Mixed Deck — All ACMA Topics Flashcards

A network admin needs to verify that an Aruba controller is correctly forwarding RADIUS authentication requests. Which command shows RADIUS server reachability and statistics?

Answer: show aaa authentication-server radius statistics

'show aaa authentication-server radius statistics' displays packet counts, success/failure rates, and server reachability for configured RADIUS servers.

What is the purpose of RADIUS accounting in an Aruba wireless deployment?

Answer: To track session start, stop, and interim usage data for connected clients

RADIUS accounting records session events (Start, Stop, Interim-Update) including duration, bytes transferred, and termination cause for auditing and billing.

Which Aruba Mobility Controller feature prevents IP spoofing by validating that a client's source IP matches its DHCP-assigned address?

Answer: IP Spoofing Protection (IP anti-spoof)

IP Spoofing Protection checks that a client's source IP matches the address assigned by DHCP, dropping packets with mismatched source IPs.

Which Aruba feature allows different VLANs to be assigned to users based on RADIUS attributes returned after authentication?

Answer: Dynamic VLAN Assignment

Dynamic VLAN Assignment uses RADIUS attributes (such as Tunnel-Private-Group-ID) returned in the Access-Accept message to place clients in specific VLANs.

What is the PRIMARY ethical obligation of a certified Aruba Certified Mobility Associate professional regarding confidential information?

Answer: Protect it from unauthorized disclosure at all times

Confidentiality is a fundamental ethical obligation. Certified professionals must protect confidential information from unauthorized disclosure, regardless of circumstances. Breach of confidentiality can result in loss of certification and legal liability.

What is the primary consideration when implementing changes to wlan design?

Answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

What is the primary consideration when implementing changes to network security?

Answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

When deploying APs in a high-density lecture hall, what is the primary design consideration?

Answer: Using lower transmit power with more APs for capacity

High-density environments require more APs at lower power to increase capacity while controlling co-channel interference.

Which Aruba feature detects and alerts on ad-hoc wireless networks formed between client devices?

Answer: Wireless Intrusion Detection (WID)

Wireless Intrusion Detection identifies ad-hoc networks, which bypass infrastructure controls and pose a security risk.

An Aruba AP is configured for ARM (Adaptive Radio Management). A technician notices clients on 2.4 GHz are experiencing high interference. What ARM feature automatically moves clients to 5 GHz?

Answer: Band Steering

Band Steering in ARM proactively encourages dual-band clients to connect to the less congested 5 GHz band.

In an Aruba network, what is the primary function of the Air Monitor (AM) mode on an AP?

Answer: Dedicating the AP exclusively to WIDS/WIPS monitoring, scanning all channels for threats

An AP in Air Monitor mode does not serve client traffic and instead dedicates all resources to scanning channels for rogue APs, security threats, and RF environment data.

In 802.11 WMM (Wi-Fi Multimedia), which Access Category has the highest priority?

Answer: AC_VO (Voice)

AC_VO (Voice) has the highest QoS priority in WMM, using the shortest AIFSN and CWmin values to minimize latency for voice traffic.

Which principle is fundamental to good access point deployment practice?

Answer: Separation of concerns and modularity

Separation of concerns and modularity make code easier to understand, test, maintain, and extend over time.

What is the function of the Aruba ClientMatch feature?

Answer: It steers clients to the best AP based on real-time RF conditions

ClientMatch continuously monitors client RF statistics and steers sticky clients to better APs, improving load balancing and user experience.

Which Aruba feature prevents a wireless client from communicating directly with other clients on the same SSID at Layer 2?

Answer: Client isolation (also called wireless client isolation or PSPF)

Client isolation (Publicly Secure Packet Forwarding / PSPF) blocks direct client-to-client Layer 2 forwarding on the same SSID, commonly used in guest networks.

In ClearPass, what is the 'Authentication Method' configuration item used for?

Answer: Defining which EAP types and inner methods the policy will accept

An Authentication Method in ClearPass defines acceptable EAP types (e.g., PEAP, EAP-TLS, TTLS) and their inner methods, controlling how credentials are exchanged.

In Aruba's role-based access control, what happens to traffic that does not match any firewall policy rule?

Answer: It is implicitly denied by the default deny rule

Aruba firewalls have an implicit deny-all at the end of each policy, dropping unmatched traffic.

In ACMA practice, what is the best approach to quality improvement in mobility solutions?

Answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Why is firmware upgrading important in Aruba solutions?

Answer: To update devices with the latest features, fixes, and security patches

Firmware upgrading is crucial for Aruba solutions as it provides devices with the latest features, bug fixes, and critical security patches. Regular updates ensure optimal performance, compatibility with new standards, and protection against emerging vulnerabilities. Neglecting firmware updates can leave devices susceptible to security exploits and hinder their functionality.

In Aruba role-based access, what is the 'logon' role primarily used for?

Answer: Providing limited access before authentication completes, typically for captive portal redirect

The logon role grants minimal access before a user authenticates, allowing only the traffic needed to complete the authentication process.