Summer Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Question # 4

A network administrator wants to permit explicit SSH, FTP and HHTP(s) access to servers in the 10.100.20.5 to 10.100.20.31 range, all devices in 10.100.21.0/24 network, and a host with IP address 10.100.22.70. The services must work properly at all times.

Which configuration scripts accomplish this task with the fewer number of lines, while avoiding access to other devices not included in these ranges? (Choose two.)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Full Access
Question # 5

Refer to the exhibit.

An Aruba network is deployed with L2 and L3 Mobility Master (MM) redundancy across two datacenters, as shown in the exhibit. The network administrator confirms that all Mobility Controllers (MC) are currently communicating with MM1, which is the L2 Active and, L3 Primary.

Which MM IP will MCs communicate with if MM1 fails?

A.

10.1.1.10

B.

10.1.1.12

C.

10.2.1.10

D.

10.2.1.21

Full Access
Question # 6

Refer to the exhibit.

An organization provides WiFi access through a corporate SSID with an Aruba Mobility Master (MM) - Mobility Controller (MC) network that includes PEF functions. The organization wants to have a single firewall policy configured and applied to the employee role.

This policy must allow users to reach Web, FTP, and DNS services, as shown in the exhibit. Other services should be exclusive to other roles. The client NICs should receive IP settings dynamically.

Which policy design meets the organization’s requirements while minimizing the number of policy rules?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 7

Refer to the exhibit.

A network administrator wants to allow contractors to access the WLAN named EmployeesNet. In order to restrict network access, the network administrator wants to assign this category of users to the contractor user role. To do this, the network administrator configures ClearPass in a way that it returns the Aruba-User-Role with the contractor value.

When testing the solution, the network administrator receives the wrong role.

What should the network administrator do to assign the contractor role to contractor users without affecting any other role assignment?

A.

Check the Download role from the CPPM option in the AAA profile.

B.

Set contractor as the default role in the AAA profile.

C.

Create Contractor firewall role in the M.

D.

Create server deviation rules in the server group.

Full Access
Question # 8

Refer to the exhibit.

The network administrator must ensure that the configuration will force users to authenticate periodically every eight hours. Which configuration is required to effect this change?

A.

Set the reauth-period to 28800 enable reauthentication in the dotlx profile.

B.

Set the reauth-period to 28800 enable reauthentication in the AAA profile.

C.

Set the reauth-period to 28800 enable reauthentication in both dotlx and AAA profile.

D.

Set the reauth-period to 28800 in the dotlx profile and enable reauthentication in the AAA profile.

Full Access