Aruba Certified Mobility Associate 6.3 - ACMA-6.3 Exam Questions [2026]

QUESTION NO: 1
A port on a controller has been configured as untrusted. No wired access AAA profile or Global AAA profile is configured. When a user connects to that port which of the following statements is true?

A. Since there is no wired access AAA profile, only port policies will be applied B. When configuring the port as untrusted, an error message of "no wired access AAA profile exists" Therefore this is an invalid configuration. C. Since there is no wired access AAA profile or Global AAA profile the user will be given the logon role. D. The user will fall into the default wired access AAA profile and will be given the initial role. E. the user is denied all access automatically because no wired access AAA or Global AAA profile is assigned.

Correct Answer: C

QUESTION NO: 2
Firewall policy should be written from:

A. Order is not important B. Policies with the most rules 1st C. Most specific to least specific D. Least specific to most specific E. Most important resources first

Correct Answer: C

QUESTION NO: 3
Which method can APs use to discover a controller?

A. Dynamic DNS (DDNS) B. PAPI C. PnP D. HTTPS E. DHCP

Correct Answer: E

QUESTION NO: 4
When configuring a default gateway in the startup wizard it must be a part of:

A. A VLAN configured with an IP interface and assigned to a port B. An IP range that is not assigned to a port or VLAN C. A VLAN assigned to a port but without an IP interface configured D. A VLAN not configured on the controller E. The management Vlan

Correct Answer: A

QUESTION NO: 5
A Remote AP uses which type of secure tunnel to communicate with a controller:

A. PPTP B. IP-IP C. NAT-T D. GRE E. IPSec

Correct Answer: E

QUESTION NO: 6
802.1X authentication takes place:

A. After the user sees the captive portal page B. Prior to granting access to L2 media C. After the user has an IP address D. Once the IPSEC tunnel is up E. Prior to the user associating with the AP

Correct Answer: B

QUESTION NO: 7
A wired device is connected to an untrusted port on a controller. How can a role be assigned to the device?

A. Adding a wired AAA profile to a VLAN on the untrusted port B. A default Role can be directly assigned to an untrusted port C. The Role assigned to the untrusted port D. An initial Role can be assigned directly to the VLAN E. Roles are assigned to devices connected to a trusted port

Correct Answer: A

QUESTION NO: 8
An Aruba AP 125 is capable of supporting which of the following network types? (Select three)

A. 802.11w B. 802.11n C. 802.11b D. 802.11a E. 802.11p

Correct Answer: B,C,D

QUESTION NO: 9
In what order does the AP dynamically discover the Master controller?

A. DHCP option 43, DNS query, ADP Multicast, ADP Broadcast B. DHCP option 43, ADP Broadcast, ADP multicast, DNS Query C. DHCP option 43, ADP Multicast, ADP Broadcast, DNS query D. ADP Multicast, ADP Broadcast, DHCP option 43, DNS query E. DNS query, ADP Broadcast, ADP Multicast, DHCP option 43

Correct Answer: C