ACMA Security Protocols & Network Access Control 4

Question 1

What is the purpose of the Aruba 'captive portal' authentication method in a guest network scenario?

Accepted Answer

Redirects unauthenticated HTTP/HTTPS clients to a login or acceptance page

Answer

Captive portal intercepts web traffic from unauthenticated clients and redirects them to a login or terms-of-service page before granting internet access.

Question 2

When configuring an Aruba SSID for WPA3-Personal, which key exchange protocol replaces the traditional PSK 4-way handshake?

Accepted Answer

Simultaneous Authentication of Equals (SAE)

Answer

WPA3-Personal uses SAE (Dragonfly handshake) instead of the traditional PSK 4-way handshake, providing resistance to offline dictionary attacks.

Question 3

What is the default behavior of Aruba's 'deny all' implicit rule at the end of every user role's firewall policy?

Accepted Answer

Silently drops all traffic not explicitly permitted by earlier rules

Answer

Aruba's implicit deny rule at the end of each role silently drops any traffic that does not match a preceding permit rule, following standard firewall best practice.

Question 4

In Aruba ClearPass, what is an 'Endpoint' context used for in an authorization policy?

Accepted Answer

To query device attributes (OS, posture, MDM status) stored in the Endpoints repository

Answer

The Endpoint context in ClearPass authorization policies allows rules to reference device attributes such as OS type, MDM enrollment status, or posture check results.

Question 5

Which Aruba feature prevents a wireless client from communicating directly with other clients on the same SSID at Layer 2?

Accepted Answer

Client isolation (also called wireless client isolation or PSPF)

Answer

Client isolation (Publicly Secure Packet Forwarding / PSPF) blocks direct client-to-client Layer 2 forwarding on the same SSID, commonly used in guest networks.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Security Protocols & Network Access Control 4