ACMA Controller Architecture 5 — Questions and Answers
Question 1: Which Aruba controller feature enables seamless roaming for clients between APs on different controllers without re-authentication?
- Fast BSS Transition (802.11r)
- L3 mobility via inter-controller tunneling (Correct answer)
- OKC (Opportunistic Key Caching)
- 802.1X re-keying
Correct answer: L3 mobility via inter-controller tunneling
Aruba's inter-controller mobility tunnel maintains client sessions and preserves IP addresses when a client roams between APs managed by different controllers.
Question 2: What is the function of the Aruba controller's 'anchor controller' in a mobility domain?
- Act as RADIUS server for all clients
- Maintain the client's original IP and session state during inter-controller roaming (Correct answer)
- Serve as the primary DNS resolver
- Terminate IPsec VPN tunnels from branch APs
Correct answer: Maintain the client's original IP and session state during inter-controller roaming
The anchor controller retains the client's original session, IP address, and firewall role even after the client roams to an AP on a different (foreign) controller.
Question 3: Which Aruba controller configuration object defines the SSID name, encryption type, and authentication method for a wireless network?
- AP group
- Virtual AP profile (Correct answer)
- RF management profile
- Wired port profile
Correct answer: Virtual AP profile
A Virtual AP (VAP) profile defines the SSID, security settings (WPA2/WPA3, 802.1X, PSK), and forwarding mode for a wireless network.
Question 4: In Aruba controller-based deployments, what does 'split tunneling' allow a Remote AP (RAP) to do?
- Send all traffic through the controller tunnel
- Bridge corporate traffic to the controller while sending internet traffic locally (Correct answer)
- Disable encryption on the corporate SSID
- Use two separate CAPWAP tunnels simultaneously
Correct answer: Bridge corporate traffic to the controller while sending internet traffic locally
Split tunneling on a RAP routes corporate-destined traffic through the controller tunnel while allowing internet-bound traffic to exit locally, saving WAN bandwidth.
Question 5: Which Aruba controller process is responsible for 802.1X authentication handling and RADIUS communication?
- authmgr (Correct answer)
- sapd
- stm
- aruba-vpnc
Correct answer: authmgr
The authmgr (Authentication Manager) process on the Aruba controller handles 802.1X state machines and communicates with external RADIUS servers.
Question 6: What is the purpose of the 'stm' process on an Aruba Mobility Controller?
- Manage CAPWAP tunnel establishment with APs
- Handle station management and 802.11 association state for clients (Correct answer)
- Perform spectrum analysis
- Manage controller-to-controller clustering
Correct answer: Handle station management and 802.11 association state for clients
The STM (Station Management) process tracks 802.11 association and disassociation events, managing the client state machine on the controller.
Question 7: Which Aruba controller feature can automatically move an AP to a different AP group based on its location or deployment type?
- AirMatch
- AP Whitelisting
- AP System Profile auto-provisioning rules (Correct answer)
- LLDP-based group assignment
Correct answer: AP System Profile auto-provisioning rules
Auto-provisioning rules on the Aruba controller use criteria such as AP name, MAC, or subnet to automatically assign APs to appropriate AP groups and system profiles.
ACMA Controller Architecture 5
Which Aruba controller feature enables seamless roaming for clients between APs on different controllers without re-authentication?