ACMA Network Security 5

Question 1

What Aruba technology allows an AP to serve both as an access point and monitor the RF environment for threats simultaneously?

Accepted Answer

Air Monitor (AM) mode with hybrid AP

Answer

Hybrid AP mode allows an AP to serve clients on one radio while the other radio operates as an Air Monitor for threat detection.

Question 2

Which Aruba Mobility Controller feature prevents IP spoofing by validating that a client's source IP matches its DHCP-assigned address?

Accepted Answer

IP Spoofing Protection (IP anti-spoof)

Answer

IP Spoofing Protection checks that a client's source IP matches the address assigned by DHCP, dropping packets with mismatched source IPs.

Question 3

When Aruba ClearPass OnGuard performs a posture check, which of the following would cause a client to be assigned to a 'quarantine' role?

Accepted Answer

Client's antivirus definitions are out of date

Answer

Outdated antivirus definitions fail posture requirements, causing ClearPass to assign the client to a restricted quarantine role.

Question 4

In Aruba role-based access, what is the 'logon' role primarily used for?

Accepted Answer

Providing limited access before authentication completes, typically for captive portal redirect

Answer

The logon role grants minimal access before a user authenticates, allowing only the traffic needed to complete the authentication process.

Question 5

Which Aruba feature detects and alerts on ad-hoc wireless networks formed between client devices?

Accepted Answer

Wireless Intrusion Detection (WID)

Answer

Wireless Intrusion Detection identifies ad-hoc networks, which bypass infrastructure controls and pose a security risk.

(ACMA) Aruba Certified Mobility Associate Practice Test