ACA Network Security & Access Control 3

Question 1

Which Aruba Mobility Controller feature detects and classifies rogue APs operating on the same RF spectrum?

Accepted Answer

Air Monitor (AM) mode

Answer

APs in Air Monitor mode continuously scan all channels and report rogue devices to the controller for classification and containment.

Question 2

A ClearPass administrator wants to allow guests to self-register. Which ClearPass module provides the guest self-registration portal?

Accepted Answer

ClearPass Guest

Answer

ClearPass Guest provides customizable captive portals, self-registration workflows, and guest account management.

Question 3

Which Aruba security feature automatically moves a client to a quarantine role when ClearPass sends a RADIUS Change of Authorization (CoA)?

Accepted Answer

Dynamic Authorization

Answer

Dynamic Authorization (RFC 5176) allows ClearPass to send CoA or Disconnect-Message packets to the controller mid-session to change a client's role or terminate the session.

Question 4

In Aruba's layered security model, which layer is responsible for encrypting the wireless data frames over the air?

Accepted Answer

Layer 2 (CCMP/AES encryption)

Answer

CCMP (AES-based) operates at Layer 2 and encrypts the 802.11 data frames between the client and the AP over the air.

Question 5

What Aruba feature uses DHCP fingerprinting and OUI lookup to automatically identify the type of device connecting to the network?

Accepted Answer

ClearPass Device Insight / Profiling

Answer

ClearPass Device Profiling uses DHCP fingerprinting, HTTP user-agent, OUI, and other signals to identify device type, OS, and manufacturer.

(ACA) Aruba Certified Associate Certification Practice Test

(ACA) Aruba Certified Associate Certification Practice Test

ACA Network Security & Access Control 3