Free ACDX Practice Questions

Question 1

At a university's busiest lecture theatre, an Aruba WLAN delivers strong signal, adequate SNR, and high negotiated rates, yet application throughput collapses when the seats fill. Packet captures show prolonged deferral to valid transmissions from neighboring cells, not a high noise floor. The APs are mutually audible and reuse two 80-MHz channel blocks; controller and wired capacity are adequate. The permitted spectrum supports more independent channels at narrower widths. The next RF design should emphasize:

Accepted Answer

Narrower channels and smaller cells with controlled overlap, increasing spatial reuse across the seating area.

Answer

Higher AP power on the existing 80-MHz channels, sustaining faster client rates near the cell edges.

Answer

Additional omnidirectional APs on the same channels, reducing the number of associations per AP.

Answer

Equal client counts across the existing cells, retaining the channel widths and coverage geometry for maximum link rates.

Question 2

An acquisition brings managed wireless laptops and wired barcode readers onto a common access policy. The laptops support EAP-TLS and have managed certificates; they require individually revocable cryptographic device identities. The readers lack an 802.1X supplicant and must remain in service. Security has approved a reader exception limited to the inventory server, and the access switches support MAC authentication and enforceable destination restrictions. What combination satisfies these requirements?

Accepted Answer

Use EAP-TLS for laptops and a restricted MAC-authentication exception for readers, with access limited at the switches.

Answer

Use MAC authentication for both populations, assigning laptop and reader privileges from their registered hardware addresses.

Answer

Use a shared WPA2 passphrase for laptops and restricted MAC authentication for readers, rotating the passphrase when staff leave.

Answer

Deny network access to the readers until certificate-capable replacements are installed, applying EAP-TLS to every admitted endpoint.

Question 3

A wiring-closet BOM assigns 24 APs and eight phones to a 48-port PoE+ switch. Each AP requires a 30-W PSE allocation, corresponding to 25.5 W available at the powered device; each phone requires a 15.4-W PSE allocation, corresponding to 12.95 W at the device. Every port supports its required allocation. The switch offers 1,480 W with both supplies operating but only 740 W after either supply fails. All devices must retain their full allocations after that failure. What minimum surviving PSE budget must the BOM provide?

Accepted Answer

843.2 W, retaining the required source-side allocation for every AP and phone.

Answer

715.6 W, summing the power available at all of the powered devices.

Answer

421.6 W, assigning half of the total load to each installed power supply.

Answer

960.0 W, reserving a full PoE+ allocation for every occupied powered port.

Question 4

A campus proposal describes two carrier circuits as independent because they use different providers and terminate on separate routers. Router capacity and independent power have already been verified. The customer specifically requires connectivity to survive one excavation strike on an access conduit. Before accepting the claimed circuit independence, the architect needs evidence of:

Accepted Answer

The as-installed access routes, building entry paths, and any physical infrastructure shared by the two carrier services.

Answer

Distinct public address allocations, separate routing policies, and independent administrative control of the two carrier connections.

Answer

Separate carrier support organizations, independently negotiated service contracts, and different escalation contacts for restoration incidents.

Answer

The measured throughput of both circuits, their individual availability histories, and successful failover between the customer routers.

Question 5

An ArubaOS 8 campus has 300 active APs and 4.4 Gb/s of peak controller-processed client traffic. Each approved managed controller supports 200 APs and 2 Gb/s with the required services enabled. After any one managed controller fails, neither AP utilization nor traffic utilization may exceed 80% of the surviving controllers' corresponding capacities. Rebalancing is supported, entitlements are sufficient, and no other resource limits apply. A separate Mobility Master pair provides management only. What is the smallest required number of managed controllers?

Accepted Answer

Four managed controllers

Answer

Two managed controllers

Answer

Three managed controllers

Answer

Six managed controllers

Question 6

The QoS specification for a WLAN shared by managed handsets and laptops traces verified handset voice traffic as follows: trusted classification, DSCP EF 46 on the wired network, then 802.11 user priority 0 on the wireless downlink. Capacity and admission control are sufficient. The customer requires voice access-category treatment without promoting laptop downloads. Select the replacement mapping that preserves this distinction across the wired-to-wireless boundary.

Accepted Answer

Map the validated EF voice traffic to user priority 6, while retaining separate treatment for other application classes.

Answer

Preserve user priority 0 and enlarge the best-effort queue so voice frames are less likely to be discarded.

Answer

Assign user priority 6 to all traffic on the shared WLAN so the handsets consistently receive voice-category access.

Answer

Map validated EF traffic to user priority 5, placing those frames in the higher-priority video access category.

Question 7

During an authorized contractor-WLAN pilot at a process plant, a test client establishes an HTTPS connection to a protected control server. Its role evaluates rules top to bottom, stopping at the first match: permit HTTPS to any destination; deny all traffic to the control subnet; permit approved Internet traffic. Contractor access to the control subnet is forbidden. Production and emergency-dispatch devices use separate roles whose isolation tests pass; those services must remain available. Operations can temporarily isolate the contractor pilot. Which response contains the exposure and corrects the demonstrated defect?

Accepted Answer

Isolate the contractor pilot, move the control-subnet deny above the broad HTTPS permit, and verify isolation before readmission.

Answer

Assign contractors a separate SSID and VLAN, retaining the existing routed role before readmission.

Answer

Append an explicit HTTPS deny for the control server after the Internet rule, then readmit the pilot once the rule is installed.

Answer

Disable every WLAN at the plant until the production and emergency-dispatch roles have been redesigned alongside the contractor role.

Question 8

A ClearPass publisher becomes unavailable during maintenance. The access devices continue sending requests to a healthy subscriber that already holds the required policy configuration. EAP-TLS credentials, time services, certificate validation, and every external authorization dependency remain available independently of the publisher. No subscriber has been promoted, and no policy changes are required. What operating behavior should the architect expect?

Accepted Answer

Authentication against existing policy continues; creating guest accounts remains unavailable until a writable publisher is available.

Answer

New EAP-TLS authentications stop, but guest-account creation remains available through the subscriber's replicated configuration database.

Answer

Both authentication and guest-account creation continue, because database replication makes the subscriber independently writable during the outage.

Answer

All new 802.1X admissions must be suspended, even on the healthy subscriber, until the original publisher returns to service.

Question 9

A replication application must deliver 12 Gb/s through one TCP connection and cannot open parallel connections. The server, storage, and remaining path have been validated above that rate. The proposed bottleneck link is a two-member 10-Gb/s LACP bundle that hashes each flow onto one member. Compatible 25-Gb/s interfaces and media are available. For this application, choose the change that removes the stated link constraint.

Accepted Answer

Provide a 25-Gb/s link on the constrained segment so the required single flow fits on one link.

Answer

Add a third 10-Gb/s LACP member and rebalance the existing per-flow hash across the larger bundle.

Answer

Retain both 10-Gb/s members and include TCP port numbers in the link-aggregation hash calculation.

Answer

Replace the bundle with two routed 10-Gb/s links using equal-cost routing with per-flow path selection.

Question 10

The licensing review for an ArubaOS 8.6 physical-controller deployment confirms sufficient AP entitlements and Mobility Master managed-device capacity. The security specification also requires role-based, stateful user-traffic firewall enforcement for clients on every active AP. The BOM contains no feature licenses for that enforcement. Which addition closes this specific entitlement gap?

Accepted Answer

PEF entitlement covering every active AP that requires the specified user-traffic policy enforcement.

Answer

RFProtect entitlements for every active AP requiring enhanced wireless intrusion detection.

Answer

A second allocation of base AP licenses equal to the number of APs carrying secured user traffic.

Answer

Additional Mobility Master capacity for all managed controllers responsible for enforcing the user security policies.

Free ACDX Practice Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

That's 10 of 1,030