| 33% | 70 | 20 | Design
| 10% | Gather and analyze data, and document customer requirements for a single-site campus environment with less than 1000 employees or subsystems of an enterprise-wide network.- Given an outline of a customer's needs, determine the information required to create a solution.
| | 18% | Evaluate the requirements for a single-site campus environment with less than 1000 employees or subsystems of an enterprise-wide network, and select the wired and wireless networking technologies for the design.- Given a scenario, evaluate the customer requirements to identify gaps per a gap analysis, and select components based on the analysis results.
- Given a scenario, translate the business needs of the environment into technical customer requirements.
| | 31% | Plan and design an Aruba solution per the customer requirements for a single-site campus environment with less than 1000 employees or subsystems of an enterprise-wide network.- Given a scenario, select the appropriate products based on the customer technical requirements.
- Given the customer requirements, design the high-level architecture.
- Given a customer scenario, explain how a specific technology or solution would meet the customer requirements.
| | 33% | Produce a detailed design specification document for a single-site campus environment with less than 1000 employees or subsystems of an enterprise-wide network.- Given a customer scenario, choose the appropriate components that should be included on the BOM.
- Given the customer requirements, determine the component details and document the high-level design.
- Given a customer scenario, determine and document a detailed network management design.
- Given a customer scenario, design and document a detailed network security solution.
- Given a customer scenario, design and document the logical and physical network solutions.
- Given the customer scenario and service level agreements, document the licensing and maintenance requirements.
| | 8% | Recommend the solution to the customer.- Given the customer's requirements, explain and justify the recommended solution.
|
|
| 33% | 70 | 20 | Mobility
| 20% | Integrate and implement Aruba Mobile First architecture components and explain their uses.- Integrate components of the Aruba Mobile First Architecture.
- Differentiate between standalone mode and Master Controller Mode (MCM) features and recommend use cases.
- Differentiate the use of packet forwarding modes (tunnel, decrypt-tunnel, split-tunnel, and bridge).
- Differentiate between redundancy methods, and describe the benefits of L2 and L3 clustering.
- Explain Remote Access architectures and how to integrate the architectures.
- Describe and differentiate advanced licensing features.
| | 20% | Configure and validate Aruba WLAN secure employee and guest solutions.
• Configure Remote Access with Aruba Solutions such as RAP and VIA.
• Configure and deploy redundant controller solutions based upon a given design.
• Configure a Mesh WLAN. | | 38% | Implement advanced services and security.
• Enable multicast DNS features to support discovery across VLAN boundaries.
• Configure role derivation, and explain and implement advanced role features.
• Configure an AAA server profile for a user or administrative access.
• Implement Mobility Infrastructure hardening features.
• Explain Clarity features and functions.
• Implement Voice WLAN based upon a given design.
• Configure primary zones and data zones to support MultiZone AP.
• Implement mobility (roaming) in an Aruba wireless environment.
• Implement tunneled node to secure ArubaOS switches. | | 10% | Manage and monitor Aruba solutions.
• Use AirWave to monitor an Aruba Mobility Master and Mobility Controller.
• Perform maintenance upgrades and operational maintenance. | | 12% | Troubleshoot Aruba WLAN solutions.
• Troubleshoot controller communication.
• Troubleshoot the WLAN.
• Troubleshoot Remote Access.
• Troubleshoot issues related to services and security.
• Troubleshoot role-based access, per-port based security and Airmatch. |
|
| 33% | 70 | 20 | Switching
| 15% | Plan the wired network solution.- Given a scenario with a design and/or customer requirements, determine an appropriate implementation plan.
| | 43% | Install and configure the wired network solution.- Install and Configure NetEdit
- Given an implementation plan, explain how to physically configure the switches.
- Given the implementation plan, explain how to configure Layer 2 technologies.
- Given an implementation plan, explain how to configure and validate Layer 3 interfaces, services, routing protocols and overlays.
- Explain multicast features and configuration concepts.
- Explain Aruba Switch security features and configuration concepts.
- Explain QoS Aruba Switch features and configuration concepts.
- Explain Aruba solutions integration and configuration concepts.
| | 22% | Troubleshoot the wired network solution.- Given a scenario, identify a network failure (IP mismatch, VLAN mismatch, hardware configuration or failure, port configuration).
- Given an action plan to remediate an issue, determine the implications to the network state.
- Given a scenario, determine the cause of the performance problem (QoS issue, Configuration issue HW and Software, end node).
| | 20% | Manage, maintain, optimize, and monitor the wired network solution.- Given a scenario, determine a strategy to implement configuration management (maintenance, auditing, backup, archiving).
- Analyze data that represents the operational state of a network and determine the appropriate action.
|
|
| 33% | 70 | 20 | ClearPass
| 5% | Intro to ClearPass | | 25% | ClearPass for AAA | | 6% | External Authentication | | 23% | Guest | | 17% | Onboard | | 6% | Endpoint Analysis | | 8% | Posture | | 5% | Operations and Admin Users | | 5% | Clustering and Redundancy |
|
| 33% | 70 | 20 |
76% Protect and Defend
Define security terminology
Describe PKI dependencies
Mitigate threats by using CPDI to identify traffic flows and apply tags and CPPM to take actions based on tags
Explain methods and benefits of profiling
Explain how Aruba solutions apply to different security vectors
Explain Zero Trust Security in relation to Aruba solutions
Explain WIPS and WIDS, as well as describe the Aruba 9x00 Series
Describe log types and levels and use the CPPM ingress event engine to integrate with 3rd party logging solutions
Explain dynamic segmentation, including its benefits and use cases
Explain VPN deployment types and IPsec concepts such as protocols, algorithms, certificate-based authentication with IKE, and reauth intervals
Device hardening
Set up secure authentication and authorization of network infrastructure managers
Secure L2 and L3 protocols
Secure WLAN
Deploy AAA for WLANs with ClearPass Policy Manager (CPPM)"
Define and apply advanced firewall policies (appRF, PEF, WIPS, WebCC, UTM)
Set up integration between the Aruba infrastructure and CPPM, allowing CPPM to take action in response to events
Configure rogue AP detection and mitigation
Secure wired AOS-CX
Deploy AAA for wired devices with CPPM
Configure 802.1x Authentication for AP
Deploy dynamic segmentation
Deploy certificate-based authentication for users and devices
Set up integration between the Aruba infrastructure and CPPM, allowing CPPM to take action in response to events
Secure the WAN
Understand that Aruba SD-Branch automates VPN deployment for the WAN
Design and deploy remote VPN with VIA
Endpoint classification
Deploy and apply endpoint classification to the device
Define endpoint classification methodology using active and passive methods
Define, deploy, and integrate ClearPass and CPDI
23% Analyze
Threat detection
Investigate Central alerts
Interpret packet captures
Recommend action based on the analysis of the Central alerts
Evaluate endpoint posture
Troubleshooting
Deploy and analyze Network Analytic Engine (NAE) scripts for monitoring and correlation
Perform packet capture on Aruba infrastructure locally and using Central
Endpoint classification
Analyze endpoint classification data to identify risk
Analyze endpoint classification data on CPDI
1% Investigate
Forensics
Explain CPDI capabilities for showing network conversations on supported Aruba devices |
