ACA Network Security & Access Control 2

Question 1

Which Aruba feature uses machine learning to detect anomalous client behavior on the wireless network?

Accepted Answer

ArubaAI / Aruba Client Insights

Answer

Aruba Client Insights (part of ArubaAI) uses ML to baseline client behavior and flag deviations indicative of threats.

Question 2

In ClearPass Policy Manager, what object defines the conditions under which a policy rule is applied?

Accepted Answer

Conditions

Answer

Conditions in ClearPass are logical expressions (attributes compared to values) that determine whether a policy rule matches a request.

Question 3

An Aruba AP is configured with a WLAN that uses WPA3-Enterprise. Which key management protocol does WPA3-Enterprise mandate?

Accepted Answer

CCMP-128 with 192-bit mode optional

Answer

WPA3-Enterprise requires CCMP-128 at minimum and optionally supports a 192-bit security mode (CNSA suite) for high-security environments.

Question 4

Which Aruba solution provides posture assessment to check endpoint compliance before granting network access?

Accepted Answer

ClearPass OnGuard

Answer

ClearPass OnGuard is the posture assessment agent that checks endpoint health (antivirus, patch level, firewall status) before allowing access.

Question 5

What is the purpose of a 'deny' ACL entry placed at the end of an Aruba user role firewall policy?

Accepted Answer

It acts as an implicit catch-all to block any traffic not explicitly permitted

Answer

An explicit deny-all at the end ensures any traffic not matched by earlier permit rules is dropped, enforcing a default-deny posture.

(ACA) Aruba Certified Associate Certification Practice Test