ACP Aruba Wireless Technologies and Solutions 3 — Questions and Answers
Question 1: Which Aruba technology uses 6 GHz band spectrum introduced in Wi-Fi 6E to deliver additional non-overlapping channels?
- Wi-Fi 6 (802.11ax) on 5 GHz only
- Wi-Fi 6E extending 802.11ax into the 6 GHz band (Correct answer)
- Wi-Fi 5 (802.11ac) Wave 3
- 802.11ad WiGig
Correct answer: Wi-Fi 6E extending 802.11ax into the 6 GHz band
Wi-Fi 6E extends the 802.11ax standard into the newly opened 6 GHz band, providing up to 1,200 MHz of additional spectrum with 59 non-overlapping 20 MHz channels in the US.
Question 2: In Aruba's Adaptive Radio Management (ARM), what does 'Band Steering' accomplish?
- Moves clients from 2.4 GHz to 5 GHz to reduce congestion (Correct answer)
- Increases transmit power on congested APs
- Blocks legacy 802.11b clients
- Assigns WMM traffic classes to bands
Correct answer: Moves clients from 2.4 GHz to 5 GHz to reduce congestion
Band Steering nudges dual-band capable clients toward the less congested 5 GHz band by withholding probe responses on 2.4 GHz until thresholds are met.
Question 3: What role does a Mobility Master (MM) serve in an Aruba hierarchical controller architecture?
- Terminates VPN tunnels from remote APs
- Serves as the top-level licensing and configuration entity managing Mobility Controllers (Correct answer)
- Provides DHCP services to wireless clients
- Acts as the primary RADIUS server
Correct answer: Serves as the top-level licensing and configuration entity managing Mobility Controllers
The Mobility Master sits at the top of the hierarchy, managing licenses, global configuration, and firmware for all managed Mobility Controllers.
Question 4: Which Aruba security feature detects and contains rogue APs by sending de-authentication frames to clients connected to unauthorized devices?
- IDS Signature Matching
- Wireless Intrusion Protection (WIP) Containment (Correct answer)
- ClearPass Profiling
- ClientMatch
Correct answer: Wireless Intrusion Protection (WIP) Containment
Aruba's Wireless Intrusion Protection containment uses targeted de-authentication frames to disconnect clients from rogue or interfering APs.
Question 5: When configuring WPA3-Enterprise on an Aruba AP, which protocol provides the required 192-bit security mode?
- CCMP-128 with AES
- GCMP-256 with Suite B cryptography (Correct answer)
- TKIP with SHA-1
- CCMP-256 with PEAP
Correct answer: GCMP-256 with Suite B cryptography
WPA3-Enterprise 192-bit mode uses GCMP-256 for encryption and Suite B (CNSA) cryptographic algorithms mandated for high-security environments.
Question 6: An Aruba Instant AP cluster shares which type of key to allow seamless client roaming without re-authentication?
- PMK-R0 key held by master IAP
- Pairwise Master Key (PMK) cached per AP only
- PSK distributed via RADIUS
- OKC (Opportunistic Key Caching) distributed across all IAPs (Correct answer)
Correct answer: OKC (Opportunistic Key Caching) distributed across all IAPs
Aruba Instant clusters distribute the PMK via Opportunistic Key Caching so clients can roam between cluster members without performing a full 802.1X re-authentication.
Question 7: Which Aruba feature dynamically assigns clients to different APs based on load, signal strength, and band conditions?
- ClientMatch (Correct answer)
- AppRF
- ARM Power Save
- RF Protect
Correct answer: ClientMatch
ClientMatch continuously evaluates client RF conditions and steers clients to the optimal AP or band through targeted de-authentication and re-association guidance.
Which Aruba technology uses 6 GHz band spectrum introduced in Wi-Fi 6E to deliver additional non-overlapping channels?