HP HPE6-A85 - Aruba Certified Campus Access Associate Exam

For "headless" devices that lack 802.1X support, Multi-Preshared Keys (mPSK) provide a more secure alternative to WPA2-Personal, which uses a single preshared key. mPSK allows for the assignment of unique PSKs to devices or groups of devices, which enhances security by not sharing a single PSK across multiple devices.

a) Alerts on config changes via email - Foundation b) Group-based firmware compliance - Foundation c) Heat maps of deployed APs - Advanced d) Live upgrades of an AOS10 cluster - Advanced

According to the Aruba Central Licensing Guide1, the Foundation License provides basic device management features such as configuration, monitoring, alerts, reports, firmware management, etc. The Advanced License provides additional features such as AI insights, WLAN services, NetConductor Fabric, heat maps, live upgrades, etc.

https://www.arubanetworks.com/techdocs/central/2.5.3/content/pdfs/licensing-guide.pdf

In a Virtual Switching Extension (VSX) stack, the Virtual IP (VIP) provides a single default gateway IP address for clients connected to the access switch. This VIP is a floating IP that is active on the primary VSX switch. In the event of a failure of the primary switch, the VIP will failover to the secondary switch, ensuring that client traffic can continue to be routed without disruption.

Virtual Router Redundancy Protocol (VRRP) is a network protocol that provides automatic assignment of available Internet Protocol (IP) routers to participating hosts. VRRP sends its messages over multicast for communication among routers for the election process of the master and advertisement of the virtual IP address.

In Aruba Central, during the creation of a device configuration group, users can define various types of groups to manage and apply configurations to devices centrally. Among the options, "Template group" and "Default group" are valid types. A "Template group" allows the definition of configuration settings in a template format, which can be applied to multiple devices or device groups, ensuring consistency and efficiency in configurations across the network. A "Default group" is typically a predefined group in Aruba Central that applies a basic or initial set of configurations to devices that are not assigned to any other specific group. This helps in initial provisioning and management of devices. The other options, such as "Security group," "UIgroup," and "ESP group," are not standard group types defined in Aruba Central for device configuration purposes.

Add certificates to Android devices with the Aruba Onboard Application in the Google Play store that will be used for wireless authentication A) ClearPass Policy Manager

Authenticate users on corporate-owned Chromebook devices using 802.1X and context gathered from the network devices that they log into B) Cloud Authentication and Policy

Leverage unbound Mum Pre-Shared Keys (MPSK) managed by Aruoa Central to the end-users and client devices B) Cloud Authentication and Policy

Validate devices exist in a Mobile Device Management (MDM) database before authenticating BYOD users with corporate Active Directory using certificates A) ClearPass Policy Manager

https://www.arubanetworks.com/techdocs/ClearPass/6.11/PolicyManager/Content/CPPM_UserGuide/About%20ClearPass/About_ClearPass.htm

https://www.arubanetworks.com/products/security/network-access-control/

When an Aruba AP is not receiving its configuration from Aruba Central, and other APs at the location are functioning normally, a common troubleshooting step is to disable and then re-enable the activation process on the AP. This action can trigger a provisioning refresh, prompting the AP to attempt to retrieve its configuration from Aruba Central again. This step is often effective in resolving communication or provisioning issues between the AP and the management platform.

On an Aruba CX 6300M switch, routing between Switch Virtual Interfaces (SVIs) is enabled by default. Therefore, traffic between SVIs, like 120 and 130, can be routed internally without the need for additional configuration such as route leaking or static routes, as long as there is no 'no routing' configuration present on the SVIs.

An AP signal strength of .0000001 milliwatts is equivalent to -80 dBm. The dBm scale is logarithmic, with every 10 dBm representing a tenfold increase or decrease in power. A signal strength of 1 milliwatt (mW) is 0 dBm, so a signal strength of .0000001 mW is 80 decibels less than 1 mW, which is -80 dBm.

While both 5 GHz and 6 GHz channels can provide similar throughputs, the higher frequency of the 6 GHz band means its signals have a shorter range and are more attenuated by obstaclescompared to 5 GHz signals. This results in 5 GHz channels generally being able to travel longer distances than 6 GHz channels under similar conditions, although both can support high data rates for connected clients.