ACMP-6-1 Certification Exam Questions with AI Explanations

The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).
Which is the default use of this statement in an Aruba controller configuration?

source the IP addresses of users to specific IP address
redirect HTTP sessions to Captive Portal
redirect Access Points to another Aruba controller
provide a telnet connection to the controller
redirect a SSH session to terminate on the controller

Answer(s): B

Reveal Solution Next Question

QUESTION: 31

The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation

(src-nat).
Which is a use of this statement in an Aruba configuration?

provide a single source IP address for users in a role
redirect Captive Portal HTTP sessions
redirect Access Points to another Aruba controller
provide IP addresses to clients
redirects clients to Aruba Firewall

Answer(s): A

Explanation:

2-5 - Policy Interpretation

Reveal Solution Next Question

Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon access-list List
----------------
Position Name Location
-------- ---- --------
1 logon-control
2 captiveportal logon-control
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit captiveportal
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?

the user's traffic will be passed to the IP address because of the policy statement:user any svc-http dst-nat 8080
the user's traffic will be passed to the IP address because of the policy statement:user any svc- https dst-nat 8081
the user's traffic will be passed to the IP address because of the policy statement:user any svc- http-proxy1 dst-nat 8088
the user will not reach the IP address because of the policy statement:user any svc-http dst-nat
the user will not reach the IP address because of the implicit deny any any at the end of the policy.

Answer(s): D

Reveal Solution Next Question

Aruba Certified Mobility Professional 6.1 ACMP-6-1 Dumps in PDF

Free Aruba ACMP-6-1 Real Questions (page: 23)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28

QUESTION: 29

Explanation:

QUESTION: 30

QUESTION: 31

Explanation:

QUESTION: 32