A customer wants a WLAN solution that permits Aps to terminate WPA-2 encrypted traffic from different SSIDs to different geographic locations where non-related IT departments will take care of enforcing security policies. A key requirement is to minimize network congestion, overhead, and delay while providing data privacy from the client to the security policy enforcement point. Therefore, the solution must use the shortest path from source to destination.
Which Aruba feature best accommodates this scenario?

• A. Inter MC S2S IPsec tunnels
• B. Multizone Aps
• C. VIA
• D. RAPs
• E. Inter MC GRE tunnels

A software development company has 764 employees who work from home. The company also has small offices located in different cities throughout the world. During working hours, they use RAPs to connect to a datacenter to upload software code as well as interact with databases.
In the past two month, cabling issues have occurred connection to the 7240XM Mobility Controller (MC) that runs ArubaOS 8 and terminates the RAPs. These RAPs disconnect, affecting the users connected to the RAPs. This also causes problems with code uploads and database synchronizations. Therefore, the company decides to add a second 7240XM controller for redundancy.
How should the network administrator deploy both controllers in order to provide the redundancy while preventing failover events from disconnecting users?

• A. Connect both controllers with common VLANs. and create an HA fast failover group with public addresses in the internet VLAN.
• B. Connect both controllers with common VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
• C. Connect both controllers with different VLANs. and create an L2-connected cluster using public addresses in the internet VLAN.
• D. Connect both controllers with common VLANs. and configure LMS/BLMS values equal to public addresses in the internet VLAN.

Refer to the exhibit:

A company acquires ten barcode scanners to run inventory tasks. These WiFi devices support WPA2-PSK security only. The network administrator deploys a WLAN named scanners using the configuration shown in the exhibit.
What must the network administrator do next to ensure that the scanner devices successfully connect to their SSID?

• A. Add scanner MAC addresses in user derivation rules.
• B. Enable L2 Authentication Fail Through.
• C. Set internal as the MAC authentication server group.
• D. Add scanner MAC addresses in the internal database.

A network administrator assists with the migration of a WLAN from a third-party vendor to Aruba in different locations throughout the country. In order to manage the solution from a central point, the network administrator decides to deploy redundant Mobility Masters (MMs) in a datacenter that are reachable through the Internet.
Since not all locations own public IP addresses, the security team is not able to configure strict firewall polices at the datacenter without disrupting some MM to Mobility Controller (MC) communications. They are also concerned about exposing the MMs to unauthorized inbound connection attempts.
What should the network administrator do to ensure the solution is functional and secure?

• A. Block all ports to the MMs except UDP 500 and 4500.
• B. Deploy an MC at the datacenter as a VPN concentrator.
• C. Install a PEFV license, and configure firewall policies that protect the MM.
• D. Block all inbound connections, and instruct the MM to initiate the connection to the MCs.