ACMA 8 Chapter 9|Complete Questions with A+
Graded Answers
Guest Access is often configured as a what?
A software option
1 multiple choice option
What is added as an overlay on the existing wired LAN for guest access?
Aruba's user-centric networks
2 multiple choice options
Where does an integral stateful firewall maintains strict segregation between different traffic classes?
MC
2 multiple choice options
In a Guest Network with NAT, Aruba does what?
-Provides DHCP on a separate network for the guests
-NATs guests out of the LAN and into the corportae LAN
In a Guest Network with NAT, where does the guest gets its address allocated?
On a separate IP network than the rest of the company
1 multiple choice option
Why does a Guest Network with a Dedicated WAN provide great security?
Because it's physically isolated from other network users
In which Guest Network deployment your guest and corporate user don't share internet connection?
Guest Network with a Dedicated WAN
3 multiple choice options
In Guest Network Tunnel to a DMZ Controller, what do large corporations do?
They levarage their DMZ controller to send guest user traffic via the DMZ edge firewall
In which Guest Network deployment does the AP tunnel to the internal mobility controller and then
to the DMZ controller?
Guest Network Tunnel to a DMZ Controller
3 multiple choice options
What Guest Network deployment maintains total logical isolation of the guest traffic and the
corporate users?
Guest Network Tunnel to a DMZ Controller
3 multiple choice options
The Guest Network with MultiZone AP reduces the amount of what the guest traffic will need to
traverse?
Tunnels
, 1 multiple choice option
In which Guest Network deployment does the AP tunnel their traffic directly to the DMZ mobilty
controller?
Guest Network with MultiZone AP
3 multiple choice options
When a controller exists as the default router for a nonroutable guest network is typically a what
Layer device?
Layer 3
2 multiple choice options
What type of method is a Captive Portal?
One authentication method ArubaOS supports
2 multiple choice options
What does a Captive Portal present which requires user action?
A web page
1 multiple choice option
What type of network resources does a guest client with an IP get on the guest SSID?
Rsources allowed for the initial role
1 multiple choice option
What happens when the guest client types xyz.com on a web browser?
The DNS lookup is performed
1 multiple choice option
Ones the guest knows the website's address it initiates what type of connection to the web server?
TCP connection
2 multiple choice options
In the Captive Portal process the Aruba controller does what?
It watches for HTTPS SYN and performs a redirct (NAT destination) to the captive portal page
2 multiple choice options
Where is authentication, which grants interntet access to the internet, usually implemented?
In the Aruba Controller's internal database
2 multiple choice options
What information is needed prior to starting the config of a Guest WLAN?
-Design the IP network
-Choose a VLAN for Guest Access
-Designate a DHCP server and scope for Guest Access
2 multiple choice options
Graded Answers
Guest Access is often configured as a what?
A software option
1 multiple choice option
What is added as an overlay on the existing wired LAN for guest access?
Aruba's user-centric networks
2 multiple choice options
Where does an integral stateful firewall maintains strict segregation between different traffic classes?
MC
2 multiple choice options
In a Guest Network with NAT, Aruba does what?
-Provides DHCP on a separate network for the guests
-NATs guests out of the LAN and into the corportae LAN
In a Guest Network with NAT, where does the guest gets its address allocated?
On a separate IP network than the rest of the company
1 multiple choice option
Why does a Guest Network with a Dedicated WAN provide great security?
Because it's physically isolated from other network users
In which Guest Network deployment your guest and corporate user don't share internet connection?
Guest Network with a Dedicated WAN
3 multiple choice options
In Guest Network Tunnel to a DMZ Controller, what do large corporations do?
They levarage their DMZ controller to send guest user traffic via the DMZ edge firewall
In which Guest Network deployment does the AP tunnel to the internal mobility controller and then
to the DMZ controller?
Guest Network Tunnel to a DMZ Controller
3 multiple choice options
What Guest Network deployment maintains total logical isolation of the guest traffic and the
corporate users?
Guest Network Tunnel to a DMZ Controller
3 multiple choice options
The Guest Network with MultiZone AP reduces the amount of what the guest traffic will need to
traverse?
Tunnels
, 1 multiple choice option
In which Guest Network deployment does the AP tunnel their traffic directly to the DMZ mobilty
controller?
Guest Network with MultiZone AP
3 multiple choice options
When a controller exists as the default router for a nonroutable guest network is typically a what
Layer device?
Layer 3
2 multiple choice options
What type of method is a Captive Portal?
One authentication method ArubaOS supports
2 multiple choice options
What does a Captive Portal present which requires user action?
A web page
1 multiple choice option
What type of network resources does a guest client with an IP get on the guest SSID?
Rsources allowed for the initial role
1 multiple choice option
What happens when the guest client types xyz.com on a web browser?
The DNS lookup is performed
1 multiple choice option
Ones the guest knows the website's address it initiates what type of connection to the web server?
TCP connection
2 multiple choice options
In the Captive Portal process the Aruba controller does what?
It watches for HTTPS SYN and performs a redirct (NAT destination) to the captive portal page
2 multiple choice options
Where is authentication, which grants interntet access to the internet, usually implemented?
In the Aruba Controller's internal database
2 multiple choice options
What information is needed prior to starting the config of a Guest WLAN?
-Design the IP network
-Choose a VLAN for Guest Access
-Designate a DHCP server and scope for Guest Access
2 multiple choice options
