HPE6-A47 Exam Dumps : Designing Aruba Solutions

 A metal firewall is a significant RF obstacle that can be difficult to see visually and might require access to blueprints. A metal firewall is a type of fire-resistant barrier that is made of metal or metal-clad materials and is used to separate different sections of a building or a network. A metal firewall can block or attenuate RF signals that pass through it, causing coverage gaps, signal degradation, or interference in the wireless deployment. A metal firewall can also reflect RF signals, creating multipath fading or distortion in the wireless environment. Therefore, an architect needs to identify the location and thickness of any metal firewalls in the building and account for their impact on the RF design. A metal firewall may require additional access points, antennas, or cabling to provide adequate coverage and performance across the wireless deployment. A metal firewall may also affect the channel planning, transmit power settings, and antenna orientation of the access points and radios. A metal firewall can be difficult to see visually, as it may be hidden behind walls, ceilings, or floors, or blended with other materials.Therefore, an architect might need access to blueprints or other sources of information to locate and measure any metal firewalls in the building. References:

• RF Design | Validated Solution Guide - Aruba
• Managing and Optimizing RF Spectrum for Aruba WLANs | PDF - SlideShare
• RF Optimization - Aruba
• Advanced RF Design & Troubleshooting | PPT - SlideShare

 The correct answer is option C, conversion of the existing Instant APs to campus APs (CAPs). This is because the existing Instant APs can be converted to CAPs by changing their operating mode and pointing them to the MC. This way, the customer can leverage the existing APs and avoid purchasing new ones. The MC can then provide centralized management, configuration, and control for the APs.

Option A is incorrect because the purchase of Universal APs is not necessary. Universal APs are APs that can operate in either Instant or CAP mode without requiring a conversion. However, the existing APs can be converted to CAPs without buying new ones.

Option B is incorrect because Aruba ClearPass is not required to onboard the APs as CAPs in the new MC-based deployment. Aruba ClearPass is a network access control (NAC) solution that provides authentication, authorization, and accounting (AAA) services for wired and wireless devices. It is not involved in the conversion of Instant APs to CAPs.

Option D is incorrect because a Virtual Mobility Controller (VMC) is not a valid option to control Instant APs. A VMC is a software-based MC that runs on a hypervisor. It can control CAPs, but not Instant APs. Instant APs can only be controlled by another Instant AP acting as a Virtual Controller (VC).

References: The information can be referenced from the official HPE documents and learning materials available on HPE Press and Aruba Networks. Specifically, it aligns with the objectives outlined in Chapter 6: Wireless Network Design, where the Instant and CAP modes and the MC options are discussed. Designing Aruba Solutions Official Certification Study Guide Aruba Instant User Guide Aruba Mobility Controller Data Sheet

The customer wants to use certificates to authenticate user devices, which means that they need a strong and secure method of verifying the identity of the devices that connect to the employee WLAN. The best option for this is to use EAP-TLS instead of PEAP-MSCHAPv2. EAP-TLS stands for Extensible Authentication Protocol-Transport Layer Security, and it is a protocol that uses certificates on both the client and the server side to establish a mutual authentication and a secure channel for data exchange. EAP-TLS is considered the most secure EAP method, as it prevents common attacks such as dictionary attacks, man-in-the-middle attacks, and replay attacks.

The other options are not suitable for the customer requirements:

• Option B is incorrect because TKIP encryption is weaker than AES encryption. TKIP stands for Temporal Key Integrity Protocol, and it is an older encryption method that was designed to replace WEP, which had serious security flaws. However, TKIP also has some vulnerabilities, and it is not recommended for modern WLANs. AES stands for Advanced Encryption Standard, and it is a newer and stronger encryption method that provides better security and performance for WLANs.
• Option C is incorrect because WPA2-PSK is less secure than WPA2-Enterprise. WPA2-PSK stands for Wi-Fi Protected Access 2-Pre-Shared Key, and it is a security mode that uses a common passphrase or key to authenticate all devices that connect to the WLAN. However, this passphrase or key can be easily compromised or shared, and it does not provide individual authentication or encryption for each device. WPA2-Enterprise stands for Wi-Fi Protected Access 2-Enterprise, and it is a security mode that uses a RADIUS server to authenticate each device individually and dynamically generate encryption keys for each session. WPA2-Enterprise provides better security and scalability for WLANs.
• Option D is incorrect because TTLS does not use certificates to authenticate user devices. TTLS stands for Tunneled Transport Layer Security, and it is a protocol that uses certificates only on the server side to establish a secure tunnel for data exchange. The client side can use different methods to authenticate, such as passwords, tokens, or certificates. However, TTLS does not require certificates on the client side, and it is less secure than EAP-TLS.

References:

• ArubaOS 8.5 User Guide)
• ArubaOS 8.5 Security Guide)
• Aruba Certified Design Professional Official Certification Study Guide (HPE6-A47))