Practice Test Geeks(ACP) Aruba Certified Professional Certification Practice Test
← All ACP Flashcard Decks

Aruba ClearPass Policy Management Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Aruba ClearPass Policy Management flashcards as text

  1. In ClearPass Policy Manager, what is the purpose of a Role Mapping Policy?

    Answer: To map user or device attributes to defined roles used in authorization decisions

    A Role Mapping Policy evaluates user and device attributes (such as AD group membership or device type) and assigns them to named ClearPass roles that enforcement policies then act upon.

  2. What is a ClearPass Enforcement Profile?

    Answer: A configuration defining which access parameters (VLAN, ACL, etc.) to return when a role is matched

    An Enforcement Profile in ClearPass defines the specific RADIUS attributes (such as VLAN assignment or downloadable ACLs) that are sent to the network device in the Access-Accept response.

  3. ClearPass OnGuard is used to:

    Answer: Perform health and posture checks on endpoints before granting full network access

    ClearPass OnGuard is an endpoint posture assessment agent that checks health parameters like antivirus status, OS patch level, and firewall state before allowing full network access.

  4. Which ClearPass feature automatically identifies and categorizes devices based on network behavior, DHCP fingerprints, and HTTP attributes?

    Answer: Device Profiler

    The ClearPass Device Profiler passively and actively collects device fingerprint information to automatically classify devices by type, operating system, and manufacturer without requiring user authentication.

  5. What does the ClearPass Policy Simulation tool allow administrators to do?

    Answer: Test how services and policies respond to hypothetical authentication requests without real clients

    The Policy Simulation tool lets administrators input request attributes (like username, MAC, or NAS IP) and see exactly which service would match and what enforcement would be applied, without requiring a live client.

  6. Which Aruba Vendor-Specific Attribute (VSA) is commonly used in a ClearPass Enforcement Profile to place a wireless user into a specific VLAN on an Aruba controller?

    Answer: Aruba-User-Vlan

    The Aruba-User-Vlan VSA is an Aruba-specific RADIUS attribute used in ClearPass Enforcement Profiles to instruct Aruba wireless controllers to assign authenticated users to a designated VLAN.

  7. What is the primary function of a ClearPass Enforcement Policy?

    Answer: To match assigned roles and posture results to enforcement profiles for final access decisions

    A ClearPass Enforcement Policy contains rules that evaluate a client's assigned role and posture status, mapping them to specific Enforcement Profiles that define the granted or denied network access.