The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation(src-nat).Which is a use of this statement in an Aruba configuration?
Answer(s): A
2-5 - Policy Interpretation
Review the following truncated output from an Aruba controller for this item.(example) #show rights logon access-list List----------------Position Name Location-------- ---- --------1 logon-control2 captiveportal logon-control-------------Priority Source Destination Service Action-------- ------ ----------- ------- ------1 user any udp 68 deny2 any any svc-icmp permit3 any any svc-dns permit4 any any svc-dhcp permit5 any any svc-natt permit captiveportal-------------Priority Source Destination Service Action-------- ------ ----------- ------- ------1 user controller svc-https dst-nat 80812 user any svc-http dst-nat 80803 user any svc-https dst-nat 80814 user any svc-http-proxy1 dst-nat 80885 user any svc-http-proxy2 dst-nat 80886 user any svc-http-proxy3 dst-nat 8088Based on the above output from an Aruba controller, an unauthenticated user assigned to the logon role attempts to start an http session to IP address 172.16.43.170.What will happen?
Answer(s): D
Refer to the following configuration segment for this item.ip access-list session anewone user network 172.16.1.0 255.255.255.0 any permit user host 172.16.1.1 any deny user any any permitAn administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, which statements best describe this policy? (Choose two)
Answer(s): B,C
Refer to the following configuration segment for this item.netdestination "internal"no invert network 172.16.43.0 255.255.255.0 position 1range 172.16.11.0 172.16.11.16 position 2!ip access-list session "My-Policy"alias "user" alias "internal" service_any permit queue low !A user frame is evaluated against this firewall policy with the following attributes:Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80 Referring to the above file segment, how will the frame be handled by this firewall policy?
Answer(s): B
ip access-list session anewone user network 10.1.1.0 255.255.255.0 any permit user any any permit host 10.1.1.1 host 10.2.2.2 any denyA user sends a frame with the following attributes:Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25 Based on the above Mobility Controller configuration file segment, what will this policy do with the user frame?
Answer(s): C
Post your Comments and Discuss Aruba ACMP_6.4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ACMP_6.4 content, but please register or login to continue.