HPE6-A71 Aruba Certified Mobility Professional Exam

Exam ID HPE6-A71
Exam type Proctored
Exam duration 1 hour 30 minutes
Exam length 60 questions
Passing score 65%
Delivery languages Japanese, English, Latin American Spanish
Supporting resources These recommended resources help you prepare for the exam:

Implementing Aruba Mobility, Rev. 19.21

Additional study materials

Exam description
This exam tests your skills with the WLAN design, deployment, and troubleshooting of Aruba Mobile First Network Solutions in complex highly available campus and branch environments. It also tests your ability to configure specialized applications, management, and security requirements for a WLAN such as UCC Voice and advanced security features.
Ideal candidate for this exam
Typical candidates for this exam are networking IT professionals with a minimum of two years of advanced-level implementation experience with Aruba WLAN solutions and a minimum of three years of experience with wired LAN infrastructure and switching and routing technologies.

Exam contents
This exam has 60 questions.
Advice to help you take this exam

Complete the training and review all course materials and documents before you take the exam.
Use HPE Press study guides and additional reference materials; study guides, practice tests, and HPE books.
Exam items are based on expected knowledge acquired from job experience, an expected level of industry standard knowledge, or other prerequisites (events, supplemental materials, etc.).
Successful completion of the course or study materials alone, does not ensure you will pass the exam.

Objectives
This exam validates that you can:
Percentage of Exam Sections/Objectives

20% Integrate and implement Aruba Mobile First architecture components and explain their uses.
Integrate components of the Aruba Mobile First Architecture.
Differentiate between standalone mode and Master Controller Mode (MCM) features and recommend use cases.
Differentiate the use of packet forwarding modes (tunnel, decrypt-tunnel, split-tunnel, and bridge).
Differentiate between redundancy methods, and describe the benefits of L2 and L3 clustering.
Explain Remote Access architectures and how to integrate the architectures.
Describe and differentiate advanced licensing features.

20% Configure and validate Aruba WLAN secure employee and guest solutions.
• Configure Remote Access with Aruba Solutions such as RAP and VIA.
• Configure and deploy redundant controller solutions based upon a given design.
• Configure a Mesh WLAN.

38% Implement advanced services and security.
• Enable multicast DNS features to support discovery across VLAN boundaries.
• Configure role derivation, and explain and implement advanced role features.
• Configure an AAA server profile for a user or administrative access.
• Implement Mobility Infrastructure hardening features.
• Explain Clarity features and functions.
• Implement Voice WLAN based upon a given design.
• Configure primary zones and data zones to support MultiZone AP.
• Implement mobility (roaming) in an Aruba wireless environment.
• Implement tunneled node to secure ArubaOS switches.

10% Manage and monitor Aruba solutions.
• Use AirWave to monitor an Aruba Mobility Master and Mobility Controller.
• Perform maintenance upgrades and operational maintenance.

12% Troubleshoot Aruba WLAN solutions.
• Troubleshoot controller communication.
• Troubleshoot the WLAN.
• Troubleshoot Remote Access.
• Troubleshoot issues related to services and security.
• Troubleshoot role-based access, per-port based security and Airmatch.

QUESTION 1
An administrator deploys an AP at a branch office. The branch office has a private WAN circuit that provides
connectivity to a corporate office controller. An Ethernet port on the AP is connected to a network storage
device that contains sensitive information. The administrator is concerned about sending this traffic in cleartext across the private WAN circuit.
What can the administrator do to prevent this problem?

A. Enable IPSec encryption on the AP’s wired ports.
B. Convert the campus AP into a RAP.
C. Redirect the wired port traffic to an AP-to-controller GRE tunnel.
D. Enable AP encryption for wired ports.

Correct Answer: A

QUESTION 2
An administrator needs to modify a VAP used for a branch office RAP. The VAP’s operating mode is currently
defined as backup and uses tunnel mode forwarding. The administrator wants to implement split-tunnel forwarding mode in the VAP.
Which WLAN operating mode must the administrator define for the VAP before the tunnel forwarding mode can be changed to split-tunnel?

A. Trusted
B. Always
C. Persistent
D. Standard

Correct Answer: D

QUESTION 3
An administrator creates service-based policies for AirGroup on the Mobility Master (MM). The administrator can define location-based policy limits based on which information?

A. controller names, controller groups, and controller Fully Qualified Domain Names (FQDNs)
B. AP names, AP groups, controller names, and controller groups
C. AP Fully Qualified Location Names (FQLNs) and controller Fully Qualified Domain Names (FQDNs)
D. AP names, AP groups, and AP Fully Qualified Location Names (FQLNs)
Correct Answer: D

QUESTION 4
An administrator supports a RAP at a branch office. A user’s device that is attached to the Ethernet port is assigned an 802.1X AAA policy and is configured for tunneled node.
How is the user’s traffic transmitted to the corporate office?

A. It is not encapsulated by GRE and not protected with IPSec.
B. It is encapsulated by GRE and protected with IPSec.
C. It is not encapsulated by GRE but is protected with IPSec.
D. It is encapsulated by GRE and not protected with IPSec.

Correct Answer: B