Pass ACMP_6.4 Exam By Training Lead2pass New VCE And PDF Dumps:
https://www.lead2pass.com/acmp-6-4.html
QUESTION 21
What is true about Global Session ACL? (Choose two)
A. Any rules will apply to all users in the AP-group
B. Any rules will apply to all users in the Network
C. Any rules will apply to all users in the controller
D. Is in the first position in all roles
E. When added it is in the first position in selected Role
Answer: BD
QUESTION 22 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon
access-list List
—————-
Position Name Location
——– —- ——–
1 logon-control
2 captiveportal
logon-control
————-
Priority Source Destination Service Action
——– —— ———– ——- ——
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit
captiveportal
————-
Priority Source Destination Service Action
——– —— ———– ——- ——
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts tostart an http session to IP address 172.16.43.170.
What will happen?
A. the user’s traffic will be passed to the IP address because of the policy statement:user any svc-http dst-nat 8080
B. the user’s traffic will be passed to the IP address because of the policy statement:user any svc-https dst-nat 8081
C. the user’s traffic will be passed to the IP address because of the policy statement:user any svc-http-proxy1 dst-nat 8088
D. the user will not reach the IP address because of the policy statement:user any svc-http dst-nat 8080
E. the user will not reach the IP address because of the implicit deny any any at the end of the policy.
Answer: D
QUESTION 23 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Which may be applied directly to an VLAN interface? (Choose three)
A. Access List (ACL)
B. Firewall Policy
C. Roles
D. AAA profiles
E. RF Plan Map
Answer: ABD
QUESTION 24 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).
Which is the default use of this statement in an Aruba controller configuration?
A. source the IP addresses of users to specific IP address
B. redirect HTTP sessions to Captive Portal
C. redirect Access Points to another Aruba controller
D. provide a telnet connection to the controller
E. redirect a SSH session to terminate on the controller
Answer: B
QUESTION 25 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
View the Server group and User Roles screen shots above.
A user associated to an SSID with 802.1x using this server group. RadiusNY returned a standard radius attribute of filter-Id with a value of “employee”.
The user was placed in the guest Role. What statements below are correct? (Choose two)
A. The user was placed in the 802.1x authentication default Role guest
B. The user was placed in the initial Role guest
C. Role derivation failed because roles are case sensitive
D. Role derivation failed because the incorrect operation “value-of” was used
E. 802.1x authentication failed so the user was automatically placed in the guest Role
Answer: AC
QUESTION 26 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
What is the function of Station Handoff Assist, if enabled?
A. Force device to 5Ghz band
B. Force device off AP if RSSI is below threshold
C. Send message to device to change AP
D. Send message to adjoining AP to accept device
E. Send message to adjoining AP to initiate association to the device
Answer: B
QUESTION 27 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
What settings need to be changed on a factory default AP in order for it to use ADP to discover the Aruba Controller?
A. DNS of the controller
B. Static route
C. AP group
D. enable multicast
E. no changes needed
Answer: E
QUESTION 28 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Which log type should be enabled to troubleshoot IPSec authentication issues on Aruba Controllers?
A. Security Logs
B. Management Logs
C. Wireless Logs
D. IDS Logs
E. System Logs
Answer: A
QUESTION 29 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
An administrator wants to assign a VLAN to a user based upon the authentication process using Vendor Specific Attributes (VSA).
Where are Aruba Vendor Specific Attribute (VSA) values provisioned?
A. controller
B. client
C. RADIUS server
D. Internal user database
E. Option 60 of DHCP reply
Answer: C
QUESTION 30 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Which actions does ARM (Adaptive Radio Management) perform? (Choose two)
A. allows controllers to provision the AP Radio type
B. allows controllers to provision the best channel for APs
C. allows controllers to provision the best power setting for APs
D. allows controllers to provision allowed Radio bands
E. allows controllers to provision lower power when unauthorized APs are detected
Answer: BC
ACMP_6.4 dumps full version (PDF&VCE): https://www.lead2pass.com/acmp-6-4.html
Large amount of free ACMP_6.4 exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDYmVFcGxYZUE4NHM