Exam Reference Guide

Aruba-Certified helpful acmA tips

Mobility Associate • Review of VRDs will help to reinforce the concepts

learned within the courses.

(ACMA) 6.3 Study Guide • An ACMA certified engineer is able to deploy and
manage a wireless LAN based on a single Aruba
Mobility Controller.
The Aruba-Certified Mobility Associate (ACMA ) exam • Certification exam topics include configuration
questions cover the topics listed below. The questions wizards, provisioning access points, authentication,
include key concepts, networking and topology design, GUI encryption, firewall operation and policies.
and CLI interpretation, GUI and CLI troubleshooting and • For convenience, candidates are automatically
interpretation of CLI configuration file segments. registered for and administered the ACMA exam upon
completing the IAW training course.
• Product Knowledge • ACMA is offered through Pearson VUE test centers. A
• Firewall Roles and Policies test voucher for one exam attempt is provided as part
• Operations of the IAW course.
• Planning and Design
• Troubleshooting
• Applications and Solutions
3. Licensing
Preparation for ACMA includes familiarity with IAW 6.3 A. Understand the 6.3 licensing model for all controllers
courseware. Additionally, review of VRDs will help to reinforce
B. Understand Centralized Licensing in AOS 6.3
the concepts learned within the courses.
C. Be able to articulate the features and functions of the
Topic Details Aruba software licenses

Product Knowledge D. Be able to articulate the features and functions

1. Mobility Controllers Models included inthe base ArubaOS

A. Understand the limits of user scaling for different

Firewall Roles and Policies
controller models
1. Policy Design
B. Understand the limits of AP scaling for different con-
A. Function of firewall design
troller models
B. Interpretation and troubleshooting of firewall
C. Understand the limits of Remote AP scaling for
rule policy
different controller models
C. Application of firewall policy to user roles
D. Power supplies offered for various models
D. A pplication of firewall policy to interfaces
E. Chassis based controller modules
E. Be able to articulate the difference between a stateful
F. Power-over-Ethernet support
firewall and an access control list (ACL)
2. AP models F. Describe an Ethertype ACL
A. Indoor AP models
2. Roles
B. Outdoor AP models
A. Describe the function of built-in roles
C. Models supporting internal and external antennas
B. Describe the use and creation of user created roles
D. A ntenna types offered as external antennas
C. Understand role derivation
E. Models supporting Power-over-Ethernet support

F. 802.11a/b/g/n support by model

 exam reference guide
ACmA 6.3

3. Aliases 4. Power over Ethernet

A. Describe the function and use of aliases A. Power provided

B. Understand the built in aliases B. Standards

4. NAT C. Transmission distances

A. Describe the function of source NAT 5. RF management and ARM

B. Describe the function of destination NAT A. ARM channel and power selection

C. Understand the use of NAT for captive B. ARM self healing

portal authentication
C. ARM band steering
D. Describe VLAN based NAT functionality
D. A RM Spectrum load balancing

Operations E. ARM Airtime fairness

1. Authentication F. ARM rate shaping

B. 802.1X G. A RM ClientMatch

C. Pre-Shared Keys H. Client aware ARM scanning

D. Open system I. Spectrum Monitor provisioning

E. Captive portal with credentials J. Spectrum Monitor usage

F. Captive portal with guest logon

6. Centralized Auth and Encryption

2. Configuration of the controller using the WebUI Wizard A. Centralized encryption

A. VLAN and IP address configuration B. Encryption methods

B. Port configuration C. RADIUS authentication

C. Network time configuration

7. AP Provisioning and Configuration
D. Controller role configuration
A. Static provisioning
E. License configuration
B. Dynamic provisioning
F. LAN configuration
C. CLI configuration
G. WLAN configuration for employee SSIDs
D. Web interface configuration
H. WLAN configuration for guest SSIDs
E. Group selection
I. RADIUS server configuration
F. Antenna provisioning
J. 802.1X authentication configuration
G. Serial configuration
K. Captive portal configuration and customization
8. User/Server Derivation Rules
3. Management
A. User derivation rules
A. Software upgrades on the controllers and APs
B. Server derivation rules
B. Interface layout
C. Rule based role derivation
C. AP management
9. Profiles
D. License management
A. Profile concept
E. Configuration screens
B. Profile hierarchy
F. Monitoring screens
C. Profile reuse
G. Security screens
 exam reference guide
ACmA 6.3

10. Controller configuration methods 3. Infrastructure

A. VLANs and VLAN trunking A. Intervening ACLs

B. IP addressing B. DHCP

C. Use of the loopback interface

Applications and Solutions

Planning and Design 1. RAP

1. Networking A. Configuration

A. Layer 2 networks B. Licensing

B. Layer 3 networks C. Operation modes

C. Routing D. F orwarding modes

2. Self-healing E. Maintenance

A. AP deployment design
Sample questions
B. ARM functionality 1. Order the following steps from 1-4 for the AP boot process:

3. Layer 2 model traffic flow A. AP transfers OS from controller

B. AP builds GRE tunnel to the controller

4. Layer 3 model traffic flow
C. AP determines IP address of the controller
5. Captive portal
D. A P Radio is enabled
A. Authentication types
2. A Remote AP uses which type of secure tunnel to
B. Authentication sources
communicate with a controller:
C. Provisioning capabilities
A. NAT-T
D. Internal DB functionality
B. IPsec
E. Guest provisioning role
C. PPTP
6. Controller discovery
D. GRE

Troubleshooting
3. Which of the following is true of an Aruba Mobility Controller
1. Client Connectivity
acting as a Layer 2 switch? (Select all that apply)
A. User connection
A. The Mobility Controller is the client’s default router
B. AP status
B. The Mobility Controller acts as a bridge

2. Aruba platform C. All stations must use the same VLAN

A. Layer 2 connectivity D. Uplink ports on the Mobility Controller can use

B. Layer 3 connectivity 802.1q tagging

C. Licensing 4. How many roles should be created on a controller?

D. A P counts A. As many as necessary

E. Firewall policy B. The same number as firewall policies

F. Role derivation C. One less than the number of firewall policies

G. A P connectivity D. Mobile IP

H. DHCP E. The same number as SSIDs

I. Controller IP
 exam reference guide
ACmA 6.3

5. In a Campus AP deployment, what is the difference 8. Which ARM feature aids in steering “sticky clients” to
between a Direct and an Overlay deployment? associate to an AP with better 802.11 signal quality?

A. In an overlay deployment APs are connected directly A. Co-Channel interference mitigation

to the Controller while in a direct deployment, APs are B. Airtime Fairness
connected to other Layer 2 or Layer 3 devices
C. ClientMatch
B. The Controller supplies PoE to APs in an Overlay
D. Coordinated access to a single channel
Deployment while APs draw power from other PoE
switches in a Direct deployment E. Band Steering

C. In a direct deployment, APs are directly connected to
the controller while in an overlay deployment APs are
connected to other Layer 2 or Layer 3 devices
D. In an overlay deployment, the APs cannot terminate
their GRE tunnels at the controller, while in a direct
deployment they can
6. Which of the following is true about configuring a
server group?
9. Clients connecting to a Remote AP at a branch office
can get an IP address through which of the following
methods? (Select all that apply)
A. DHCP server connected to the Remote AP’s controller
B. DHCP server at a branch office
C. DHCP server inside the Remote AP
D. A ll of the above

A. Server rules are used to send information to the 10. Which of the following licenses can be included in
configured servers the Centralized licensing pool on the License Server?
(Choose three)
B. A server group can have more than one server
A. Factory installed licenses
C. If the internal database is used in the server group,
then no external servers can be added B. PEFNG licenses

D. If multiple servers are assigned to the server group, all C. Evaluation licenses
except the first will be ignored D. RFProtect Licenses

7. Which of these is not a valid license type? E. PEFV license

A. RFProtect

B. Application Security

C. Base OS

D. PEF-NG
9–D
5–C7–B
3 – B,D
1 – C, A, B, D

Answers to odd numbered questions:

1344 Crossman Ave | Sunnyvale, CA 94089

1.866.55.ARUBA | T: 1.408.227.4500 | FAX: 1.408.227.4550 | info@arubanetworks.com

www.arubanetworks.com ERG_ACMA_090314