Question 1

What is a benefit or using network aliases in ArubaOS firewall policies?

Options :

A :

You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.

B :

You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall

C : You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update

D : You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Answer: C

Question 2

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Question 3

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

Options :

A : the match method

B : the detecting devices

C : the match type

D : the confidence level

Answer: B

Question 4

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Options :

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B :

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C :

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D :

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Question 5

What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?

Options :

A : It enables secure boot, which detects if hackers corrupt the OS with malware.

B : It deploys the AP with enhanced security, which includes disabling the password recovery mechanism.

C :

It allows the AP to run in secure mode, which automatically enables CPsec and disables the console port.

D : It enables the AP to encrypt and decrypt 802.11 traffic locally, rather than at the MC.

Answer: A