A customer has multiple medium and large branch sites, each of which requires between 8 and 16 APs and supports between 200 and 600 wireless clients. Every branch site has an internet connection, which it uses to reach the central data center. The customer would prefer the WAN links to be optimized in the solution. Each side handles between 1 and 2 Gbps of traffic, most of which goes to the central data center. The data center has 7210 controllers for terminating the VPN connections.

Which branch office solution best meets the customer needs?

A. CAPs and branch office controllers with an SD-WAN license

B. IAPs and no branch office controllers

C. CAPs and branch office controllers

D. RAPs and no branch office controllers

Refer to the exhibit.

A writing closet needs to support these devices: 100 desktops 5 printers 20 AP-345s

The customer wants to single-home the AP-345s and support higher than 1GbE speeds on the AP connections to future proof. The customer also requires that the closet have two 10GbE links to the core with SR transceivers. The exhibit shows the preliminary plan for this closet.

Which correction should the architect make to the plan to meet the customer requirements?

A. Change all of the switches to the Aruba 2930M 40G 8 HPE Smart Rate PoE+ 1-Slot Switch.

B. Change one switch to the 2930M 24-port Smart Rate PoE+ model.

C. Add a 4-port SFP+ module to one of the switches.

D. Add a Smart Rate module to each of the switches.

A customer has Aruba network infrastructure devices that could be managed by either Aruba Central or

Aruba AirWave.

Which customer characteristic should point the architect toward an AirWave recommendation as opposed

to a Central recommendation?

A. desire to lease managed services on an ongoing basis

B. small IT staff and preference for cloud solutions

C. policies that network management occurs on premises

D. need to support Zero Touch Provisioning (ZTP)

In which of these scenarios do the customer requirements point towards tunneled node, or dynamic segmentation, on AOS-Switches?

A. A customer has wired IoT devices and wants to be able to control their access. The architect recommends sending all of their traffic through the MC role-based firewall.

B. A customer wants to manage their AOS-Switches in a more centralized manner. They would like to connect AOS-Switches to AirWave over secure IPsec tunnels and control all configuration from there.

C. A customer has a branch office with an AOS-Switch and an Internet connection. The customer would like to give branch office users secure access to the corporate LAN over an IPsec tunnel.

D. A customer lacks physical security and wants to impose 802.1X authentication on wired ports. After employees complete 802.1X authentication, they should receive full access to the network.

Case study

A retailer needs a wireless and wired network upgrade, as well as an authentication and access control solution for a network that includes a main office with a three-floor building and six branch sites. The branch users all use resources at the main corporate office. Branch office employees will use wireless connections. At the main office, employees use wired and wireless connections. The customer wants the strongest authentication for employee wireless connections. It is also important that the MC role-based firewall can implement consistent access controls on employee connections no matter where the employees connect and no matter how they connect (wirelessly or, at the main site, wired). The customer also needs to provide complimentary wireless access for guests. Guest should be redirected to a portal, through which they can register and login. The customer would like two SSIDs, CompanyXEmployee and CompanyXGuest. The company wants to divide employees in two groups, managers and staff. In the corporate network, managers should only have access to Server Group Managers and staff should only have access to Server Group Staff. Each server group includes necessary services such as domain and DHCP, as well as servers that the employees access to do their jobs. All employees should also have access to the Internet. Guests should only have HTTP and HTTPS access, and only to the Internet.

The customer has: a maximum of 1000 employee devices a maximum of 100 guest devices at the same time 500 devices on wired ports at the main site, which will be supported by 12 new AOS-Switches (mostly employee laptops, as well as a few non-802.1X capable printers, which should just communicate with print servers)

The devices used by employees include 450 company-issued laptops, which the company wants to screen for security issues and violations of security policies. All authentications are assumed to be concurrent.

To fulfill the requirements for the wireless network upgrade, the architect plans to propose: 5 RAPs at each of 6 branch sites 60 APs at the main site

The architect will also propose an MM and ClearPass. The architect still needs to plan the Mobility Controllers (MCs). The customer requires high availability for wireless services and redundancy for the MCs. If a single MC fails, the network must continue to function without impact. If an MC fails, the customer must also receive a replacement component for the failed component by the next business day so that their IT staff can install it and get the network back to normal operation as soon as possible. Software upgrades must also be seamless, without the introduction of any downtime for wireless services, and the customer needs to be able to obtain the latest software over the lifetime of the solution for the next several years.

What is a correct plan for firewall rules for the guest role? (The options describe the rules, but do not need to use correct command syntax.)

A. deny all to corporateLAN, permit all HTTP, permit all HTTPS, deny all other traffic

B. permit all HTTP, permit all HTTPS

C. permit all DHCP, permit all DNS, permit all HTTP, permit all HTTPS

D. permit all DHCP, permit all DNS, deny all to corporateLAN, permit all HTTP, permit all HTTPS