ACMA Network Security 4

Question 1

In Aruba ClearPass, what is the function of an 'Enforcement Profile'?

Accepted Answer

It specifies the actions applied to a session after policy evaluation, such as VLAN assignment

Answer

Enforcement Profiles define what actions ClearPass applies to an authenticated session, such as assigning a VLAN or applying a role.

Question 2

Which Aruba mechanism prevents a compromised controller from being used to intercept AP communication by validating controller identity?

Accepted Answer

Certificate-based AP provisioning using factory-installed certificates

Answer

Aruba APs use factory-installed X.509 certificates to mutually authenticate with controllers, preventing rogue controller attacks.

Question 3

What is the difference between 'deny' and 'blacklist' actions in an Aruba firewall policy?

Accepted Answer

Deny blocks matching traffic; blacklist blocks ALL traffic from that client for a configured duration

Answer

Deny blocks only the specific matching traffic, while blacklist blocks all traffic from the offending client for a set time period.

Question 4

Which Aruba feature inspects Layer 7 application traffic to enforce policies based on application type?

Accepted Answer

AppRF

Answer

AppRF uses deep packet inspection at Layer 7 to identify and enforce policies based on specific applications.

Question 5

When configuring a RADIUS server in Aruba Mobility Controller, what is the purpose of the 'NAS IP' setting?

Accepted Answer

It defines the IP the controller uses as the source of RADIUS packets

Answer

The NAS IP defines the source IP address that the controller uses when sending RADIUS authentication and accounting requests.

(ACMA) Aruba Certified Mobility Associate Practice Test