[Q11-Q20] Lead2pass Latest ACMP_6.4 Free Dumps Guarantee ACMP_6.4 Certification Exam 100% Success

Lead2pass Latest ACMP_6.4 PDF Guarantee 100% Pass ACMP_6.4 Exam:

https://www.lead2pass.com/acmp-6-4.html

QUESTION 11
Which netdestination aliases are built into the controller? (Choose three)

A.    logon
B.    any
C.    user
D.    guest
E.    localip

Answer: BCE

QUESTION 12 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
The Aruba Policy Enforcement Firewall (PEF) module supports source network address translation (src-nat).
Which is a use of this statement in an Aruba configuration?

A.    provide a single source IP address for users in a role
B.    redirect Captive Portal HTTP sessions
C.    redirect Access Points to another Aruba controller
D.    provide IP addresses to clients
E.    redirects clients to Aruba Firewall

Answer: A

QUESTION 13 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Which of the following firewall rules allows a user to initiate an ICMP session to other devices?(Choose two)

A.    localip any svc-icmp permit
B.    user any svc-icmp permit
C.    user user svc-icmp permit
D.    any any svc-icmp permit
E.    mswitch any svc-icmp permit

Answer: BD

QUESTION 14 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
What is the blacklist default time?

A.    30 seconds
B.    1800 seconds
C.    3600 seconds
D.    No default time, it must be done manually
E.    1 day

Answer: C

QUESTION 15 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
ip access-list session anewone user network 10.1.1.0 255.255.255.0 any permit user any any permit Referring to the above portion of a Mobility Controller configuration file, what can you conclude? (Choose two)

A.    This is a session firewall policy.
B.    This is an extended Access Control List (ACL).
C.    Any traffic going to destination 10.1.1.1 will be denied.
D.    Any traffic going to destination 10.2.2.2 will be denied.
E.    Any traffic going to destination 172.16.100.100 will be permitted.

Answer: AE

QUESTION 16 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
What are aliases used for?

A.    improve controller performance
B.    simplify the configuration process
C.    tie IP addresses to ports
D.    assign rules to policies
E.    assign policies to roles

Answer: B

QUESTION 17 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
When creating a firewall rule on an Aruba controller, which parameter is optional?

A.    Destination
B.    Service
C.    Source
D.    Log
E.    Action

Answer: D

QUESTION 18 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
An administrator wants users to have access to all destinations except 172.16.1.1. Based on the above Aruba Mobility Controller configuration segment, which statements best describe this policy? (Choose two)

A.    The rule user host 172.16.1.1 any deny is redundant because of the implicit deny all at the end.
B.    The rule user network 172.16.1.0 255.255.255.0 any permit is redundant.
C.    The two rules user network 172.16.1.0 255.255.255.0 any permit and user host 172.16.1.1 any deny need to be re-sequenced.
D.    The last statement user any any permit is not required
E.    The last statement should be any any any deny

Answer: BC

QUESTION 19 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
When creating a firewall rule what are valid choices for the Service/Application field? (Choose three)

A.    Applications
B.    Applications Category
C.    Internet Protocol
D.    Internet Category
E.    Protocol

Answer: ABE

QUESTION 20 ACMP_6.4 Dumps,ACMP_6.4 Exam Questions,ACMP_6.4 New Questions,ACMP_6.4 VCE,ACMP_6.4 PDF
Refer to the following configuration segment for this item.

netdestination “internal”
no invert
network 172.16.43.0 255.255.255.0 position 1
range 172.16.11.0 172.16.11.16 position 2
!
ip access-list session “My-Policy”
alias “user” alias “internal”service_any permit queue low
!

A user frame is evaluated against this firewall policy with the following attributes:

Source IP: 172.17.49.3
Destination IP: 10.100.86.37
Destination Port: 80

Referring to the above file segment, how will the framebe handled by this firewall policy?

A.    The frame will be dropped because of the implicit deny all at the end of the netdestination definition.
B.    The frame will be dropped because of the implicit deny all at the end of the firewall policy.
C.    The frame will be forwarded because of the implicit permit all at the end of the firewall policy.
D.    The frame will be passed because there is no service specified in the firewall policy.
E.    The frame will be dropped because there is no service specified in the firewall policy.

Answer: B

ACMP_6.4 dumps full version (PDF&VCE): https://www.lead2pass.com/acmp-6-4.html

Large amount of free ACMP_6.4 exam questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDYmVFcGxYZUE4NHM