ACMA Security Protocols & Network Access Control 2

Question 1

Which 802.1X authentication framework component is responsible for making the final access decision based on user credentials?

Accepted Answer

Authentication Server

Answer

The Authentication Server (typically a RADIUS server) validates credentials and makes the final access decision in the 802.1X framework.

Question 2

In Aruba's ClearPass Policy Manager, what is the primary purpose of an Enforcement Profile?

Accepted Answer

Specify the network access attributes applied after authentication

Answer

An Enforcement Profile in ClearPass defines the set of attributes (VLAN, role, ACL) that are applied to a session after successful authentication and authorization.

Question 3

What EAP method provides both server-side and client-side certificate authentication, making it one of the most secure options?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires certificates on both the server and the client, providing mutual authentication and strong security.

Question 4

In Aruba WPA3-Enterprise, what is the minimum key length required for the CNSA suite mode?

Accepted Answer

192-bit AES

Answer

WPA3-Enterprise CNSA (Commercial National Security Algorithm) suite mode requires a minimum of 192-bit AES encryption.

Question 5

When a wireless client is placed in a VLAN after 802.1X authentication, which component on an Aruba controller sends the VLAN assignment back to the AP?

Accepted Answer

Mobility Controller

Answer

The Aruba Mobility Controller receives the RADIUS Access-Accept (with VLAN attributes) and then communicates the VLAN assignment to the AP over the GRE tunnel.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Security Protocols & Network Access Control 2