ACMP recert coming up so doing the questions again. there still are some errors in my opinion.
Q: Remote AP in tunnel mode, by default, uses which of the following to encrypt user traffic back to the mobility controller?
i believe this traffic is send via the tunnel, so it is encrypted right? if you don't consider putting it in a tunnel as encrypting then please mention the tunnel part at least.
from Aruba documentation: http://www.arubanetworks.com/pdf/products/AP_RAP-Security.pdf
When the double encryption feature is enabled, data traffic from a wireless client connected to a
tunneled SSID is encrypted at Layer 2. This encrypted data is then re-encrypted in the IPsec tunnel that is setup from the RAP to the Mobility Controller. Disabling the double encryption will cause the
wireless frames to be encrypted only using IPsec from the RAP to the Mobility Controller.
the current "correct" answer doesn't feel correct to me: The AP does not encrypt user traffic. The user's link layer encryption is used.
Q: Which Management account type allows you to add users to the database
next to guest admin i believe root should be there. the answer says ROOT, so if that isn't the correct answer because it is in CAPS then please rethink what you are trying to test here.
Q: When configuring the Mobility Controller’s internal DHCP via the startup wizard which option is not available for configuration?
still wrong, double Default router answer and correct answer should be Pool name.
Q: Which of the following is true of an Aruba Mobility Controller acting as a layer 2 switch? (select all that apply)
still wrong, "The Mobility Controller is the client's default router" is wrong, "The Mobility Controller acts as a bridge" is right.
Q: How many RAP's does the 3400 controller support?
we are getting in the 1:4 AP:RAP discussion here, which is confusing people since a long time:
http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/CAP-vs-RAP-licences-limitations/td-p/48180
and as i believe the idea is for them to be 1:1 don't mention the old way it in a test. i feel the same about the 651 question.