Aruba ACMP-6-1 Exam (page: 4)
Aruba Certified Mobility Professional 6.1
Updated on: 25-Dec-2025

Viewing Page 4 of 23

Which netdestination aliases are built into the controller? (Choose three)

  1. logon
  2. any
  3. user
  4. guest
  5. localip

Answer(s): B,C,E



What are aliases used for?

  1. improve controller performance
  2. simplify the configuration process
  3. tie IP addresses to ports
  4. assign rules to policies
  5. assign policies to roles

Answer(s): B



Which of the following firewall rules allows a user to initiate an ICMP session to other devices?(Choose two)

  1. localip any svc-icmp permit
  2. user any svc-icmp permit
  3. user user svc-icmp permit
  4. any any svc-icmp permit
  5. mswitch any svc-icmp permit

Answer(s): B,D



What is true about Global Session ACL? (Choose two)

  1. Any rules will apply to all users in the AP-group
  2. Any rules will apply to all users in the Network
  3. Any rules will apply to all users in the controller
  4. Is in the first position in all roles
  5. When added it is in the first position in selected Role

Answer(s): B,D



When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

  1. Applications
  2. Applications Category
  3. Internet Protocol
  4. Internet Category
  5. Protocol

Answer(s): A,B,E

Explanation:

2-4 - NAT



The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat).
Which is the default use of this statement in an Aruba controller configuration?

  1. source the IP addresses of users to specific IP address
  2. redirect HTTP sessions to Captive Portal
  3. redirect Access Points to another Aruba controller
  4. provide a telnet connection to the controller
  5. redirect a SSH session to terminate on the controller

Answer(s): B



The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation

(src-nat).
Which is a use of this statement in an Aruba configuration?

  1. provide a single source IP address for users in a role
  2. redirect Captive Portal HTTP sessions
  3. redirect Access Points to another Aruba controller
  4. provide IP addresses to clients
  5. redirects clients to Aruba Firewall

Answer(s): A

Explanation:

2-5 - Policy Interpretation



Review the following truncated output from an Aruba controller for this item.
(example) #show rights logon access-list List
----------------
Position Name Location
-------- ---- --------
1 logon-control
2 captiveportal logon-control
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user any udp 68 deny
2 any any svc-icmp permit
3 any any svc-dns permit
4 any any svc-dhcp permit
5 any any svc-natt permit captiveportal
-------------
Priority Source Destination Service Action
-------- ------ ----------- ------- ------
1 user controller svc-https dst-nat 8081
2 user any svc-http dst-nat 8080
3 user any svc-https dst-nat 8081
4 user any svc-http-proxy1 dst-nat 8088
5 user any svc-http-proxy2 dst-nat 8088
6 user any svc-http-proxy3 dst-nat 8088
Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.
What will happen?

  1. the user's traffic will be passed to the IP address because of the policy statement:user any svc-http dst-nat 8080
  2. the user's traffic will be passed to the IP address because of the policy statement:user any svc- https dst-nat 8081
  3. the user's traffic will be passed to the IP address because of the policy statement:user any svc- http-proxy1 dst-nat 8088
  4. the user will not reach the IP address because of the policy statement:user any svc-http dst-nat
  5. the user will not reach the IP address because of the implicit deny any any at the end of the policy.

Answer(s): D



Viewing Page 4 of 23



Share your comments for Aruba ACMP-6-1 exam with other users:

Harry 6/27/2023 7:20:00 AM

appriciate if you could upload this again
AUSTRALIA


Anonymous 7/10/2023 4:10:00 AM

please upload the dump
SWEDEN


Raja 6/20/2023 5:30:00 AM

i found some questions answers mismatch with explanation answers. please properly update
UNITED STATES


Doora 11/30/2023 4:20:00 AM

nothing to mention
Anonymous


deally 1/19/2024 3:41:00 PM

knowable questions
UNITED STATES


Sonia 7/23/2023 4:03:00 PM

very helpfull
UNITED STATES


binEY 10/6/2023 5:15:00 AM

good questions
Anonymous


Neha 9/28/2023 1:58:00 PM

its helpful
Anonymous


Desmond 1/5/2023 9:11:00 PM

i just took my oracle exam and let me tell you, this exam dumps was a lifesaver! without them, iam not sure i would have passed. the questions were tricky and the answers were obscure, but the exam dumps had everything i needed. i would recommend to anyone looking to pass their oracle exams with flying colors (and a little bit of cheating) lol.
SINGAPORE


Davidson OZ 9/9/2023 6:37:00 PM

22. if you need to make sure that one computer in your hot-spot network can access the internet without hot-spot authentication, which menu allows you to do this? answer is ip binding and not wall garden. wall garden allows specified websites to be accessed with users authentication to the hotspot
Anonymous


381 9/2/2023 4:31:00 PM

is question 1 correct?
Anonymous


Laurent 10/6/2023 5:09:00 PM

good content
Anonymous


Sniper69 5/9/2022 11:04:00 PM

manged to pass the exam with this exam dumps.
UNITED STATES


Deepak 12/27/2023 2:37:00 AM

good questions
SINGAPORE


dba 9/23/2023 3:10:00 AM

can we please have the latest exam questions?
Anonymous


Prasad 9/29/2023 7:27:00 AM

please help with jn0-649 latest dumps
HONG KONG


GTI9982 7/31/2023 10:15:00 PM

please i need this dump. thanks
CANADA


Elton Riva 12/12/2023 8:20:00 PM

i have to take the aws certified developer - associate dva-c02 in the next few weeks and i wanted to know if the questions on your website are the same as the official exam.
Anonymous


Berihun Desalegn Wonde 7/13/2023 11:00:00 AM

all questions are more important
Anonymous


gr 7/2/2023 7:03:00 AM

ques 4 answer should be c ie automatically recover from failure
Anonymous


RS 7/27/2023 7:17:00 AM

very very useful page
INDIA


Blessious Phiri 8/12/2023 11:47:00 AM

the exams are giving me an eye opener
Anonymous


AD 10/22/2023 9:08:00 AM

3rd so far, need to cover more
Anonymous


Matt 11/18/2023 2:32:00 AM

aligns with the pecd notes
Anonymous


Sri 10/15/2023 4:38:00 PM

question 4: b securityadmin is the correct answer. https://docs.snowflake.com/en/user-guide/security-access-control-overview#access-control-framework
GERMANY


H.T.M. D 6/25/2023 2:55:00 PM

kindly please share dumps
Anonymous


Satish 11/6/2023 4:27:00 AM

it is very useful, thank you
Anonymous


Chinna 7/30/2023 8:37:00 AM

need safe rte dumps
FRANCE


1234 6/30/2023 3:40:00 AM

can you upload the cis - cpg dumps
Anonymous


Did 1/12/2024 3:01:00 AM

q6 = 1. download odt application 2. create a configuration file (xml) 3. setup.exe /download to download the installation files 4. setup.exe /configure to deploy the application
FRANCE


John 10/12/2023 12:30:00 PM

great material
Anonymous


Dinesh 8/1/2023 2:26:00 PM

could you please upload sap c_arsor_2302 questions? it will be very much helpful.
Anonymous


LBert 6/19/2023 10:23:00 AM

vraag 20c: rsa veilig voor symmtrische cryptografie? antwoord c is toch fout. rsa is voor asymmetrische cryptogafie??
NETHERLANDS


g 12/22/2023 1:51:00 PM

so far good
UNITED STATES