An administrator implements a ClearPass solution to authenticate Aruba wireless users. The Aruba wireless solution is an ArubaOS 8.x Mobility Master (MM) deployment. ClearPass sends an Aruba VSA role name for an authenticated user. However, the administrator notices that the role assigned to the user is different from the one assigned by the ClearPass server.
Which two items should the administrator verify that might be the cause of this problem? (Choose two.)
A. Enablement of user roles on the controller
B. Spelling of the role on the ClearPass server
C. Server-derived role assignment on the ClearPass server
D. Role existence on the Managed Network
E. Order assignment that the controller uses to select a user role
When they operate in a cluster, Aruba APs obtain AP Group configuration information form which device?
A. Mobility Master
B. AirWave
C. ClearPass
D. Mobility Controller
Refer to the exhibit.

An administrator configures a policy for an AP Group. Port 3 of a RAP is a trunk that connects to a switch
at a branch office. VLAN 1 is untagged and VLANs 10 (for data) and 11 (for voice) are tagged. The
administrator applies an ACL inbound on Port 3 of the RAP.
How does this configuration affect traffic on Port 3?
A. It filters traffic from VLAN 10 and 11, but allows traffic from VLAN1.
B. It filters traffic form VLAN 1, but allows traffic from VLANs 10 and 11.
C. It allows all traffic form VLANs 1, 10, and 11.
D. It filters traffic from VLANs 1, 10, and 11.
Refer to the exhibit.

An administrator configures a split-tunnel policy to be used by RAPs at branch offices, Under the Configuration section on the Mobility master (MM) shown in the exhibit, where should the administrator configure the split-tunnel mode so that it can be deployed to the RAPs?
A. WLAN
B. Roles and Policies
C. Access Points
D. Services
Which protocol communicates RF neighborhood information to an Aruba Mobility Master (MM) for use by AirMatch?
A. GRE
B. PAPI
C. SNMP
D. AMON
Where would an administrator define the split-tunneling mode for a RAP located at a branch office?
A. the Firewall policy on the RAP
B. the AAA policy on the controller
C. the Firewall policy on the controller
D. the VAP profile on the controller
An administrator configures Unified Communications and Collaboration (UCC) heuristics mode on an Aruba Mobility Master (MM). What should be modified in order to send items such as VoIP sessions and monitored information about adds, updates, deletions, and periodic snapshots of those VoIP sessions on the MM or the Aruba Mobility Controller (MC)?
A. OpenFlow Controller profile
B. Mgmt Config profile
C. Skype ALG Configuration profile
D. OpenFlow profile
Which Aruba Mobility Controller (MC) command should an administrator execute to determine whether an ArubaOS-Switch successfully registers to an MC?
A. show port-access clients
B. show crypto ipsec sa
C. show tunneled-node-server state
D. show datapath tunnel
An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic. But, when users connect with their wired desktops, they are assigned an initial role and routed to a Captive Portal page.
What must the administrator do to enable desktop usage based on the user's role assignment?
A. Implement ACLs on the RAP port.
B. Apply a server-derived role policy to the RAP port.
C. Identify the RAP port as untrusted.
D. Map the RAP port to an authentication profile.
Which voice deployment mode should an administrator implement on Aruba Mobility Controllers (MCs) to support all voice applications?
A. WMM-only mode
B. Heuristic mode
C. QoS-mode
D. SDN-API mode