I85PREP
⌘ K
Aruba Mobility Expert (Written) study materials
Aruba Mobility Expert (Written) study resources

Aruba Mobility Expert (Written) practice questions

One question at a time. Build your Aruba Mobility Expert (Written) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Network Design and Architecture

Which Aruba controller deployment model places all control and data traffic handling on a single physical controller pair with no centralized management appliance?

  1. Standalone controller deployment Correct answer.
  2. ClearPass policy manager architecture
  3. Mobility Conductor overlay
  4. Mobility Master with local controllers

Explanation

A standalone controller deployment uses one or a redundant pair of Aruba Mobility Controllers to terminate APs and handle client traffic directly, without a separate management appliance. The Mobility Master and Mobility Conductor models add a dedicated management tier above the controllers. ClearPass is a policy and AAA service, not a controller deployment model.

Question 2Network Design and Architecture

In an Aruba Mobility Conductor architecture, what is the primary role of the conductor appliance?

  1. Hosting the captive portal for guest clients
  2. Terminating IPsec tunnels from remote APs
  3. Forwarding client data traffic between VLANs
  4. Centralized configuration and management of managed devices Correct answer.

Explanation

The Mobility Conductor is a management-plane appliance that centralizes configuration, licensing, and software distribution for the managed controllers beneath it. Data forwarding and tunnel termination remain on the managed devices. Guest portal hosting is a controller function, not the conductor's core role.

Question 3Network Design and Architecture

Which Aruba feature allows an access point to operate without a controller by downloading its configuration and becoming independently managed?

  1. Monitor-only mode
  2. Instant AP mode Correct answer.
  3. Campus AP mode
  4. RAP mode with backup

Explanation

Instant AP mode lets the AP run its own virtual controller software with no physical controller required. Campus AP mode depends on a controller for configuration and forwarding. RAP mode is a remote tunneled mode that still requires a controller. Monitor-only mode is a spectrum/IDS role, not a standalone operating model.

Question 4Network Design and Architecture

What does Aruba's Clustering (Mobility Controller Cluster) primarily provide?

  1. Hitless failover and load sharing for APs and clients Correct answer.
  2. Automatic VLAN pool assignment to access switches
  3. Encryption of management traffic between controllers
  4. Layer 2 loop prevention across the campus

Explanation

Controller clustering lets multiple controllers act as a single logical entity so APs and clients can fail over between cluster members with minimal disruption and share load. Loop prevention is handled by spanning tree protocols, and VLAN assignment to switches is not a clustering function.

Question 5Network Design and Architecture

An enterprise wants APs to tunnel all client traffic to a central controller for a branch office. Which Aruba AP mode supports this centralized forwarding design?

  1. Spectrum Monitor mode
  2. Instant AP with local bridging
  3. Campus AP mode Correct answer.
  4. Air Monitor mode

Explanation

Campus AP mode establishes a tunnel to a controller and can forward client traffic centrally through that controller, which suits branch designs needing centralized policy. Instant APs typically bridge locally or use a different tunnel scheme. Air Monitor and Spectrum Monitor modes do not serve clients.

Question 6Network Design and Architecture

Which Aruba component is responsible for role-based access policy enforcement and AAA services in a design using 802.1X?

  1. Mobility Conductor
  2. ClearPass Policy Manager Correct answer.
  3. Aruba Central only
  4. AirWave Management Platform

Explanation

ClearPass Policy Manager provides RADIUS/AAA services and role-based policy decisions for 802.1X and other authentication methods. The conductor handles controller management, AirWave handles monitoring, and Central is a cloud management platform rather than the AAA decision point.

Question 7Network Design and Architecture

In Aruba design terminology, what distinguishes a 'validated reference design' (VRD) from a custom design?

  1. A VRD requires no controller hardware
  2. A VRD guarantees a specific throughput per client
  3. A VRD is tested and documented for a defined scale and feature set Correct answer.
  4. A VRD is only applicable to Instant APs

Explanation

Aruba validated reference designs are tested, documented architectures scoped to defined scale limits and features so designers can rely on known behavior. They do not eliminate hardware, are not limited to Instant APs, and do not promise per-client throughput figures.

Question 8Network Design and Architecture

Which statement best describes the purpose of a Mobility Master redundancy design with a standby conductor?

  1. It enables Layer 3 roaming between controllers
  2. It replaces the need for controller clustering
  3. It provides management-plane high availability if the active conductor fails Correct answer.
  4. It doubles client data throughput across the campus

Explanation

A standby conductor provides management-plane redundancy so configuration and orchestration continue if the active conductor fails. It does not add data throughput, substitute for controller clustering at the data plane, or by itself enable Layer 3 roaming.

Question 9Network Design and Architecture

Which design consideration most directly determines the number of controllers needed in a campus deployment?

  1. The number of VLANs configured on the core
  2. The number of SSIDs broadcast per AP
  3. The number of access switches in the building
  4. The number of APs and clients to be supported Correct answer.

Explanation

Controller sizing is driven primarily by the count of APs and clients (and associated throughput) that must be terminated, because each controller has defined scale limits. Switch counts, VLAN counts, and SSID counts influence design but do not directly set controller quantity.

Question 10Network Design and Architecture

What is the primary benefit of Aruba's Layer 3 mobility (roaming across subnets) in a large campus?

  1. APs can be deployed without any controller
  2. Wireless encryption keys are shared between all clients
  3. Clients keep their IP address when roaming between controllers on different VLANs Correct answer.
  4. The network eliminates the need for routing protocols

Explanation

Layer 3 mobility preserves the client's IP address as it roams across controllers in different subnets, avoiding session breaks for real-time applications. It does not remove the need for controllers or routing, and it does not share encryption keys among clients.

Question 11Network Design and Architecture

Which Aruba architectural component provides RF health monitoring, spectrum analysis, and WIPS without serving client traffic?

  1. ClearPass OnGuard
  2. Instant AP virtual controller
  3. Mobility Conductor
  4. Dedicated Air Monitor AP Correct answer.

Explanation

An AP in Air Monitor mode dedicates its radios to scanning for rogue devices, spectrum issues, and attacks rather than serving clients. Instant virtual controllers and the conductor are management functions, and OnGuard is an endpoint posture agent.

Question 12Network Design and Architecture

A designer wants guest traffic isolated from internal traffic while still using the same physical APs. Which design approach is most appropriate?

  1. Assign guests to a dedicated SSID mapped to a separate VLAN and role Correct answer.
  2. Place guest APs on the internal VLAN with a shared PSK
  3. Route all guest traffic through the management VLAN
  4. Disable encryption on the internal SSID

Explanation

A dedicated guest SSID mapped to its own VLAN and a restricted user role provides isolation from internal resources. Sharing the internal VLAN, disabling encryption, or using the management VLAN exposes internal systems and violates segmentation.

Question 13Network Design and Architecture

Which factor most affects the choice between tunneled and bridged forwarding for a branch office deployment?

  1. The number of SSIDs configured
  2. The controller's management IP address
  3. The color of the AP enclosure
  4. The amount of client traffic and WAN bandwidth available Correct answer.

Explanation

Tunneled forwarding sends client traffic over the WAN to a controller, consuming WAN bandwidth, while bridged forwarding keeps traffic local. The traffic volume and available WAN capacity therefore drive the decision. Enclosure color, SSID count, and management IP do not determine forwarding mode.

Question 14Network Design and Architecture

What does an Aruba 'Mobility Master' (now Mobility Conductor) hierarchy primarily simplify in a multi-controller network?

  1. Encryption of all client traffic
  2. Radio channel planning for each AP
  3. Physical cabling between buildings
  4. Per-controller manual configuration of every managed device Correct answer.

Explanation

The conductor hierarchy lets administrators configure managed devices centrally rather than logging into each controller individually. It does not encrypt client traffic, handle cabling, or perform per-AP channel planning.

Question 15Network Design and Architecture

Which Aruba design principle recommends keeping the number of broadcast/multicast-intensive VLANs per controller within tested limits?

  1. The DHCP lease duration policy
  2. The SNMP community string convention
  3. Scale and capacity planning guidance in validated designs Correct answer.
  4. The color-coding scheme for APs

Explanation

Validated designs publish scale limits for VLANs, clients, and APs per controller because broadcast and multicast load affects performance. Color-coding, DHCP lease duration, and SNMP naming are not architectural scale controls.

Question 16Network Design and Architecture

Which statement accurately describes the Aruba 'master-local' relationship in a legacy controller architecture?

  1. The master controller forwards all client data traffic for the network
  2. The master controller manages configuration and the local controllers terminate APs Correct answer.
  3. Local controllers manage the master controller's configuration
  4. Local controllers provide AAA services for the master

Explanation

In the legacy master-local model, the master controller holds the configuration and pushes it to local controllers, which terminate APs and handle client traffic. Local controllers do not manage the master, the master does not forward all client data, and AAA is typically external.

Question 17Network Design and Architecture

What is the purpose of an Aruba 'VLAN pool' in a large wireless design?

  1. To distribute clients across multiple VLANs to reduce broadcast domain size Correct answer.
  2. To encrypt VLAN traffic between controllers
  3. To prevent clients from roaming between controllers
  4. To assign AP management addresses automatically

Explanation

A VLAN pool assigns clients across several VLANs, typically by load or hash, to keep individual broadcast domains and DHCP scopes manageable. It does not encrypt traffic, assign AP management addresses, or block roaming.

Question 18Network Design and Architecture

Which Aruba solution is best suited to centrally manage and monitor a large multi-site network of controllers and APs from a single console?

  1. AirWave Management Platform Correct answer.
  2. Air Monitor mode
  3. Instant AP virtual controller
  4. ClearPass OnGuard

Explanation

AirWave provides centralized monitoring and management across many controllers and APs in multi-site networks. OnGuard is an endpoint agent, Air Monitor is an AP role, and an Instant virtual controller manages only its own cluster.

Question 19Network Design and Architecture

In a design using Aruba Instant APs, what happens to the virtual controller if the AP hosting it fails?

  1. All clients are immediately disconnected permanently
  2. The network loses all management until it is manually restored
  3. The APs revert to Campus AP mode
  4. Another AP in the cluster takes over the virtual controller role Correct answer.

Explanation

Instant clusters elect a virtual controller, and if the hosting AP fails another member assumes the role so management continues. Clients are not permanently disconnected, and APs do not automatically convert to Campus mode.

Question 20Network Design and Architecture

Which design element is required for Aruba Layer 3 mobility to function between controllers in different subnets?

  1. A mobility tunnel between the controllers and appropriate routing Correct answer.
  2. Identical hostnames on both controllers
  3. A shared management VLAN across all sites
  4. Disabling all ACLs on the controllers

Explanation

Layer 3 mobility relies on mobility tunnels between controllers plus correct routing so the client's home subnet remains reachable. Hostnames, a shared management VLAN, and disabling ACLs are not requirements and some would weaken security.

Question 21Network Design and Architecture

Which statement best describes the role of Aruba Central in a network architecture?

  1. A cloud-based management platform for configuring and monitoring Aruba devices Correct answer.
  2. A hardware controller that terminates all AP tunnels
  3. An RF spectrum analyzer appliance
  4. A RADIUS server for 802.1X authentication

Explanation

Aruba Central is a cloud management platform that provides configuration, monitoring, and analytics for Aruba devices. It is not a hardware tunnel terminator, an AAA server, or a spectrum analyzer.

Question 22Network Design and Architecture

A campus design must support seamless roaming for voice clients across three buildings served by different controllers. Which combination of features is most relevant?

  1. Controller clustering with Layer 3 mobility Correct answer.
  2. VLAN pooling with DHCP relay only
  3. Air Monitor mode with WIPS
  4. Spectrum Monitor with ARM disabled

Explanation

Seamless voice roaming across controllers requires clustering for fast failover and Layer 3 mobility to preserve the client IP across subnets. Monitoring modes, VLAN pooling alone, or disabling ARM do not provide seamless cross-controller roaming.

Question 23Network Design and Architecture

What is the recommended practice for placing controllers in a campus core design?

  1. At the aggregation or core layer close to the routing boundary Correct answer.
  2. At the access edge in every wiring closet
  3. On the WAN edge outside the firewall
  4. In the data center only

Explanation

Controllers are typically placed at the aggregation or core layer near the Layer 3 boundary so tunnels are short and client traffic enters routing efficiently. Placing them in every closet, outside the firewall, or only in the data center creates inefficiency or security gaps.

Question 24Network Design and Architecture

Which Aruba architectural concept allows a single AP to serve multiple customer organizations with separate policies?

  1. Disabling encryption to simplify onboarding
  2. Multi-tenant SSID with role-based policy per organization Correct answer.
  3. Single SSID with a shared PSK for all organizations
  4. Routing all organizations through one flat VLAN

Explanation

Multi-tenant designs use separate SSIDs or roles mapped to distinct policies so each organization's traffic is isolated and governed appropriately. Shared PSKs, disabled encryption, and a flat VLAN break isolation between tenants.

Question 25Network Design and Architecture

Which factor is most important when deciding whether to deploy Instant APs versus controller-based APs at a small branch?

  1. Whether local management simplicity outweighs centralized control requirements Correct answer.
  2. The brand of the building's Ethernet cabling
  3. The number of power outlets in the closet
  4. The color scheme of the ceiling tiles

Explanation

The decision hinges on tradeoffs between simple local management (Instant) and centralized policy, tunneling, and scale (controller-based). Cabling brand, outlet count, and ceiling aesthetics do not determine the architecture.

Question 26Network Design and Architecture

In Aruba wireless design, what is the primary purpose of a VLAN pool?

  1. To aggregate multiple physical uplinks into a single logical link for redundancy
  2. To distribute wireless clients across multiple VLANs for load balancing and subnet sizing Correct answer.
  3. To enforce role-based access policies based on user credentials
  4. To assign client IP addresses dynamically from a central DHCP server

Explanation

A VLAN pool allows a single SSID to map clients to multiple VLANs, which spreads address allocation and broadcast traffic across subnets. This is useful in high-density designs to avoid oversized broadcast domains and to balance client load. It does not provide DHCP, link aggregation, or policy enforcement.

Question 27Network Design and Architecture

Which Aruba design principle helps limit broadcast and multicast traffic in large wireless deployments?

  1. Configuring a single large VLAN for all wireless clients to simplify management
  2. Enabling broadcast filtering on the controller to drop unnecessary broadcast and multicast frames Correct answer.
  3. Disabling client isolation to allow peer-to-peer communication
  4. Increasing the MTU size on all controller interfaces to reduce packet overhead

Explanation

Broadcast filtering reduces unnecessary broadcast and multicast traffic from being forwarded to wireless clients, conserving airtime and controller resources. A single large VLAN increases broadcast domains, and MTU or client isolation settings do not address broadcast traffic. This principle is part of Aruba's recommended design for scalability.

Question 28Network Design and Architecture

A network architect is designing a high-density wireless network for a lecture hall with 500 seats. Which design consideration is most critical to ensure sufficient capacity?

  1. Placing all APs in a single VLAN to simplify client addressing
  2. Deploying APs with the highest available transmit power to maximize coverage
  3. Using only 2.4 GHz radios to avoid interference from other networks
  4. Selecting APs with a high client count per radio and enabling band steering Correct answer.

Explanation

High-density designs require careful capacity planning, including APs that can handle many clients per radio and features like band steering to balance load across bands. Maximizing transmit power can increase interference and reduce overall capacity. Using only 2.4 GHz or a single VLAN does not address capacity and can create bottlenecks.

Question 29Network Design and Architecture

When designing an Aruba wireless network for a multi-story building, which factor most influences the decision to use directional antennas instead of omnidirectional antennas?

  1. The need to provide coverage in a specific direction while reducing interference from adjacent floors Correct answer.
  2. The desire to simplify the physical installation by using standard mounting brackets
  3. The requirement to support the maximum number of clients per AP
  4. The need to reduce the overall cost of the AP hardware

Explanation

Directional antennas focus RF energy in a specific direction, which can help control coverage and reduce interference from other floors or areas. Client count and installation simplicity are not primary drivers for antenna choice. Cost is generally not the main factor; performance and interference mitigation are.

Question 30Network Design and Architecture

In an Aruba Mobility Conductor deployment, what is the primary role of the conductor module?

  1. To provide DHCP and DNS services for wireless clients
  2. To manage and orchestrate configuration across multiple managed controllers Correct answer.
  3. To forward client data traffic between VLANs
  4. To terminate VPN tunnels from remote APs

Explanation

The conductor module in a Mobility Conductor architecture centralizes management and configuration orchestration for multiple controllers, simplifying operations. It does not forward client data, terminate VPN tunnels, or provide DHCP/DNS services. Those functions are handled by managed controllers or dedicated servers.

Question 31Mobility Controller Deployment and High Availability

In an Aruba controller-based architecture, which role does the Mobility Master (or Mobility Conductor) perform?

  1. It provides centralized configuration and management for managed controllers Correct answer.
  2. It forwards all client data traffic between VLANs
  3. It terminates all CAP tunnel traffic from access points
  4. It acts as the DHCP server for all client subnets

Explanation

The Mobility Master/Mobility Conductor is a management-plane device that centralizes configuration, licensing, and orchestration for the controllers it manages. Data forwarding and AP termination remain on the managed controllers.

Question 32Mobility Controller Deployment and High Availability

Which VRRP function does an Aruba controller pair use in an active-standby high-availability deployment?

  1. Load-balancing client traffic across both controllers
  2. Encrypting control traffic between the two controllers
  3. Synchronizing the configuration database between peers
  4. Providing a virtual IP that clients and APs use as their default gateway Correct answer.

Explanation

VRRP presents a shared virtual IP address so that the active controller owns the gateway while the standby can take over on failover. Configuration and state synchronization are handled by separate HA mechanisms.

Question 33Mobility Controller Deployment and High Availability

What is the primary purpose of an Aruba controller cluster?

  1. To replace the need for VLANs in the network
  2. To eliminate the need for any access points
  3. To convert all wireless traffic into wired traffic
  4. To allow multiple controllers to share AP and client state for redundancy and scale Correct answer.

Explanation

A controller cluster lets member controllers share state so that APs and clients can be served by any member and survive a member failure. This provides both redundancy and horizontal scaling of the data plane.

Question 34Mobility Controller Deployment and High Availability

Which protocol does an Aruba controller cluster use to synchronize state between member controllers?

  1. Mobility Control Protocol (MCP) Correct answer.
  2. OSPF
  3. STP
  4. BGP

Explanation

Aruba clusters use the Mobility Control Protocol to exchange and synchronize controller and client state among cluster members. Routing protocols and STP serve unrelated network functions.

Question 35Mobility Controller Deployment and High Availability

In an Aruba active-standby HA pair, what does the standby controller do while the active controller is healthy?

  1. It forwards client traffic in parallel with the active controller
  2. It serves as the DHCP server for all clients
  3. It terminates all AP tunnels independently
  4. It maintains synchronized state and remains ready to take over Correct answer.

Explanation

In active-standby HA, the standby continuously synchronizes state from the active controller so it can assume the active role quickly on failure. It does not forward client traffic while the active is healthy.

Question 36Mobility Controller Deployment and High Availability

Which command on an Aruba Mobility Controller displays the current VRRP state and virtual IP information?

  1. show ap database
  2. show cluster
  3. show ha-group
  4. show vrrp Correct answer.

Explanation

The 'show vrrp' command displays VRRP virtual router state, priorities, and virtual IP addresses. The other commands report cluster, HA group, and AP information respectively.

Question 37Mobility Controller Deployment and High Availability

What is the effect of configuring a higher VRRP priority on one controller in an HA pair?

  1. It reduces the controller's forwarding capacity
  2. It disables failover to the peer
  3. It forces the controller into standby mode
  4. It makes that controller more likely to become the VRRP master Correct answer.

Explanation

VRRP elects the master based on priority, with the higher priority winning the election. The priority value does not affect forwarding capacity or disable failover.

Question 38Mobility Controller Deployment and High Availability

Which interface on an Aruba controller is typically used to reach the management plane for configuration?

  1. The console-only port
  2. The management interface Correct answer.
  3. The AP-facing trunk port
  4. The uplink data port

Explanation

The management interface provides out-of-band access for administrative configuration and monitoring. Data and AP-facing ports carry user and tunnel traffic.

Question 39Mobility Controller Deployment and High Availability

An administrator wants APs to fail over to a backup controller if the primary becomes unreachable. Which mechanism should be configured?

  1. An STP root configuration on the AP
  2. A VRRP priority of 255 on the AP
  3. A static route on the AP
  4. A backup LMS (LMS IP) address on the AP or in the AP system profile Correct answer.

Explanation

The Local Management Switch (LMS) and backup LMS addresses tell an AP which controllers to use and in what order for failover. Static routes, VRRP, and STP are not AP failover mechanisms.

Question 40Mobility Controller Deployment and High Availability

What does the term 'fast failover' refer to in an Aruba active-standby HA deployment?

  1. The speed at which new APs are discovered
  2. The time required to reboot the standby controller
  3. The rate at which VRRP advertisements are sent
  4. The rapid transition of client and AP state to the standby controller with minimal disruption Correct answer.

Explanation

Fast failover refers to the synchronized state transfer that allows the standby to assume the active role quickly, minimizing client disruption. It is distinct from discovery speed or advertisement intervals.

Question 41Mobility Controller Deployment and High Availability

Which statement best describes the difference between active-active and active-standby controller HA?

  1. Active-standby requires a cluster; active-active does not
  2. Active-active shares traffic across controllers; active-standby keeps one idle as a backup Correct answer.
  3. Active-active uses VRRP; active-standby does not
  4. Active-standby forwards traffic on both controllers

Explanation

Active-active distributes client traffic across controllers for scale, while active-standby keeps one controller ready to take over. Both can use redundancy mechanisms, and active-standby does not forward traffic on the standby.

Question 42Mobility Controller Deployment and High Availability

A controller cluster member becomes unreachable. What happens to the APs and clients that were anchored to that member?

  1. They are forced into monitor mode
  2. They lose connectivity permanently until manually reconfigured
  3. They revert to standalone forwarding without a controller
  4. They are re-homed to another cluster member based on cluster state Correct answer.

Explanation

Cluster members share state so that APs and clients associated with a failed member can be re-homed to a surviving member. This preserves connectivity without manual reconfiguration.

Question 43Mobility Controller Deployment and High Availability

Which configuration must match between controllers in an HA pair for stateful failover to work correctly?

  1. The console baud rate
  2. The serial numbers of the controllers
  3. The hostnames of the controllers
  4. The HA group and VRRP configuration, including VLANs and virtual IPs Correct answer.

Explanation

Consistent HA group and VRRP configuration, including matching VLANs and virtual IPs, is required for the standby to take over seamlessly. Hostnames and serial numbers are intentionally unique, and baud rate is irrelevant.

Question 44Mobility Controller Deployment and High Availability

What is the purpose of the 'heartbeat' between controllers in an HA pair?

  1. To balance client traffic
  2. To synchronize DHCP leases
  3. To distribute AP firmware images
  4. To monitor peer health and detect failure Correct answer.

Explanation

The HA heartbeat allows each controller to monitor its peer's health so that failover can be triggered promptly on failure. It does not synchronize DHCP leases, distribute firmware, or balance traffic.

Question 45Mobility Controller Deployment and High Availability

An administrator needs to verify which controller is currently active in an HA pair. Which command is most appropriate?

  1. show datapath session
  2. show ap active
  3. show ha-group Correct answer.
  4. show user-table

Explanation

The 'show ha-group' command reports HA group status, including which controller is active and which is standby. The other commands report AP, datapath, and user information.

Question 46Mobility Controller Deployment and High Availability

Which factor most directly determines how long client disruption lasts during an HA failover?

  1. The synchronization state and failover detection timing Correct answer.
  2. The color of the controller chassis
  3. The number of configured SSIDs
  4. The number of VLANs in the network

Explanation

Failover disruption depends primarily on how well state is synchronized and how quickly failure is detected. SSID count, VLAN count, and hardware appearance do not determine failover duration.

Question 47Mobility Controller Deployment and High Availability

In a cluster deployment, what is the role of the cluster leader?

  1. It serves as the DHCP server for the cluster
  2. It forwards all client traffic for every member
  3. It replaces the need for VRRP entirely
  4. It coordinates cluster-wide operations such as membership and state distribution Correct answer.

Explanation

The cluster leader coordinates cluster operations, including membership and state distribution among members. It does not forward all client traffic or replace gateway redundancy mechanisms.

Question 48Mobility Controller Deployment and High Availability

Which statement about the Mobility Master and managed controllers is accurate?

  1. Managed controllers continue to forward traffic if the Mobility Master is unreachable Correct answer.
  2. The Mobility Master forwards all user traffic
  3. Managed controllers cannot function without a live Mobility Master
  4. The Mobility Master terminates all AP tunnels

Explanation

Managed controllers retain their forwarding and operational state if the Mobility Master becomes unreachable, since the management plane is separate from the data plane. The Mobility Master does not forward user traffic or terminate AP tunnels.

Question 49Mobility Controller Deployment and High Availability

What is the recommended practice for the management network of controllers in an HA pair?

  1. Use a single shared IP address for both controllers
  2. Place each controller on an isolated network with no connectivity
  3. Disable management access on the standby controller
  4. Place both controllers on the same management VLAN for reachability Correct answer.

Explanation

Both controllers should be reachable on the management network, typically the same management VLAN, so administrators can manage either device. Each controller needs its own unique IP, and management should remain accessible.

Question 50Mobility Controller Deployment and High Availability

An AP is configured with a primary LMS and a backup LMS. When does the AP use the backup LMS?

  1. Only when the AP is in monitor mode
  2. Only during firmware upgrades
  3. Always, in parallel with the primary
  4. When the primary controller is unreachable Correct answer.

Explanation

The AP uses the primary LMS by default and falls back to the backup LMS when the primary is unreachable. It does not use both in parallel or restrict backup use to upgrades or monitor mode.