correct answer)
- 2, 7, 12
- 1, 3, 7
Correct answer: 1, 6, 11
In North America, channels 1, 6, and 11 are the only three non-overlapping channels in the 2.4 GHz band, each separated by 25 MHz.
Question 35: Which attack is mitigated by enabling 'Management Frame Protection' (802.11w) on an Aruba SSID?
- Deauthentication and disassociation flood attacks (Correct answer)
- ARP cache poisoning
- Passive eavesdropping of data frames
- WEP key recovery attacks
Correct answer: Deauthentication and disassociation flood attacks
802.11w (MFP) cryptographically protects management frames, preventing spoofed deauthentication and disassociation attacks.
Question 36: A warehouse deployment requires APs to cover very long aisles between metal shelving. Which antenna configuration is most effective?
- Omnidirectional ceiling-mounted APs above each aisle
- Dipole antennas mounted horizontally at floor level
- Directional patch antennas mounted at aisle ends pointing down each aisle (Correct answer)
- High-gain omnidirectional antennas mounted on the shelving units
Correct answer: Directional patch antennas mounted at aisle ends pointing down each aisle
Directional patch antennas aimed down aisles focus RF energy where it's needed and reduce interference between parallel aisles.
Question 37: What does CAPWAP data traffic (AP-to-controller tunneled user data) use by default?
- TCP 443
- UDP 5247 (Correct answer)
- GRE port 47
- UDP 5246
Correct answer: UDP 5247
CAPWAP data traffic is carried over UDP port 5247, separate from the control channel on UDP 5246.
Question 38: What role does collaboration play in rf principles for ACMA professionals?
- It enhances outcomes through diverse perspectives and shared expertise (Correct answer)
- It reduces individual accountability
- It slows down work unnecessarily
- It is only needed in emergencies
Correct answer: It enhances outcomes through diverse perspectives and shared expertise
Collaboration leverages diverse perspectives and combined expertise to achieve better outcomes than any individual could alone.
Question 39: Which Aruba controller feature automatically optimizes channel and power settings for APs in the network?
- ARM (Correct answer)
- AirMatch
- AirWave
- UCC
Correct answer: ARM
ARM (Adaptive Radio Management) dynamically adjusts AP channel selection and transmit power to optimize coverage and minimize interference.
Question 40: An admin needs to collect a packet capture on an Aruba AP for client troubleshooting. Which ArubaOS feature enables capturing wireless frames directly on the AP?
- AP Packet Capture using 'ap packet-capture' CLI command (Correct answer)
- Controller datapath pcap via 'datapath pcap enable'
- Wireshark plugin installed on the AP
- RSPAN mirroring to a capture server
Correct answer: AP Packet Capture using 'ap packet-capture' CLI command
ArubaOS supports on-AP packet capture via the 'ap packet-capture' CLI, allowing admins to capture 802.11 frames directly at the AP without additional hardware.
Question 41: What is the primary advantage of using 80 MHz channel width in 802.11ac compared to 40 MHz?
- Improved battery life for client devices
- Fewer co-channel interference issues
- Better range due to lower frequency
- Higher throughput due to more available spectrum (Correct answer)
Correct answer: Higher throughput due to more available spectrum
80 MHz channel width doubles the available spectrum compared to 40 MHz, enabling significantly higher throughput in 802.11ac.
Question 42: What is the default UDP port used by SNMP for polling network devices?
- 23
- 443
- 514
- 161 (Correct answer)
Correct answer: 161
SNMP uses UDP port 161 for polling (GET/SET operations) and UDP port 162 for receiving traps from monitored devices.
Question 43: What RF characteristic determines how much an RF signal is scattered when it strikes a rough or irregular surface?
- Reflection
- Absorption
- Diffraction
- Scattering (Correct answer)
Correct answer: Scattering
Scattering occurs when RF signals strike irregular or rough surfaces, causing the energy to disperse in many directions rather than reflecting cleanly.
Question 44: What is the relationship between wavelength and frequency of an RF signal?
- Wavelength decreases as frequency increases (Correct answer)
- Wavelength and frequency are independent of each other
- Wavelength doubles for every 10 MHz increase in frequency
- Wavelength increases as frequency increases
Correct answer: Wavelength decreases as frequency increases
Wavelength and frequency are inversely proportional: as frequency increases, wavelength decreases (λ = c/f, where c is the speed of light).
Question 45: Which foundational principle is MOST important for success in the Aruba Certified Mobility Associate profession?
- Maximizing financial returns on every engagement
- Specializing in only one narrow area of practice
- Maintaining the minimum requirements for certification
- Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)
Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes
Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.
Question 46: What RF phenomenon causes signal strength to decrease as distance from the transmitter increases?
- Reflection
- Absorption
- Refraction
- Free-space path loss (Correct answer)
Correct answer: Free-space path loss
Free-space path loss is the natural attenuation of an RF signal as it travels through open space, increasing with both distance and frequency.
Question 47: What Aruba technology dynamically adjusts AP transmit power and channel selection to minimize interference?
- AirMatch (Correct answer)
- AppRF
- ClientMatch
- RFProtect
Correct answer: AirMatch
AirMatch is Aruba's RF optimization solution that runs nightly batch algorithms to compute optimal channel and power assignments for the entire network.
Question 48: What does EIRP stand for in the context of wireless networking?
- Extended Interference Reduction Percentage
- Ethernet Interface Radio Protocol
- Equivalent Internal Radio Power
- Effective Isotropic Radiated Power (Correct answer)
Correct answer: Effective Isotropic Radiated Power
EIRP (Effective Isotropic Radiated Power) is the total power radiated by an antenna system, combining transmit power and antenna gain.
Question 49: A wireless client is associated but cannot obtain an IP address. The SSID is mapped to VLAN 30. What is the first troubleshooting step?
- Reassociate the client to the SSID
- Verify the DHCP server has a scope for VLAN 30 (Correct answer)
- Change the SSID security type to Open
- Restart the Mobility Controller
Correct answer: Verify the DHCP server has a scope for VLAN 30
If a client associates successfully but cannot get an IP, verifying that a DHCP scope exists for the mapped VLAN is the first logical step.
Question 50: What is the typical receive sensitivity threshold that most enterprise wireless clients require for reliable data transmission?
- -90 dBm
- -40 dBm
- -20 dBm
- -67 dBm (Correct answer)
Correct answer: -67 dBm
A received signal of -67 dBm is the commonly cited threshold for reliable enterprise wireless performance, providing adequate SNR for high data rates.
Question 51: Why is strong password management important in network security?
- To ensure that passwords are shared easily among users
- To protect the network from unauthorized access and reduce the risk of attacks (Correct answer)
- To limit the length of passwords used by employees
- To make passwords easy to remember for users
Correct answer: To protect the network from unauthorized access and reduce the risk of attacks
Strong password management is vital because weak or easily compromised passwords are a common entry point for unauthorized access. By using complex, unique passwords and changing them regularly, organizations significantly reduce the risk of credential theft and brute-force attacks. This practice forms a fundamental layer of defense against cyber threats, protecting sensitive data and network resources.
Question 52: Which approach is recommended for troubleshooting wlan design issues?
- Use systematic isolation and testing methods (Correct answer)
- Replace all components simultaneously
- Rely solely on past experience
- Wait for the problem to resolve itself
Correct answer: Use systematic isolation and testing methods
Systematic isolation and testing methodically narrows down the root cause, making troubleshooting efficient and accurate.
Question 53: When deploying an AP in a location with no existing wired infrastructure, which Aruba feature enables connectivity back to the network?
- Captive portal
- LACP bonding
- 802.1X port authentication
- Mesh networking (Correct answer)
Correct answer: Mesh networking
Aruba mesh networking allows APs to backhaul traffic wirelessly to a mesh portal AP connected to the wired network.
Question 54: Which professional attribute is most valued in wireless fundamentals within the ACMA field?
- Prioritizing personal convenience
- Working in isolation
- Accountability and commitment to standards (Correct answer)
- Avoiding challenging situations
Correct answer: Accountability and commitment to standards
Accountability and commitment to professional standards build trust and ensure consistent, high-quality practice.
Question 55: How does Aruba’s wireless architecture enhance scalability in large deployments?
- By providing limited coverage across large areas
- By enabling the easy addition of devices and centralized management, enhancing scalability (Correct answer)
- By reducing the network’s overall bandwidth
- By limiting the number of devices connected to the network
Correct answer: By enabling the easy addition of devices and centralized management, enhancing scalability
Aruba's wireless architecture, particularly with solutions like Mobility Master and Virtual Controllers, is designed for high scalability. It enables the easy addition of new access points and devices to expand network coverage and capacity without complex reconfigurations. Centralized management simplifies the administration of these growing networks, ensuring consistent performance and security across large deployments.
Question 56: An Aruba AP deployed outdoors begins experiencing interference from a neighboring business's Wi-Fi network on channel 6. Which ARM feature should resolve this automatically?
- Channel quality monitoring with automatic reassignment (Correct answer)
- Band steering
- Client match
- Airtime fairness
Correct answer: Channel quality monitoring with automatic reassignment
ARM continuously monitors channel quality and automatically reassigns the AP to a less congested channel when interference is detected.
Question 57: Which Aruba feature detects and alerts on ad-hoc wireless networks formed between client devices?
- Adaptive Radio Management
- Client Match
- Wireless Intrusion Detection (WID) (Correct answer)
- ClearPass Profiling
Correct answer: Wireless Intrusion Detection (WID)
Wireless Intrusion Detection identifies ad-hoc networks, which bypass infrastructure controls and pose a security risk.
Question 58: A new Aruba IAP is powered on but does not appear in the Instant network. The AP has an IP address via DHCP. What should be checked next?
- Check that the AP firmware matches the switch firmware
- Verify the AP can reach the Virtual Controller IP on UDP 8211 (Correct answer)
- Assign a static IP to the AP
- Reset the AP to factory defaults
Correct answer: Verify the AP can reach the Virtual Controller IP on UDP 8211
Aruba Instant APs discover and join the Virtual Controller using UDP port 8211; a firewall blocking this port prevents cluster formation.
Question 59: What security mode does Aruba recommend when deploying WPA3 in a mixed environment with WPA2 clients?
- Open Enhanced mode
- WPA3-Enterprise only
- WPA3-Personal only
- WPA2/WPA3 Transition Mode (Correct answer)
Correct answer: WPA2/WPA3 Transition Mode
WPA2/WPA3 Transition Mode allows both WPA2 and WPA3 clients to connect to the same SSID simultaneously.
Question 60: What is the purpose of mobility architecture in a wireless network?
- To reduce the overall number of access points in the network
- To provide seamless connectivity and roaming across access points (Correct answer)
- To limit the number of devices connected to the network
- To focus solely on wired connections
Correct answer: To provide seamless connectivity and roaming across access points
Mobility architecture in a wireless network is designed to ensure that wireless clients can move freely between different access points within the network without losing their connection. This seamless roaming capability is crucial for uninterrupted communication and application usage. It is especially important in large environments like campuses or enterprises where users are constantly on the move.
Aruba Certified Mobility Associate (ACMA) Exam
The Aruba Certified Mobility Associate (ACMA) certification validates foundational knowledge and skills required to configure and manage Aruba WLANs using ArubaOS 8.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds