What is true about Aruba controllers under normal operations in a Mobility Master (MM)-Mobility Controller (MC) architecture?

An administrator manages an Aruba wireless network. Users authenticate to the wireless network using PEAP,where their credentials are validated by the controller's local database. The company purchases Android tablets to use with an inventory tracking system. The administrator notices that many of the users of these devices use their normal username and password to authenticate, which allows the tablet to access all resources that the user can access from their wireless computers. This is a security violation.
Which Aruba Mobility Controller (MC) feature should the administrator configure to restrict tablet access to a web portal for authentication, where an appropriate post-authentication policy can be applied to these tablets?

An administrator migrates Aruba Mobility Controllers (MCs) from ArubaOS.6x to ArubaOS.8. x. In the 6.x.
configuration, the administrator configures GRE tunnels on the local controllers to a controller in the DMZ to keep guest traffic off the corporate network. The problem with the solution is that is creates suboptimal routing paths.
Which feature should the administrator implement to solve this problem?

Refer to the exhibit.

An administrator configures policies to allow RAPs to connect to the corporate office and remote users to access resources. Which function does the VPN address pool serve in this situation?

An administrator implements a per-port tunneled node configuration for an Aruba Mobility Controller (MC) that runs ArubaOS 8.x. The controller performs both MAC and 802.1X authentication.
What must the administrator specify on the controller to allow for 802.1X authentication to succeed?