ACMA Network Security 3

Question 1

Which protocol does Aruba use for centralized key management to support fast BSS transitions (802.11r)?

Accepted Answer

Fast BSS Transition (FT) with PMK-R0/R1 key hierarchy

Answer

802.11r uses a PMK-R0/R1 key hierarchy managed by the mobility domain to enable fast transitions between APs.

Question 2

In Aruba's role-based access control, what happens to traffic that does not match any firewall policy rule?

Accepted Answer

It is implicitly denied by the default deny rule

Answer

Aruba firewalls have an implicit deny-all at the end of each policy, dropping unmatched traffic.

Question 3

What does Aruba's 'Client Match' feature do in a security context?

Accepted Answer

Steers clients away from overloaded or poorly performing APs

Answer

Client Match steers clients to the best available AP based on RF conditions and load, improving performance and security posture.

Question 4

Which encryption protocol is used by WPA3-Enterprise to provide 192-bit security mode?

Accepted Answer

GCMP-256 with SHA-384

Answer

WPA3-Enterprise 192-bit mode uses GCMP-256 for data encryption and SHA-384 for integrity, meeting Suite-B requirements.

Question 5

An administrator wants to prevent wireless clients from communicating directly with each other on the same SSID. Which Aruba feature accomplishes this?

Accepted Answer

Station Isolation (Client Isolation)

Answer

Station (Client) Isolation blocks peer-to-peer traffic between clients on the same SSID, preventing lateral movement.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Network Security 3