Refer to the following configuration segment for this item.
netdestination “internal”
no invert
network 172.16.43.0 255.255.255.0 position 1
range 172.16.11.0 172.16.11.16 position 2
!
ip access-list session “My-Policy”
alias “user” alias “internal” service_any permit queue low
!
A user frame is evaluated against this firewall policy with the following attributes:
Source IP: 172.17.49.3 Destination IP: 10.100.86.37 Destination Port: 80
Referring to the above file segment, how will the frame be handled by this firewall policy?

ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user any any permit
host 10.1.1.1 host 10.2.2.2 any deny
A user sends a frame with the following attributes:

Source IP: 10.1.1.1 Destination IP: 10.2.2.2 Destination Port: 25
Based on the above Mobility Controller configuration file segment, what will this policy do
with the user frame?

ip access-list session anewone
user network 10.1.1.0 255.255.255.0 any permit
user host 10.1.1.1 any deny
user any any permit
Referring to the above portion of a Mobility Controller configuration file, what can you
conclude? (Choose two)

Which of these are NOT a client attribute that can be configured in user derivation rules?

What are the types of user derivation rules that can be applied to a user? (Choose two)

Which is a Device Specific Attribute that can be evaluated in a user derivation rule?

Which match condition can be used by a server derivation rule? (Choose two)

An administrator wants to assign a VLAN to a user based upon the authentication process
using Vendor Specific Attributes (VSA). Where are Aruba Vendor Specific Attribute (VSA)
values provisioned?

View the Server group screen shot above.

A company has provisioned the same VAP, AAA and SSID profiles at both its Miami and NY
offices. This Server Group is applied for 802.1x authentication at both locations. The user’s
credentials are only found in the Miami Radius server “RadiusMiami”. There is no Radius
synchronization and both servers are reachable. What happens when the user attempts to
authenticate?

View the Server group and User Roles screen shots above.

A user associated to an SSID with 802.1x using this server group. RadiusNY returned a
standard radius attribute of filter-Id with a value of “employee”. The user was placed in the
guest Role. What statements below are correct? (Choose two)