Aruba Campus Access Professional (Written) Free Sample Questions

VSX is the correct choice as it meets the requirements for dual control planes and non-disruptive software upgrades. VSF has a single control plane. The primary mechanism in a VSX environment to provide a single, active-active default gateway is called 'Active Gateway'. It is an enhancement over traditional VRRP, allowing both VSX nodes to simultaneously forward traffic sent to the virtual IP address, thus providing true active-active first-hop redundancy.

The ap-role is a firewall role that governs the traffic originating from or destined for the access point itself, such as control plane traffic (PAPI, GRE) to the Mobility Controller. It is distinct from user roles, which apply to client traffic passing through the AP.

The Mobility Conductor uses a hierarchical configuration model: devices inherit configuration along their node path, and child nodes can override single-instance settings. Although configuration at /md would reach every managed device, Aruba recommends not adding configuration at /md itself. Instead, place the MDs in a group node such as /md/Campus and configure the common 'Staff' WLAN there, where every MD in the group inherits it. /mm holds configuration for the Mobility Conductors, not the managed devices.

False. Cluster connection type is defined by user VLANs. In an L2-connected cluster, the members share all user VLANs. In an L3-connected cluster, members do not necessarily share the same user VLANs. A cluster can be formed over an L2 or an L3 network (L2 is recommended for simplicity), so members do not have to be in one IP subnet. Hitless client failover (client state synchronization) requires an L2-connected cluster.

In a user-based tunneling (Tunneled Node) setup, after successful authentication (typically 802.1X), the switch encapsulates all data traffic from the authenticated user into a GRE tunnel directed to a Mobility Controller. The controller then applies the user's assigned role and firewall policies before forwarding the traffic, thus unifying policy enforcement for wired and wireless clients.

Control Plane Security (CPSec) is designed to protect the control communications (PAPI) between Aruba APs and the Mobility Controller. When enabled, it uses certificates to mutually authenticate the AP and controller and then encrypts all subsequent control plane traffic. This prevents rogue APs from joining the network and protects management traffic from eavesdropping or tampering.

A VSF stack operates as one virtual switch with a single control plane. A single SVI configured on the stack is therefore a resilient default gateway: if the conductor fails, the standby takes over the conductor role and the SVI stays up. No FHRP such as VRRP or Active Gateway (a VSX feature) is needed inside a VSF stack.

VisualRF's core function is to visualize RF data on a floor plan. By generating a signal strength heatmap for the specific floor and ward, the administrator can visually identify areas of weak signal (coverage holes). This allows them to confirm the user's report and make informed decisions about adding, moving, or adjusting the power of nearby APs.