ACMP_6.4 practice questions, page 6 of 7, with answer review and explanations.
Question 26
What are aliases used for?
improve controller performance
simplify the configuration process
tie IP addresses to ports
assign rules to policies
assign policies to roles
Question 27
Which of the following firewall rules allows a user to initiate an ICMP session to other devices? (Choose two)
localip any svc-icmp permit
user any svc-icmp permit
user user svc-icmp permit
any any svc-icmp permit
mswitch any svc-icmp permit
Question 28
What is true about Global Session ACL? (Choose two)
Any rules will apply to all users in the AP-group
Any rules will apply to all users in the Network
Any rules will apply to all users in the controller
Is in the first position in all roles
When added it is in the first position in selected Role
Question 29
When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)
Applications
Applications Category
Internet Protocol
Internet Category
Protocol
Question 30
The Aruba Policy Enforcement Firewall (PEF-NG) module supports destination network address translation (dst-nat). Which is the default use of this statement in an Aruba controller configuration?
source the IP addresses of users to specific IP address
redirect HTTP sessions to Captive Portal
redirect Access Points to another Aruba controller
provide a telnet connection to the controller
redirect a SSH session to terminate on the controller