Aruba-Certified Mobility

Associate (ACMA) 6.1

Study Guide
Table of Contents
The Aruba-Certified Mobility
Overview 2 Associate (ACMA )exam
Topic Details 3 questions cover the
topics listed below. The
Sample Questions 6
questions include key
concepts, networking and
topology design, GUI and
CLI interpretation, GUI and
CLI troubleshooting and
interpretation of CLI
configuration file segments.

• Product Knowledge
• Firewall Roles and Policies
• Operations
• Planning and Design
• Troubleshooting
• Applications and Solutions

Preparation for ACMA

includes familiarity with
IAW 6.1 courseware.
Additionally, review of VRDs
will help to reinforce the
concepts learned within
the courses.

Aruba Study Guide: ACMA 6.1 2

Topic Details
1. Product Knowledge
a. Mobility Controllers Models
i. Understand the limits of user scaling for different
controller models
ii. Understand the limits of AP scaling for different
controller models
iii. Understand the limits of Remote AP scaling for different
controller models
iv. Power supplies offered for various models Review of VRDs will
v. Chassis based controller modules
vi. Power-over-Ethernet support help to reinforce the
b. AP models
i. Indoor AP models concepts learned
ii. Outdoor AP models
iii. Models supporting internal and external antennas within the courses.
iv. Antenna types offered as external antennas
v. Models supporting Power-over-Ethernet support
vi. 802.11a/b/g/n support by model
c. Licensing
i. Understand the 6.1 licensing model for all controllers
ii. Be able to articulate the features and functions of the Aruba
software licenses
iii. Be able to articulate the features and functions included in
the base ArubaOS
2. Firewall Roles and Policies
a. Policy Design
i. Function of firewall design
ii. Interpretation and troubleshooting of firewall rule policy
iii. Application of firewall policy to user roles
iv. Application of firewall policy to interfaces
v. Be able to articulate the difference between a stateful firewall
and an access control list (ACL)
vi. Describe an Ethertype ACL
b. Roles
i. Describe the function of built-in roles
ii. Describe the use and creation of user created roles
iii. Understand role derivation
c. Aliases
i. Describe the function and use of aliases
ii. Understand the built in aliases
d. NAT
i. Describe the function of source NAT
ii. Describe the function of destination NAT
iii. Understand the use of NAT for captive portal authentication
iv. Describe VLAN based NAT functionality

Aruba Study Guide: ACMA 6.1 3

 3. Operations
An ACMA certified
engineer is able to
deploy and man-
age a wireless LAN
based on a single
Aruba Mobility Con-
troller.
Aruba Study Guide: ACMA 6.1
a. Authentication
i. 802.1X
ii. Pre-Shared Keys
iii. Open system
iv. Captive portal with credentials
v. Captive portal with guest logon
b. Configuration Wizards
i. Configuration of the controller using the Controller Wizard
ii. VLAN and IP address configuration
iii. Port configuration
iv. Network time configuration
v. Controller role configuration
vi. License configuration
vii. LAN configuration
viii. WLAN configuration for employee SSIDs
ix. WLAN configuration for guest SSIDs
x. RADIUS server configuration
xi. 802.1X authentication configuration
xii. Captive portal configuration and customization
c. Management
i. Software upgrades on the controllers and APs
ii. Interface layout
iii. AP management
iv. License management
v. Configuration screens
vi. Monitoring screens
vii. Security screens
d. Power over Ethernet
i. Power provided
ii. Standards
iii. Transmission distances
e. RF management and ARM
i. ARM channel and power selection
ii. ARM self healing
iii. ARM band steering
iv. ARM Spectrum load balancing
v. ARM Airtime fairness
vi. ARM rate shaping
vii. Client aware ARM scanning
viii. Spectrum Monitor provisioning
ix. Spectrum Monitor usage
f. Centralized Auth and Encryption
i. Centralized encryption
ii. Encryption methods
iii. RADIUS authentication
4
 g. AP Provisioning and Configuration
i. Static provisioning
ii. Dynamic provisioning
iii. CLI configuration
iv. Web interface configuration
v. Group selection
vi. Antenna provisioning
vii. Serial configuration
h. User/Server Derivation Rules
i. User derivation rules
ii. Server derivation rules Certification exam
iii. Rule based role derivation
i. Profiles topics include con-
i. Profile concept
ii. Profile hierarchy figuration wizards,
iii. Profile reuse
j. Controller configuration methods provisioning access
i. VLANs and VLAN trunking
ii. IP addressing
points, authentica-
iii. Use of the loopback interface
4. Planning and Design
tion, encryption,
a. Networking
i. Layer 2 networks
firewall operation
ii. Layer 3 networks
and policies.
iii. Routing
b. Self-healing
i. AP deployment design
ii. ARM functionality
c. Layer 2 model traffic flow
d. Layer 3 model traffic flow
e. Captive portal
i. Authentication types
ii. Authentication sources
iii. Provisioning capabilities
iv. Internal DB functionality
v. Guest provisioning role
f. VisualRF
i. Planning a deployment
ii. Importing plan to controller
iii. Adding devices to the AirWave server
g. Controller discovery
5. Troubleshooting
a. Client Connectivity
i. User connection
ii. AP status

Aruba Study Guide: ACMA 6.1 5


For convenience,
candidates are au-
tomatically
registered for and
administered the
ACMA exam upon
completing the IAW
training course.
Aruba Study Guide: ACMA 6.1
b. Aruba platform
i. Layer 2 connectivity
ii. Layer 3 connectivity
iii. Licensing
iv. AP counts
v. Firewall policy
vi. Role derivation
vii. AP connectivity
viii. DHCP
ix. Controller IP
c. Infrastructure
i. Intervening ACLs
ii. DHCP
6. Applications and Solutions
a. RAP
i. Configuration
ii. Licensing
iii. Operation modes
iv. Forwarding modes
v. Maintenance
Sample Questions
1. Order the following steps from 1-4 for the AP boot process:
A. AP transfers OS from controller
B. AP builds GRE tunnel to the controller
C. AP determines IP address of the controller
D. AP Radio is enabled
2. A Remote AP uses which type of secure tunnel to communicate
with a controller:
A. NAT-T
B. IPsec
C. PPTP
D. GRE
3. Which of the following is true of an Aruba Mobility Controller acting
as a Layer 2 switch? (Select all that apply)
A. The Mobility Controller is the client’s default router
B. The Mobility Controller acts as a bridge
C. All stations must use the same VLAN
D. Uplink ports on the Mobility Controller can use 802.1q tagging
6
4. How many roles should be created on a controller?
A. As many as necessary
B. The same number as firewall policies
C. One less than the number of firewall policies
D. Mobile IP
E. The same number as SSIDs

5. In a Campus AP deployment, what is the difference between a

Direct and an Overlay deployment?
A. In an overlay deployment APs are connected directly to the ACMA is offered
Controller while in a direct deployment, APs are connected to
other Layer 2 or Layer 3 devices through Pearson
B. The Controller supplies PoE to APs in an Overlay Deployment
while APs draw power from other PoE switches in a Direct VUE test centers.
deployment
C. In a direct deployment, APs are directly connected to the A test voucher for
controller while in an overlay deployment APs are connected to
other Layer 2 or Layer 3 devices one exam attempt is
D. In an overlay deployment, the APs cannot terminate their GRE
tunnels at the controller, while in a direct deployment they can provided as part of
6. Which of the following is true about configuring a server group? the IAW course.
A. Server rules are used to send information to the configured servers
B. A server group can have more than one server
C. If the internal database is used in the server group, then no
external servers can be added
D. If multiple servers are assigned to the server group, all except
the first will be ignored

7. Which of these is not a valid license type?

A. RFProtect
B. Application Security
C. Base OS
D. PEF-NG

8. What are the four views available in VisualRF Plan?

A. User View
B. Controller View
C. Access Point View
D. Floor Plan View
E. Network, Campus and Building View

Aruba Study Guide: ACMA 6.1 7

 9. Clients connecting to a Remote AP at a branch office can get an
IP address through which of the following methods? (Select all
that apply)
A. DHCP server connected to the Remote AP’s controller
B. DHCP server at a branch office
C. DHCP server inside the Remote AP
D. All of the above

Answers to odd numbered questions:

9–D
7–B 5 – C
3 – B,D 1 – A,B,C,D

Aruba Study Guide: ACMA 6.1 8

www.arubanetworks.com
1344 Crossman Avenue. Sunnyvale, CA 94089
1-866-55-ARUBA | Tel. +1 408.227.4500 | Fax. +1 408.227.4550 | info@arubanetworks.com

© 2012 Aruba Networks, Inc. Aruba Networks’ trademarks include AirWave®, Aruba Networks®, Aruba Wireless Networks®, the
registered Aruba the Mobile Edge Company logo, Aruba Mobility Management System®, Mobile Edge Architecture®, People Move.
Networks Must Follow®, RFProtect®, and Green Island®. All rights reserved. All other trademarks are the property of their respective
owners. Rev. 0512