Aruba Certified Mobility Associate (ACMA) Exam — Questions and Answers

Question 1: Which antenna type radiates power equally in all horizontal directions, making it suitable for open-office deployments?

Omnidirectional antenna (Correct answer)
Sector antenna
Yagi antenna
Parabolic dish antenna

Correct answer: Omnidirectional antenna

An omnidirectional antenna radiates power equally in a 360-degree horizontal pattern, ideal for providing coverage in all directions from a single point.

Question 2: How does Aruba's AirWave solution contribute to network management?

It replaces all hardware components of the network
It serves as a security appliance for wireless networks
It provides centralized monitoring, management, and troubleshooting for Aruba networks (Correct answer)
It reduces the number of devices connected to the network

Correct answer: It provides centralized monitoring, management, and troubleshooting for Aruba networks

Aruba AirWave is a powerful network management platform designed to provide comprehensive visibility and control over Aruba wireless and wired infrastructure. It offers centralized monitoring of network health, performance, and security, along with tools for configuration management, troubleshooting, and reporting. This enables administrators to optimize network operations and quickly resolve issues.

Question 3: What is the recommended response when a security incident is detected in an ACMA environment?

Ignore minor incidents
Delete all logs immediately
Immediately shut down all systems
Follow the incident response plan: contain, eradicate, recover (Correct answer)

Correct answer: Follow the incident response plan: contain, eradicate, recover

Following a structured incident response plan ensures containment of the threat, eradication of the cause, and recovery to normal operations.

Question 4: What is the maximum transmit power typically allowed for 802.11 devices operating in the US 2.4 GHz band (EIRP)?

30 dBm
1000 mW (Correct answer)
100 mW
200 mW

Correct answer: 1000 mW

The FCC allows up to 1000 mW (1 watt or 30 dBm) EIRP for 802.11 devices in the 2.4 GHz band.

Question 5: In Aruba's captive portal authentication, at what point is the client's traffic allowed onto the network?

Immediately after associating with the SSID
After the AP issues a RADIUS CoA message
After the client completes credentials entry on the portal page (Correct answer)
Only after 802.1X supplicant negotiation completes

Correct answer: After the client completes credentials entry on the portal page

In captive portal authentication, the client associates and receives limited connectivity, then is fully admitted only after submitting valid credentials via the web portal.

Question 6: Which Aruba feature allows a wireless client to roam between APs without re-authenticating to the RADIUS server?

802.11r Fast BSS Transition (Correct answer)
Opportunistic Key Caching (OKC)
Dynamic RF Management
WPA3-Enterprise

Correct answer: 802.11r Fast BSS Transition

802.11r Fast BSS Transition enables fast roaming by pre-caching keys, eliminating the need for full re-authentication with the RADIUS server on each roam.

Question 7: Why is strong password management important in network security?

To ensure that passwords are shared easily among users
To limit the length of passwords used by employees
To protect the network from unauthorized access and reduce the risk of attacks (Correct answer)
To make passwords easy to remember for users

Correct answer: To protect the network from unauthorized access and reduce the risk of attacks

Strong password management is vital because weak or easily compromised passwords are a common entry point for unauthorized access. By using complex, unique passwords and changing them regularly, organizations significantly reduce the risk of credential theft and brute-force attacks. This practice forms a fundamental layer of defense against cyber threats, protecting sensitive data and network resources.

Question 8: An organization deploys Aruba APs in a hospital where medical devices use 802.11b at 2.4 GHz. What AP configuration protects performance for newer clients while maintaining compatibility?

Set minimum basic rate to 1 Mbps to include all legacy devices
Disable 2.4 GHz radio entirely on all APs
Enable band steering to move all clients to 5 GHz
Enable 802.11b protection mechanisms and set minimum basic rate to 5.5 Mbps (Correct answer)

Correct answer: Enable 802.11b protection mechanisms and set minimum basic rate to 5.5 Mbps

Setting the minimum basic rate to 5.5 Mbps excludes the slowest 802.11b rates while protection mechanisms accommodate remaining legacy devices.

Question 9: Which Aruba controller CLI command displays the list of currently associated APs?

show ap database
show ap active (Correct answer)
show wireless clients
show interface wlan

Correct answer: show ap active

The 'show ap active' command lists all APs currently associated with the controller along with their status and AP group.

Question 10: In Aruba ClearPass, what is the purpose of the 'Authentication Source' configuration?

Specifies where user credentials are validated, such as AD or LDAP (Correct answer)
Determines which SSID triggers the authentication policy
Defines which RADIUS server to forward requests to
Sets the encryption type for the RADIUS shared secret

Correct answer: Specifies where user credentials are validated, such as AD or LDAP

An Authentication Source in ClearPass defines the backend identity store (e.g., Active Directory, LDAP, or a local database) used to verify user credentials.

Question 11: What distinguishes an Aruba 'AP group' from an individual AP configuration in the Mobility Controller?

AP groups are required for 802.11ax support
AP groups are used only for mesh deployments
AP groups allow common configuration (SSIDs, radio settings) to be applied to multiple APs simultaneously (Correct answer)
AP groups define geographic coverage areas for RF planning

Correct answer: AP groups allow common configuration (SSIDs, radio settings) to be applied to multiple APs simultaneously

AP groups act as templates on the Mobility Controller, letting administrators define shared SSIDs, radio profiles, and policies that apply to all APs assigned to the group.

Question 12: In Aruba's role-based access control, what happens to traffic that does not match any firewall policy rule?

It is forwarded to the default VLAN
It triggers a RADIUS re-authentication
Traffic is passed to the next AP for inspection
It is implicitly denied by the default deny rule (Correct answer)

Correct answer: It is implicitly denied by the default deny rule

Aruba firewalls have an implicit deny-all at the end of each policy, dropping unmatched traffic.

Question 13: When configuring WPA3-SAE on an Aruba controller, what must also be enabled to support legacy WPA2 clients simultaneously?

OWE Transition Mode
WPA3 Transition Mode (SAE Mixed) (Correct answer)
PMF Optional mode
802.11r Fast BSS Transition

Correct answer: WPA3 Transition Mode (SAE Mixed)

WPA3 Transition Mode (SAE Mixed) allows both WPA2-PSK and WPA3-SAE clients to connect to the same SSID simultaneously.

Question 14: Which Aruba mechanism prevents a compromised controller from being used to intercept AP communication by validating controller identity?

AP Whitelist
Certificate-based AP provisioning using factory-installed certificates (Correct answer)
ArubaOS Firewall
PAPI encryption with shared secrets

Correct answer: Certificate-based AP provisioning using factory-installed certificates

Aruba APs use factory-installed X.509 certificates to mutually authenticate with controllers, preventing rogue controller attacks.

Question 15: A coffee shop wants to offer free guest Wi-Fi while keeping business traffic separate. Which WLAN design element achieves this?

Disable the 5 GHz radio for guest users and use 2.4 GHz only
Deploy two separate physical networks with different ISPs
Configure all devices on the same SSID with user-based firewall rules only
Use multiple SSIDs mapped to separate VLANs for guest and corporate traffic (Correct answer)

Correct answer: Use multiple SSIDs mapped to separate VLANs for guest and corporate traffic

Multiple SSIDs mapped to separate VLANs allow traffic segmentation between guest and corporate networks on shared AP infrastructure.

Question 16: Which Aruba architecture allows APs to switch client traffic locally without sending it to a central controller?

Remote AP tunnel mode
MC-VA mode
Distributed forwarding (split-tunnel or bridge mode) (Correct answer)
Centralized forwarding

Correct answer: Distributed forwarding (split-tunnel or bridge mode)

Distributed forwarding (bridge or split-tunnel mode) allows APs to switch some or all client traffic locally, reducing WAN bandwidth consumption.

Question 17: Which Aruba controller feature can automatically move an AP to a different AP group based on its location or deployment type?

LLDP-based group assignment
AirMatch
AP Whitelisting
AP System Profile auto-provisioning rules (Correct answer)

Correct answer: AP System Profile auto-provisioning rules

Auto-provisioning rules on the Aruba controller use criteria such as AP name, MAC, or subnet to automatically assign APs to appropriate AP groups and system profiles.

Question 18: A network admin needs to verify that an Aruba controller is correctly forwarding RADIUS authentication requests. Which command shows RADIUS server reachability and statistics?

show radius server status
show aaa radius debug
show aaa authentication-server radius statistics (Correct answer)
show authentication server radius

Correct answer: show aaa authentication-server radius statistics

'show aaa authentication-server radius statistics' displays packet counts, success/failure rates, and server reachability for configured RADIUS servers.

Question 19: When configuring MAC Authentication Bypass (MAB) on an Aruba AP, what credential does the device send to the RADIUS server?

A pre-shared key derived from the device serial number
An EAP token generated by the AP
The device's MAC address as both username and password (Correct answer)
The device hostname and IP address

Correct answer: The device's MAC address as both username and password

In MAB, the AP sends the connecting device's MAC address as the RADIUS username and password, allowing the server to authorize known devices.

Question 20: In Aruba's architecture, what operating mode allows an AP to function without a controller by running all intelligence locally on the AP?

Monitor mode
Instant AP (IAP) mode (Correct answer)
Remote AP mode
Tunnel mode

Correct answer: Instant AP (IAP) mode

Aruba Instant APs operate without a physical controller — one AP in the cluster acts as a virtual controller, running locally on the AP hardware.

Question 21: In Aruba, what does 'tunnel mode' for an AP's SSID mean for client traffic?

Client traffic is bridged directly to the local wired VLAN
Client traffic is encapsulated and forwarded to the Mobility Controller for processing (Correct answer)
Client traffic bypasses the firewall
Client traffic is encrypted with WPA2 only

Correct answer: Client traffic is encapsulated and forwarded to the Mobility Controller for processing

In tunnel mode, all client traffic is encapsulated (via GRE or CAPWAP) and sent to the Mobility Controller, which applies firewall policies and forwards it appropriately.

Question 22: What is the purpose of Transmit Power Control (TPC) in Aruba wireless networks?

To manually set a fixed transmit power on all APs to ensure uniform coverage
To synchronize power levels between the controller and APs
To dynamically adjust AP transmit power to minimize co-channel interference while maintaining coverage (Correct answer)
To boost transmit power above regulatory limits in high-density environments

Correct answer: To dynamically adjust AP transmit power to minimize co-channel interference while maintaining coverage

TPC automatically adjusts AP transmit power levels to reduce interference between APs while ensuring clients maintain sufficient coverage throughout the network.

Question 23: What happens to RF signal polarization when a transmitting antenna is oriented vertically and the receiving antenna is oriented horizontally?

Signal strength doubles because cross-polarization creates antenna diversity
The signal automatically converts to circular polarization
Signal loss occurs due to polarization mismatch between the transmitter and receiver (Correct answer)
The receiver gains 3 dB of additional signal due to polarization diversity

Correct answer: Signal loss occurs due to polarization mismatch between the transmitter and receiver

Polarization mismatch between transmit and receive antennas causes signal loss of up to 20 dB, because antennas are most efficient when their polarization planes align.

Question 24: In an Aruba deployment using Captive Portal, what is the function of the RADIUS server in a 'web login' profile?

The RADIUS server validates the username and password submitted through the portal page (Correct answer)
The RADIUS server handles the TLS certificate for the portal HTTPS page
The RADIUS server is not used in captive portal deployments
The RADIUS server assigns the SSID profile to the AP

Correct answer: The RADIUS server validates the username and password submitted through the portal page

In a captive portal web login, the AP or controller forwards the credentials entered on the portal page to the RADIUS server for validation before granting network access.

Question 25: In Aruba Central, what is the primary purpose of organizing devices into 'Groups'?

To create isolated VLANs for network segmentation
To segment users by Active Directory organizational unit
To separate guest network traffic from corporate traffic
To apply common configurations and policies to multiple devices (Correct answer)

Correct answer: To apply common configurations and policies to multiple devices

Groups in Aruba Central are logical containers that allow administrators to apply shared configuration templates and policies to all member devices, enabling consistent management at scale.

Question 26: Which tool in the Aruba ecosystem is specifically designed to automate the initial provisioning and onboarding of new Aruba devices?

Aruba Central
Aruba Activate (Correct answer)
AirWave
ClearPass

Correct answer: Aruba Activate

Aruba Activate is a cloud-based provisioning service that automatically configures new Aruba devices and directs them to the correct management platform upon first boot.

Question 27: Which port does CAPWAP control traffic use by default?

UDP 5246 (Correct answer)
UDP 5247
TCP 443
TCP 8080

Correct answer: UDP 5246

CAPWAP control messages between APs and the controller use UDP port 5246 by default.

Question 28: Which principle is fundamental to good access point deployment practice?

Separation of concerns and modularity (Correct answer)
Avoiding all abstraction
Writing as much code as possible
Never refactoring code

Correct answer: Separation of concerns and modularity

Separation of concerns and modularity make code easier to understand, test, maintain, and extend over time.

Question 29: What is the role of Aruba AirWave in troubleshooting network issues?

To centralize network management, monitoring, and troubleshooting (Correct answer)
To provide physical maintenance for access points
To monitor the personal behavior of network users
To increase the number of devices connected to the network

Correct answer: To centralize network management, monitoring, and troubleshooting

Aruba AirWave is a powerful network management system that centralizes the monitoring, management, and troubleshooting of wired and wireless networks. It provides comprehensive visibility into network performance, client connectivity, and device health across an entire Aruba infrastructure. This centralization simplifies identifying and resolving network issues, improving operational efficiency and user experience.

Question 30: In the 5 GHz band, approximately how many non-overlapping 20 MHz channels are available in the U.S. (including UNII-1, UNII-2, UNII-2e, and UNII-3)?

3
11
24 (Correct answer)
45

Correct answer: 24

The 5 GHz band in the U.S. offers approximately 24 non-overlapping 20 MHz channels across the UNII-1, UNII-2, UNII-2e, and UNII-3 sub-bands.

Question 31: What is the value of continuing education in rf principles for ACMA professionals?

It replaces workplace experience
It keeps professionals current with evolving standards and practices (Correct answer)
It is primarily a social activity
It is only needed for recertification

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 32: In Aruba ClearPass Policy Manager, what is the function of an 'Enforcement Profile'?

It configures the network device's 802.1X supplicant settings
It maps usernames to VLAN assignments in a local database
It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation (Correct answer)
It specifies which authentication protocols are allowed

Correct answer: It defines the RADIUS attributes or actions returned to the NAD after a policy evaluation

An Enforcement Profile in ClearPass defines the RADIUS VSAs, CoA actions, or VLAN assignments that are sent back to the Network Access Device after policy evaluation.

Question 33: What is RF absorption in the context of wireless networking?

The conversion of RF signal energy into heat as it passes through a material (Correct answer)
The process by which an antenna captures incoming RF energy
The interference caused by overlapping RF channels
The gain added by a high-gain antenna to a transmitted signal

Correct answer: The conversion of RF signal energy into heat as it passes through a material

RF absorption occurs when materials convert RF energy into heat as the signal passes through them, reducing the signal's strength on the other side.

Question 34: What is the primary cause of multipath interference in a wireless network?

Excessive transmit power
RF signals reflecting off surfaces and arriving at the receiver at different times (Correct answer)
Antenna polarization mismatch
Interference from neighboring APs on the same channel

Correct answer: RF signals reflecting off surfaces and arriving at the receiver at different times

Multipath occurs when RF signals reflect off walls, floors, and objects, causing multiple copies of the same signal to arrive at slightly different times.

Question 35: What is the significance of SNMP 'community strings' in SNMPv1 and SNMPv2c?

They specify which OIDs a management station is permitted to query
They define the SNMP polling interval for each device
They encrypt the SNMP payload between manager and agent
They act as plaintext passwords that authenticate SNMP GET and SET operations (Correct answer)

Correct answer: They act as plaintext passwords that authenticate SNMP GET and SET operations

Community strings in SNMPv1/v2c function as plaintext shared secrets that must match between the SNMP manager and agent to authorize read (GET) or write (SET) access, though they provide no encryption.

Question 36: What is the MOST important reason for Aruba Certified Mobility Associate professionals to maintain continuing education?

To stay current with evolving standards, practices, and regulations (Correct answer)
To increase billing rates
To accumulate credentials for personal prestige
To satisfy employer preferences

Correct answer: To stay current with evolving standards, practices, and regulations

Continuing education ensures professionals remain current with evolving industry standards, best practices, and regulatory requirements. This directly impacts the quality of service provided and maintains public trust in the profession.

Question 37: What is the purpose of a site survey prior to deploying a wireless network?

To configure the SSID and security settings for all APs
To assess the RF environment, identify interference sources, and determine optimal AP placement (Correct answer)
To register the wireless equipment with the FCC
To measure the internet bandwidth available at the site

Correct answer: To assess the RF environment, identify interference sources, and determine optimal AP placement

A site survey evaluates the physical environment, existing RF interference, and building materials to plan optimal AP placement and channel configuration.

Question 38: What distinguishes a Aruba Certified Mobility Associate certified professional from a non-certified practitioner?

There is no meaningful difference in competency
Certified professionals exclusively work in larger organizations
Certification validates competency through standardized assessment against established benchmarks (Correct answer)
Certified professionals always have more years of experience

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 39: In an Aruba network, what is the primary function of the Air Monitor (AM) mode on an AP?

Operating as a spectrum analyzer only for 6 GHz channels
Providing mesh backhaul connectivity between remote APs
Dedicating the AP exclusively to WIDS/WIPS monitoring, scanning all channels for threats (Correct answer)
Serving client traffic while scanning for rogues in the background

Correct answer: Dedicating the AP exclusively to WIDS/WIPS monitoring, scanning all channels for threats

An AP in Air Monitor mode does not serve client traffic and instead dedicates all resources to scanning channels for rogue APs, security threats, and RF environment data.

Question 40: What type of RF interference occurs when two APs operate on overlapping channels in the same area?

Intermodulation distortion
Adjacent channel interference (Correct answer)
Multipath interference
Co-channel interference

Correct answer: Adjacent channel interference

Adjacent channel interference occurs when two APs operate on channels whose frequency ranges partially overlap, causing cross-channel signal degradation.

Question 41: What is the significance of the Fresnel zone in wireless links?

It is the elliptical region around the line-of-sight path that must be kept mostly clear to avoid signal degradation (Correct answer)
It is the frequency range used by directional antennas
It specifies the maximum allowed EIRP for outdoor links
It defines the minimum channel width required for a transmission

Correct answer: It is the elliptical region around the line-of-sight path that must be kept mostly clear to avoid signal degradation

The Fresnel zone is an elliptical area around the direct path between transmitter and receiver; obstructions within 60% of the first Fresnel zone cause significant signal loss.

Question 42: When a wireless client moves between APs within the same ESS without losing its IP address, this is called:

Layer 3 roaming
Fast BSS Transition
Band steering
Layer 2 roaming (Correct answer)

Correct answer: Layer 2 roaming

Layer 2 roaming occurs when a client transitions between APs on the same subnet/VLAN, retaining its IP address without requiring DHCP renewal.

Question 43: How do you troubleshoot connectivity issues with Aruba wireless devices?

By focusing only on wired network devices
By reducing the number of connected devices on the network
By checking configurations, cables, signal strength, and network policies (Correct answer)
By changing the physical appearance of the access point

Correct answer: By checking configurations, cables, signal strength, and network policies

Troubleshooting connectivity issues with Aruba wireless devices involves a systematic approach. This includes verifying device configurations for correctness, checking physical cable connections for integrity, assessing wireless signal strength to ensure adequate coverage, and reviewing network policies (like VLANs or firewall rules) that might be restricting access. Addressing these key areas helps pinpoint the root cause of connectivity problems efficiently.

Question 44: Which Aruba Mobility Controller model is designed specifically for branch office deployments with limited power and space?

MC-VA
7210
7005 (Correct answer)
7240XM

Correct answer: 7005

The 7005 is Aruba's entry-level hardware controller suited for small branch offices with minimal footprint requirements.

Question 45: Which professional attribute is most valued in rf principles within the ACMA field?

Accountability and commitment to standards (Correct answer)
Working in isolation
Avoiding challenging situations
Prioritizing personal convenience

Correct answer: Accountability and commitment to standards

Accountability and commitment to professional standards build trust and ensure consistent, high-quality practice.

Question 46: What is the primary consideration when implementing changes to network security?

Speed of implementation
Personal convenience
Impact assessment and change management (Correct answer)
Vendor preference

Correct answer: Impact assessment and change management

Impact assessment and proper change management ensure that modifications do not introduce unexpected problems or service disruptions.

Question 47: What is the PRIMARY purpose of obtaining ACMA certification in Aruba Certified Mobility Associate?

To bypass educational requirements
To satisfy a personal achievement goal
To demonstrate verified competency and adherence to professional standards (Correct answer)
To guarantee employment in the field

Correct answer: To demonstrate verified competency and adherence to professional standards

Professional certification demonstrates that an individual has met established competency standards through verified assessment. It provides assurance to employers, clients, and the public that the certified professional possesses the knowledge and skills required for competent practice.

Question 48: In RF terminology, what does the term 'noise floor' refer to?

The attenuation caused by structural materials
The minimum transmit power level of an access point
The lowest frequency supported by a wireless standard
The background level of unwanted RF energy present in the environment (Correct answer)

Correct answer: The background level of unwanted RF energy present in the environment

The noise floor is the sum of all background RF interference and thermal noise present in the environment, measured in dBm, and defines the minimum signal level that can be detected.

Question 49: What is the default behavior of Aruba's 'deny all' implicit rule at the end of every user role's firewall policy?

Logs the traffic but allows it through
Silently drops all traffic not explicitly permitted by earlier rules (Correct answer)
Drops traffic and sends a TCP RST to the source
Redirects traffic to a captive portal

Correct answer: Silently drops all traffic not explicitly permitted by earlier rules

Aruba's implicit deny rule at the end of each role silently drops any traffic that does not match a preceding permit rule, following standard firewall best practice.

Question 50: What RF phenomenon causes signal strength to decrease as distance from the transmitter increases?

Refraction
Free-space path loss (Correct answer)
Reflection
Absorption

Correct answer: Free-space path loss

Free-space path loss is the natural attenuation of an RF signal as it travels through open space, increasing with both distance and frequency.

Question 51: In Aruba's ClearPass Policy Manager, what is the primary purpose of an Enforcement Profile?

Collect device posture information
Define which users can log in
Specify the network access attributes applied after authentication (Correct answer)
Manage RADIUS shared secrets

Correct answer: Specify the network access attributes applied after authentication

An Enforcement Profile in ClearPass defines the set of attributes (VLAN, role, ACL) that are applied to a session after successful authentication and authorization.

Question 52: In ArubaOS, what does the 'aaa profile' bind together for a given SSID?

VLAN assignment and QoS policy
AP group and RF profile
Authentication method, server group, and default user role (Correct answer)
Firewall policy and bandwidth contract

Correct answer: Authentication method, server group, and default user role

An AAA profile links the authentication method (802.1X, MAC, captive portal), the RADIUS server group, and the default role assigned to authenticated users.

Question 53: What Aruba technology allows an AP to serve both as an access point and monitor the RF environment for threats simultaneously?

Air Monitor (AM) mode with hybrid AP (Correct answer)
Dual-band radio mode
Spectrum analysis mode
Adaptive Radio Management (ARM)

Correct answer: Air Monitor (AM) mode with hybrid AP

Hybrid AP mode allows an AP to serve clients on one radio while the other radio operates as an Air Monitor for threat detection.

Question 54: A technician is configuring a captive portal on an Aruba controller. Users are redirected to the portal page but cannot reach the login page. What firewall rule must be present in the pre-authentication role?

Permit RADIUS traffic to the authentication server
Permit ICMP to the default gateway only
Permit DNS and HTTP/HTTPS to the captive portal server (Correct answer)
Permit all traffic to any destination

Correct answer: Permit DNS and HTTP/HTTPS to the captive portal server

Pre-authentication roles must allow DNS resolution and HTTP/HTTPS access to the captive portal server so users can reach the login page before authenticating.

Question 55: What is the first step in configuring an Aruba access point (AP)?

To connect the AP to the network and access its management interface (Correct answer)
To disconnect all devices from the access point
To enable WPA3 encryption on the AP
To change the physical appearance of the AP

Correct answer: To connect the AP to the network and access its management interface

The first step in configuring an Aruba access point (AP) is to physically connect it to the network, typically via an Ethernet cable, and ensure it powers on. Once connected and powered, you can then access its management interface, usually through a web browser or command-line interface, to begin configuring its wireless settings and network parameters. This initial connection establishes the necessary communication path for setup.

Question 56: What does the 'role' concept in Aruba's firewall policy engine represent?

The physical AP a client is connected to
The VLAN tag used for the user's traffic
The SSID the user is associated with
A named policy container that defines traffic permissions for a user or device group (Correct answer)

Correct answer: A named policy container that defines traffic permissions for a user or device group

A role in Aruba's stateful firewall is a named container that groups ACL policies and is assigned to users or devices based on their identity or posture.

Question 57: Which parameter in an Aruba SSID profile controls the maximum number of clients that can associate to a single AP radio?

Max Clients per Radio (Correct answer)
Client Threshold
Radio Client Limit
Max Associations

Correct answer: Max Clients per Radio

The 'Max Clients per Radio' setting in the SSID or AP radio profile caps concurrent client associations per radio.

Question 58: In 802.11 terminology, what is the role of the Distribution System (DS)?

It provides DHCP services to the BSS
It assigns IP addresses to wireless clients
It encrypts data between the client and AP
It interconnects access points within an ESS (Correct answer)

Correct answer: It interconnects access points within an ESS

The Distribution System connects multiple APs together to form an Extended Service Set (ESS), enabling roaming between APs.

Question 59: A client cannot connect because the controller log shows 'association denied: max clients reached'. What is the recommended solution?

Reduce the beacon interval on the AP
Increase DHCP lease time to free up IP addresses faster
Increase the max clients per radio limit or enable load balancing across APs (Correct answer)
Switch the SSID from WPA2 to WPA3 to allow more clients

Correct answer: Increase the max clients per radio limit or enable load balancing across APs

When the maximum client threshold is reached, either raising the limit in the AP profile or enabling ARM/Client Match load balancing to distribute clients across APs resolves the issue.

Question 60: Which Aruba licensing model ties licenses to the Mobility Master rather than individual controllers, enabling flexible capacity allocation?

Centralized pool licensing via Mobility Master (Correct answer)
Subscription-based per-SSID licensing
Per-AP perpetual licensing on each controller
RADIUS-issued dynamic licensing

Correct answer: Centralized pool licensing via Mobility Master

Mobility Master hosts a centralized license pool that Managed Devices draw from dynamically, removing the need to assign fixed AP counts to each controller.

Aruba Certified Mobility Associate (ACMA) Exam

The Aruba Certified Mobility Associate (ACMA) certification validates foundational knowledge and skills required to configure and manage Aruba WLANs using ArubaOS 8.

Questions

90 min

Time Limit

63%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds