HP HPE6-A71 : Aruba Certified Mobility Professional Exam

Which VPN component must be configured on the Mobility Master (MM) to allow a RAP to use the built-in certificate to successfully connect to a Mobility Controller (MC)?

• A. VPN username and password
• B. IPSec pre-sharedkey
• C. CPSec auto-whitelist
• D. IP Address pool

An administrator moves an AP from Campus 1 to Campus 2. At the Campus 2, the moved AP does not connect to a controller and download an AP Group configuration.
Which process should the administrator perform to reset the AP back to its initial default state?

• A. From apboot mode, execute factory_reset.
• B. From the controller's ArubaOS, execute write erase all.
• C. From the AP's ArubaOS CLI, execute write erase all.
• D. From apboot mode, execute purgeenv.

An administrator at Campus A manages Aruba Mobility Controllers (MCs). The administrator defines a server group that includes a local ClearPass server and a remote Microsoft RADIUS server. The ClearPass server has the credentials for users at Campus A and the Microsoft RADIUS server has the credentials for users at Campus B.
Users at CampusA successfully authenticate and connect to the Campus A wireless network.
However, when users from Campus B visit Campus A they fail authentication.
What can the administrator do to solve this problem?

• A. Enable machine authentication on the Mobility Controllers.
• B. Enable EAP termination on the ClearPass server.
• C. Enable EAP-TTLS with EAP Termination on the Mobility Controllers.
• D. Enable FastConnect on the Campus A Mobility Controllers.

An administrator configures a port on aRAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic.
But, when users connect with their wired desktops, they have full access to corporate resources.
What must the administrator do to restrict desktop usage based on the users' role assignment?

• A. Implement per-user tunnel node on the RAP.
• B. Identify the RAP port as untrusted.
• C. Implement ACLs on the RAP port.
• D. Apply a server-derived role privacy tothe RAP port.

An administrator wants to use AirWave to manage the configuration policy settings of a set of ArubaOS-Switches. Where should the administrator perform this action?

• A. in Groups
• B. in APs/Devices
• C. in Device Setup
• D. in AMP Setup