ACMA Authentication Methods 2

Question 1

Which EAP method uses a client-side certificate for mutual authentication without requiring a server-side password?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires both the client and server to present X.509 certificates, providing strong mutual authentication without passwords.

Question 2

In Aruba ClearPass, what is the purpose of the 'Authentication Source' configuration?

Accepted Answer

Specifies where user credentials are validated, such as AD or LDAP

Answer

An Authentication Source in ClearPass defines the backend identity store (e.g., Active Directory, LDAP, or a local database) used to verify user credentials.

Question 3

What is the role of the Authenticator in the 802.1X framework?

Accepted Answer

Acts as a middleman forwarding EAP messages between supplicant and authentication server

Answer

The Authenticator (typically a wireless AP or switch) relays EAP messages between the supplicant (client) and the authentication server without inspecting credentials.

Question 4

Which authentication method is considered the weakest for WPA2-Enterprise deployments because it only validates the server, not the client?

Accepted Answer

EAP-MD5

Answer

EAP-MD5 provides only one-way authentication (server to client is not validated) and sends a challenge-response that is vulnerable to offline dictionary attacks.

Question 5

When configuring MAC Authentication Bypass (MAB) on an Aruba AP, what credential does the device send to the RADIUS server?

Accepted Answer

The device's MAC address as both username and password

Answer

In MAB, the AP sends the connecting device's MAC address as the RADIUS username and password, allowing the server to authorize known devices.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Authentication Methods 2