ACMA Security Protocols & Network Access Control 5

Question 1

What ClearPass module performs endpoint health checks (antivirus status, OS patch level, disk encryption) before or after network admission?

Accepted Answer

ClearPass OnGuard

Answer

ClearPass OnGuard is the posture assessment agent that checks endpoint health attributes like antivirus definitions, patch level, and firewall status.

Question 2

In Aruba's tunneled node architecture, client traffic from a wired port is tunneled to the Mobility Controller — what encapsulation protocol is used?

Accepted Answer

GRE (Generic Routing Encapsulation)

Answer

Aruba uses GRE tunnels to carry client traffic from APs and tunneled wired ports back to the Mobility Controller for centralized policy enforcement.

Question 3

Which authentication server protocol provides command-level authorization and detailed accounting for administrator CLI access to Aruba network devices?

Accepted Answer

TACACS+

Answer

TACACS+ separates authentication, authorization, and accounting into independent functions and provides granular command-by-command authorization, making it preferred for device administration.

Question 4

What happens to a wireless client's session in Aruba when ClearPass sends a RADIUS CoA Disconnect-Message (also called Packet of Disconnect)?

Accepted Answer

The client is immediately disconnected and must re-authenticate

Answer

A RADIUS Disconnect-Message (PoD) forcibly terminates the client's session on the NAS, requiring the client to re-authenticate from scratch.

Question 5

In the context of Aruba firewall policies, what does the 'alias' feature allow administrators to do?

Accepted Answer

Define named groups of IP addresses, subnets, or services reusable across multiple ACL rules

Answer

Aruba firewall aliases are named objects (network aliases or service aliases) that can be referenced in multiple rules, simplifying policy management and reducing errors.

(ACMA) Aruba Certified Mobility Associate Practice Test

(ACMA) Aruba Certified Mobility Associate Practice Test

ACMA Security Protocols & Network Access Control 5