Aruba Certified Mobility Associate (ACMA) Exam — Questions and Answers

Question 1: What is the primary advantage of using 80 MHz channel width in 802.11ac compared to 40 MHz?

Improved battery life for client devices
Higher throughput due to more available spectrum (Correct answer)
Fewer co-channel interference issues
Better range due to lower frequency

Correct answer: Higher throughput due to more available spectrum

80 MHz channel width doubles the available spectrum compared to 40 MHz, enabling significantly higher throughput in 802.11ac.

Question 2: What distinguishes a Aruba Certified Mobility Associate certified professional from a non-certified practitioner?

Certified professionals exclusively work in larger organizations
There is no meaningful difference in competency
Certified professionals always have more years of experience
Certification validates competency through standardized assessment against established benchmarks (Correct answer)

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 3: What is the primary consideration when implementing changes to network security?

Speed of implementation
Personal convenience
Impact assessment and change management (Correct answer)
Vendor preference

Correct answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

Question 4: In Aruba's split-tunnel configuration for Remote APs, what traffic is sent locally rather than tunneled to the controller?

Corporate intranet traffic
Internet-bound traffic (Correct answer)
Management traffic
VoIP traffic

Correct answer: Internet-bound traffic

In split-tunnel mode, internet-bound traffic is forwarded locally at the Remote AP, while corporate traffic is tunneled back to the Mobility Controller.

Question 5: During a post-deployment validation, an AP shows correct association but clients report slow throughput. Which metric should be checked first?

Number of VLANs configured on the AP
DHCP lease time for wireless clients
Channel utilization and retry rates on the AP radio (Correct answer)
AP uptime in the controller dashboard

Correct answer: Channel utilization and retry rates on the AP radio

High channel utilization and elevated retry rates indicate RF congestion or interference that directly degrades client throughput.

Question 6: What does EIRP stand for in the context of wireless networking?

Ethernet Interface Radio Protocol
Effective Isotropic Radiated Power (Correct answer)
Equivalent Internal Radio Power
Extended Interference Reduction Percentage

Correct answer: Effective Isotropic Radiated Power

EIRP (Effective Isotropic Radiated Power) is the total power radiated by an antenna system, combining transmit power and antenna gain.

Question 7: In an Aruba network, what does the term 'cell breathing' refer to in WLAN design?

Reducing AP transmit power to shrink coverage cells and reduce co-channel interference (Correct answer)
The process of APs switching between 2.4 GHz and 5 GHz bands
APs automatically increasing power when clients connect
APs rebooting on a scheduled cycle to refresh RF state

Correct answer: Reducing AP transmit power to shrink coverage cells and reduce co-channel interference

Cell breathing refers to reducing AP transmit power to create smaller, non-overlapping coverage cells that minimize co-channel interference.

Question 8: Which antenna type radiates power equally in all horizontal directions, making it suitable for open-office deployments?

Parabolic dish antenna
Omnidirectional antenna (Correct answer)
Sector antenna
Yagi antenna

Correct answer: Omnidirectional antenna

An omnidirectional antenna radiates power equally in a 360-degree horizontal pattern, ideal for providing coverage in all directions from a single point.

Question 9: Which Aruba architecture allows APs to switch client traffic locally without sending it to a central controller?

Distributed forwarding (split-tunnel or bridge mode) (Correct answer)
Centralized forwarding
MC-VA mode
Remote AP tunnel mode

Correct answer: Distributed forwarding (split-tunnel or bridge mode)

Distributed forwarding (bridge or split-tunnel mode) allows APs to switch some or all client traffic locally, reducing WAN bandwidth consumption.

Question 10: Which attack is mitigated by enabling 'Management Frame Protection' (802.11w) on an Aruba SSID?

Deauthentication and disassociation flood attacks (Correct answer)
WEP key recovery attacks
ARP cache poisoning
Passive eavesdropping of data frames

Correct answer: Deauthentication and disassociation flood attacks

802.11w (MFP) cryptographically protects management frames, preventing spoofed deauthentication and disassociation attacks.

Question 11: Which syslog severity level (per RFC 5424) indicates the most critical system condition requiring immediate action?

Emergency (0) (Correct answer)
Notice (5)
Warning (4)
Debug (7)

Correct answer: Emergency (0)

Syslog Emergency (severity level 0) is the highest-priority level, indicating a system is unusable and immediate action is required; it is numerically the lowest value because lower numbers indicate higher severity.

Question 12: What happens to RF signal polarization when a transmitting antenna is oriented vertically and the receiving antenna is oriented horizontally?

The signal automatically converts to circular polarization
Signal loss occurs due to polarization mismatch between the transmitter and receiver (Correct answer)
Signal strength doubles because cross-polarization creates antenna diversity
The receiver gains 3 dB of additional signal due to polarization diversity

Correct answer: Signal loss occurs due to polarization mismatch between the transmitter and receiver

Polarization mismatch between transmit and receive antennas causes signal loss of up to 20 dB, because antennas are most efficient when their polarization planes align.

Question 13: An administrator wants to deploy Aruba APs across multiple buildings managed by a single controller cluster. Which feature enables APs in different buildings to roam clients seamlessly?

Layer 2 mobility domain
Mesh backhaul bridge group
Aruba Mobility Master redundancy group
RF domain with a shared mobility controller (Correct answer)

Correct answer: RF domain with a shared mobility controller

A shared RF domain across controllers allows seamless client roaming by coordinating authentication state and IP addressing.

Question 14: Which approach best demonstrates mastery of wireless fundamentals in ACMA practice?

Following procedures without understanding
Avoiding complex scenarios
Relying entirely on technology
Applying principles to novel situations with sound judgment (Correct answer)

Correct answer: Applying principles to novel situations with sound judgment

True mastery involves understanding underlying principles well enough to apply them to new and unfamiliar situations with professional judgment.

Question 15: What security advantage does Aruba's tunnel-mode SSID provide over bridge-mode for sensitive corporate traffic?

Tunnel mode sends all client traffic to the controller for centralized firewall inspection before routing (Correct answer)
Tunnel mode encrypts traffic end-to-end to the internet
Tunnel mode enables WPA3 while bridge mode only supports WPA2
Bridge mode provides higher throughput for security scanning

Correct answer: Tunnel mode sends all client traffic to the controller for centralized firewall inspection before routing

Tunnel mode forwards all wireless client traffic to the Mobility Controller, where centralized firewall and policy enforcement is applied before routing.

Question 16: What is the primary purpose of User-Based Tunneling (UBT) in Aruba wired/wireless integration?

To bridge wireless VLANs to wired VLANs
To provide QoS prioritization for voice traffic
To tunnel wired switch port traffic to the Mobility Controller for policy enforcement (Correct answer)
To encrypt all wired traffic with IPsec

Correct answer: To tunnel wired switch port traffic to the Mobility Controller for policy enforcement

UBT tunnels traffic from Aruba switches to the Mobility Controller so that the same user-role policies applied to wireless clients can be enforced for wired users.

Question 17: What is the PRIMARY purpose of obtaining ACMA certification in Aruba Certified Mobility Associate?

To demonstrate verified competency and adherence to professional standards (Correct answer)
To guarantee employment in the field
To satisfy a personal achievement goal
To bypass educational requirements

Correct answer: To demonstrate verified competency and adherence to professional standards

Professional certification demonstrates that an individual has met established competency standards through verified assessment. It provides assurance to employers, clients, and the public that the certified professional possesses the knowledge and skills required for competent practice.

Question 18: Which Aruba controller feature enables seamless roaming for clients between APs on different controllers without re-authentication?

Fast BSS Transition (802.11r)
802.1X re-keying
L3 mobility via inter-controller tunneling (Correct answer)
OKC (Opportunistic Key Caching)

Correct answer: L3 mobility via inter-controller tunneling

Aruba's inter-controller mobility tunnel maintains client sessions and preserves IP addresses when a client roams between APs managed by different controllers.

Question 19: Which parameter in an Aruba SSID profile controls the maximum number of clients that can associate to a single AP radio?

Max Associations
Client Threshold
Radio Client Limit
Max Clients per Radio (Correct answer)

Correct answer: Max Clients per Radio

The 'Max Clients per Radio' setting in the SSID or AP radio profile caps concurrent client associations per radio.

Question 20: In Aruba's role-based access control, what happens to traffic that does not match any firewall policy rule?

It is forwarded to the default VLAN
Traffic is passed to the next AP for inspection
It triggers a RADIUS re-authentication
It is implicitly denied by the default deny rule (Correct answer)

Correct answer: It is implicitly denied by the default deny rule

Aruba firewalls have an implicit deny-all at the end of each policy, dropping unmatched traffic.

Question 21: Which 802.11 amendment introduced OFDMA as the primary multiple-access scheme for Wi-Fi?

802.11n
802.11ac
802.11ax (Correct answer)
802.11g

Correct answer: 802.11ax

802.11ax (Wi-Fi 6) introduced Orthogonal Frequency Division Multiple Access (OFDMA), enabling simultaneous transmission to multiple clients.

Question 22: A client successfully connects to an Aruba SSID but cannot reach the internet. The 'show user' command shows the client in the 'logon' role. What does this indicate?

The client's IP address conflicts with another device
The client has been blacklisted by the controller
Authentication has not completed; the client is in the pre-authentication role (Correct answer)
The SSID is configured in bridge mode without VLAN

Correct answer: Authentication has not completed; the client is in the pre-authentication role

The 'logon' role is the default pre-authentication role; if a client remains there, it means authentication (802.1X, captive portal, or MAC auth) has not succeeded.

Question 23: What is the function of the RADIUS attribute 'Class' (attribute 25) in Aruba deployments?

Defines the QoS marking for the client session
Sets the maximum session timeout for the client
Carries opaque data from the authentication server that is echoed back in accounting messages (Correct answer)
Specifies the firewall policy name to apply to the client

Correct answer: Carries opaque data from the authentication server that is echoed back in accounting messages

The Class attribute is an opaque value set by the RADIUS server that the NAS must include in all subsequent accounting messages for that session.

Question 24: Which unit is used to express antenna gain relative to an isotropic radiator?

dBd
dBW
dBm
dBi (Correct answer)

Correct answer: dBi

dBi (decibels relative to isotropic) measures antenna gain compared to a theoretically perfect isotropic antenna that radiates equally in all directions.

Question 25: Which modulation scheme is used by 802.11ax that was NOT available in 802.11ac?

1024-QAM (Correct answer)
256-QAM
64-QAM
512-QAM

Correct answer: 1024-QAM

802.11ax (Wi-Fi 6) introduced 1024-QAM, encoding 10 bits per symbol and providing approximately 25% higher throughput than 256-QAM when signal conditions allow.

Question 26: In Aruba ClearPass Policy Manager, what is the function of an 'Enforcement Profile'?

It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation (Correct answer)
It maps usernames to VLAN assignments in a local database
It specifies which authentication protocols are allowed
It configures the network device's 802.1X supplicant settings

Correct answer: It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation

An Enforcement Profile in ClearPass defines the RADIUS VSAs, CoA actions, or VLAN assignments that are sent back to the Network Access Device after policy evaluation.

Question 27: What effect does increasing the frequency of an RF signal have on its free-space path loss?

Path loss decreases because higher frequencies travel faster
Path loss is unaffected by frequency
Path loss decreases because higher frequencies have shorter wavelengths
Path loss increases because higher frequencies attenuate more over the same distance (Correct answer)

Correct answer: Path loss increases because higher frequencies attenuate more over the same distance

Higher frequencies experience greater free-space path loss over the same distance, which is why 5 GHz links have shorter range than 2.4 GHz links at the same power level.

Question 28: What is the frequency range of the 6 GHz band introduced for Wi-Fi use in the US?

5.925–6.425 GHz
6.5–7.5 GHz
5.925–7.125 GHz (Correct answer)
6.0–7.0 GHz

Correct answer: 5.925–7.125 GHz

The FCC opened 5.925–7.125 GHz (1200 MHz) for unlicensed Wi-Fi use in the US, enabling 802.11ax (Wi-Fi 6E) and 802.11be (Wi-Fi 7) deployments.

Question 29: What is the recommended response when a security incident is detected in an ACMA environment?

Follow the incident response plan: contain, eradicate, recover (Correct answer)
Ignore minor incidents
Immediately shut down all systems
Delete all logs immediately

Correct answer: Follow the incident response plan: contain, eradicate, recover

Following a structured incident response plan ensures containment of the threat, eradication of the cause, and recovery to normal operations.

Question 30: What is the purpose of Aruba ClearPass in network troubleshooting?

To troubleshoot network cables
To limit the number of devices allowed on the network
To manage device authentication and enforce network policies (Correct answer)
To manage the physical devices connected to the network

Correct answer: To manage device authentication and enforce network policies

Aruba ClearPass is a comprehensive Network Access Control (NAC) solution that manages device authentication and enforces network policies. In troubleshooting, it helps identify why a user or device might be denied access or experiencing connectivity issues by providing detailed logs and policy enforcement decisions. ClearPass ensures that only authorized users and compliant devices can connect to the network, based on granular policies, which is crucial for security and network health.

Question 31: In Aruba's role-based access control, what is a 'user role' primarily used for?

Defining the RADIUS shared secret per user group
Applying firewall policies and bandwidth limits to authenticated clients (Correct answer)
Mapping clients to specific access points
Selecting which EAP method is used for a given SSID

Correct answer: Applying firewall policies and bandwidth limits to authenticated clients

A user role in Aruba defines the set of firewall policies, ACLs, and bandwidth contracts applied to a client after authentication.

Question 32: What is the primary cause of multipath interference in a wireless network?

Excessive transmit power
Antenna polarization mismatch
Interference from neighboring APs on the same channel
RF signals reflecting off surfaces and arriving at the receiver at different times (Correct answer)

Correct answer: RF signals reflecting off surfaces and arriving at the receiver at different times

Multipath occurs when RF signals reflect off walls, floors, and objects, causing multiple copies of the same signal to arrive at slightly different times.

Question 33: In an Aruba controller cluster, what is the purpose of the cluster Virtual IP (VIP)?

Terminate VPN tunnels from remote APs
Provide a single IP for APs and clients to connect to regardless of which controller is active (Correct answer)
Assign DHCP addresses to APs
Host the captive portal page

Correct answer: Provide a single IP for APs and clients to connect to regardless of which controller is active

The cluster VIP provides a stable IP address that floats between controller cluster members, ensuring seamless failover for APs and clients.

Question 34: An Aruba AP is deployed in a conference room that is shielded with low-e glass. What deployment adjustment should be made?

Increase the AP transmit power to maximum
Switch the AP to 2.4 GHz only
Disable ARM and use static channels
Place an additional AP inside the shielded room (Correct answer)

Correct answer: Place an additional AP inside the shielded room

Low-e glass significantly attenuates RF signals, requiring an AP to be placed inside the shielded area for proper coverage.

Question 35: Which principle states that users should only have access necessary for their role?

Defense in depth
Need to share
Separation of duties
Principle of least privilege (Correct answer)

Correct answer: Principle of least privilege

The principle of least privilege ensures users only have the minimum access rights needed to perform their job functions, limiting potential damage.

Question 36: What is the purpose of configuring an AP's 'LMS IP' (Local Management Switch) during deployment?

To set the IP address of the local network switch
To define the VLAN for management traffic
To specify the primary controller the AP should connect to (Correct answer)
To configure the NTP server for the AP

Correct answer: To specify the primary controller the AP should connect to

The LMS IP tells the AP which controller to contact first for management, enabling directed controller discovery without relying solely on DHCP option 43.

Question 37: What is the most important professional competency for ACMA certification in rf principles?

Ability to work alone exclusively
Deep knowledge combined with practical application skills (Correct answer)
Memorization of all reference materials
Speed of task completion

Correct answer: Deep knowledge combined with practical application skills

Professional competency requires both deep knowledge of the subject matter and the ability to apply that knowledge in practical situations.

Question 38: Which Aruba security feature automatically classifies and contains rogue APs detected on the wireless network?

Air Monitor
RFProtect
Spectrum Analysis
Wireless Intrusion Protection (WIP) (Correct answer)

Correct answer: Wireless Intrusion Protection (WIP)

Wireless Intrusion Protection (WIP) detects, classifies, and contains rogue APs and other wireless threats.

Question 39: What is the primary role of the Mobility Master (MM) in an Aruba Mobility Master-based architecture?

Terminate user traffic
Provide centralized policy and configuration management (Correct answer)
Act as a RADIUS server
Serve as the DHCP server for APs

Correct answer: Provide centralized policy and configuration management

The Mobility Master provides centralized configuration, policy management, and visibility across all Mobility Controllers in the hierarchy.

Question 40: Which Aruba controller CLI command displays the current wireless client associations on access points?

show wireless users
show ap association (Correct answer)
show wlan clients
show clients

Correct answer: show ap association

The 'show ap association' command on Aruba controllers displays the list of wireless clients currently associated with access points, including their MAC addresses and AP associations.

Question 41: In Aruba role-based access, what is the 'logon' role primarily used for?

Assigning administrator privileges to controllers
Providing limited access before authentication completes, typically for captive portal redirect (Correct answer)
Enabling 802.1X supplicant functionality
Granting full network access after authentication

Correct answer: Providing limited access before authentication completes, typically for captive portal redirect

The logon role grants minimal access before a user authenticates, allowing only the traffic needed to complete the authentication process.

Question 42: Which foundational principle is MOST important for success in the Aruba Certified Mobility Associate profession?

Specializing in only one narrow area of practice
Maintaining the minimum requirements for certification
Maximizing financial returns on every engagement
Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.

Question 43: In ACMA practice, what is the best approach to quality improvement in rf principles?

Use data-driven methods with measurable outcomes (Correct answer)
Copy what other organizations do without analysis
Make changes without measuring results
Wait for problems to occur before acting

Correct answer: Use data-driven methods with measurable outcomes

Data-driven quality improvement with measurable outcomes ensures that changes actually produce the intended improvements and can be verified.

Question 44: What is the function of the Aruba Mobility Master in a large enterprise deployment?

Terminates all client Wi-Fi associations
Acts as a centralized management plane for Managed Devices (Correct answer)
Serves as the primary DHCP server
Provides RF spectrum analysis only

Correct answer: Acts as a centralized management plane for Managed Devices

Mobility Master separates the management plane from the data plane, centralizing configuration and licensing management for Managed Devices.

Question 45: Which 2.4 GHz channels are considered non-overlapping in North America?

1, 6, 11 (Correct answer)
1, 5, 9, 13
2, 7, 12
1, 3, 7

Correct answer: 1, 6, 11

In North America, channels 1, 6, and 11 are the only three non-overlapping channels in the 2.4 GHz band, each separated by 25 MHz.

Question 46: Which attack does Aruba's 'STA blacklisting' feature primarily defend against?

ARP poisoning from client devices
Repeated authentication failures or brute-force attempts (Correct answer)
Deauthentication flood attacks
Evil twin AP attacks

Correct answer: Repeated authentication failures or brute-force attempts

STA blacklisting blocks client stations that repeatedly fail authentication, mitigating brute-force attacks.

Question 47: What is RF absorption in the context of wireless networking?

The gain added by a high-gain antenna to a transmitted signal
The process by which an antenna captures incoming RF energy
The interference caused by overlapping RF channels
The conversion of RF signal energy into heat as it passes through a material (Correct answer)

Correct answer: The conversion of RF signal energy into heat as it passes through a material

RF absorption occurs when materials convert RF energy into heat as the signal passes through them, reducing the signal's strength on the other side.

Question 48: What is the primary purpose of encryption in ACMA security?

To compress data
To make data transfer slower
To organize data more efficiently
To protect data confidentiality during storage and transmission (Correct answer)

Correct answer: To protect data confidentiality during storage and transmission

Encryption protects data confidentiality by converting information into an unreadable format that can only be decoded with the proper key.

Question 49: What is the typical receive sensitivity threshold that most enterprise wireless clients require for reliable data transmission?

-40 dBm
-67 dBm (Correct answer)
-20 dBm
-90 dBm

Correct answer: -67 dBm

A received signal of -67 dBm is the commonly cited threshold for reliable enterprise wireless performance, providing adequate SNR for high data rates.

Question 50: How do you troubleshoot connectivity issues with Aruba wireless devices?

By focusing only on wired network devices
By reducing the number of connected devices on the network
By changing the physical appearance of the access point
By checking configurations, cables, signal strength, and network policies (Correct answer)

Correct answer: By checking configurations, cables, signal strength, and network policies

Troubleshooting connectivity issues with Aruba wireless devices involves a systematic approach. This includes verifying device configurations for correctness, checking physical cable connections for integrity, assessing wireless signal strength to ensure adequate coverage, and reviewing network policies (like VLANs or firewall rules) that might be restricting access. Addressing these key areas helps pinpoint the root cause of connectivity problems efficiently.

Question 51: What is the significance of SNMP 'community strings' in SNMPv1 and SNMPv2c?

They encrypt the SNMP payload between manager and agent
They act as plaintext passwords that authenticate SNMP GET and SET operations (Correct answer)
They define the SNMP polling interval for each device
They specify which OIDs a management station is permitted to query

Correct answer: They act as plaintext passwords that authenticate SNMP GET and SET operations

Community strings in SNMPv1/v2c function as plaintext shared secrets that must match between the SNMP manager and agent to authorize read (GET) or write (SET) access, though they provide no encryption.

Question 52: Why is it important to verify the signal strength of Aruba access points during troubleshooting?

To ensure adequate wireless coverage and identify weak signal areas (Correct answer)
To increase the number of connected devices to the AP
To reduce the size of the network coverage area
To focus only on wired network connections

Correct answer: To ensure adequate wireless coverage and identify weak signal areas

Verifying the signal strength of Aruba access points during troubleshooting is crucial to ensure adequate wireless coverage and identify areas with weak signals. Poor signal strength can lead to slow speeds, dropped connections, and an overall poor user experience. By checking signal strength, administrators can pinpoint coverage gaps or interference issues, allowing them to optimize AP placement or adjust configurations for better performance.

Question 53: During an Aruba AP site survey, what is the recommended minimum RSSI threshold for voice-grade wireless coverage?

-55 dBm
-67 dBm (Correct answer)
-75 dBm
-85 dBm

Correct answer: -67 dBm

-67 dBm is the commonly accepted minimum RSSI for voice-grade wireless coverage to ensure sufficient SNR for low-latency, low-loss communication.

Question 54: Which authentication method is most appropriate for IoT devices that cannot run an 802.1X supplicant?

EAP-PEAP with MSCHAPv2
WPA3-Enterprise with SAE
MAC Authentication Bypass (MAB) (Correct answer)
EAP-TLS with device certificates

Correct answer: MAC Authentication Bypass (MAB)

MAC Authentication Bypass (MAB) is used for devices incapable of 802.1X (printers, sensors, cameras) by authenticating them based on their MAC address via RADIUS.

Question 55: An Aruba IAP cluster Virtual Controller IP is not reachable from the wired network. The IAP uplink is connected to an access port on VLAN 1. What is the most likely issue?

The Virtual Controller IP is not on the same subnet as VLAN 1 or no default gateway is configured (Correct answer)
The IAP needs to be rebooted to elect a new Virtual Controller
The SSID profile is missing a VLAN assignment
The IAP's DHCP lease has expired

Correct answer: The Virtual Controller IP is not on the same subnet as VLAN 1 or no default gateway is configured

If the Virtual Controller IP is not within the AP management subnet or lacks a gateway, it will be unreachable from other network segments.

Question 56: Which authentication method does WPA3-Personal use to replace the traditional PSK handshake and resist offline dictionary attacks?

TKIP
PEAP
EAP-TLS
SAE (Simultaneous Authentication of Equals) (Correct answer)

Correct answer: SAE (Simultaneous Authentication of Equals)

WPA3-Personal replaces PSK with SAE, a password-authenticated key exchange that prevents offline dictionary attacks even if the handshake is captured.

Question 57: In a multi-floor office building, what is the primary concern when designing WLAN coverage to avoid co-channel interference between floors?

Disabling 5 GHz radios on alternate floors
Increasing transmit power on all APs
Selecting non-overlapping channels and controlling vertical signal bleed (Correct answer)
Using the same channel on every floor

Correct answer: Selecting non-overlapping channels and controlling vertical signal bleed

Vertical co-channel interference between floors is managed by using non-overlapping channels and adjusting AP power/tilt to limit signal propagation between floors.

Question 58: What is the role of WPA3 encryption in network security?

To make the network less secure than WPA2
To provide stronger encryption and protection against attacks on the wireless network (Correct answer)
To reduce the speed of wireless connections
To limit the number of devices that can connect to the network

Correct answer: To provide stronger encryption and protection against attacks on the wireless network

WPA3 (Wi-Fi Protected Access 3) is the latest standard for securing wireless networks, offering significant advancements over WPA2. It introduces more robust encryption algorithms, enhanced protection against dictionary attacks, and improved privacy features like Opportunistic Wireless Encryption (OWE) for open networks. These features make WPA3 crucial for safeguarding sensitive data and preventing unauthorized access to wireless communications.

Question 59: What is RF refraction in wireless networking?

The cancellation of RF signals due to phase differences
The bouncing of RF signals off smooth surfaces
The bending of RF signals as they pass through materials with different densities (Correct answer)
The spreading of RF energy as it travels away from the antenna

Correct answer: The bending of RF signals as they pass through materials with different densities

RF refraction is the bending of a radio wave as it passes through mediums of different densities, similar to how light bends through water or glass.

Question 60: Which EAP method uses a client-side certificate for mutual authentication without requiring a server-side password?

EAP-MD5
EAP-PEAP
EAP-TLS (Correct answer)
EAP-GTC

Correct answer: EAP-TLS

EAP-TLS requires both the client and server to present X.509 certificates, providing strong mutual authentication without passwords.

Aruba Certified Mobility Associate (ACMA) Exam

The Aruba Certified Mobility Associate (ACMA) certification validates foundational knowledge and skills required to configure and manage Aruba WLANs using ArubaOS 8.

Questions

90 min

Time Limit

63%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds