ACMA Security Protocols & Network Access Control 3

Question 1

Which protocol does Aruba ClearPass use to communicate posture and change-of-authorization (CoA) decisions back to the network device?

Accepted Answer

RADIUS with RFC 3576/5176 extensions

Answer

ClearPass uses RADIUS CoA (RFC 3576/5176) to dynamically change a user's session attributes or disconnect the session after initial authentication.

Question 2

In an Aruba Instant (IAP) deployment, where is the 802.1X authentication typically terminated when using internal RADIUS?

Accepted Answer

The Virtual Controller

Answer

In Aruba Instant, the Virtual Controller (VC) acts as the RADIUS server and terminates 802.1X authentication for all APs in the cluster when using internal RADIUS.

Question 3

What is the function of a Pre-Shared Key (PSK) SSID with MAC-based authentication bypass (MAB) in an Aruba environment?

Accepted Answer

Uses a device's MAC address as its username and password for RADIUS authentication

Answer

MAC Authentication Bypass (MAB) sends the device's MAC address as both the RADIUS username and password, allowing headless devices to authenticate without 802.1X supplicants.

Question 4

Which type of Aruba firewall rule allows traffic from a wireless client to reach the DHCP server before full 802.1X authentication completes?

Accepted Answer

Pre-authentication (logon) policy

Answer

Pre-authentication (logon) policies permit essential bootstrap traffic like DHCP, DNS, and captive portal redirects before a user completes full authentication.

Question 5

What Aruba feature allows different WPA2-PSK passphrases to be assigned per user or device group on the same SSID?

Accepted Answer

PPSK (Private PSK)

Answer

Aruba's Private PSK (PPSK) assigns a unique passphrase per user or device, enabling individual access control and audit tracking on a single PSK SSID.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Security Protocols & Network Access Control 3