Practice Test Geeks(ACP) Aruba Certified Professional Certification Practice Test
← All ACP Flashcard Decks

Fundamentals & Core Principles Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Fundamentals & Core Principles flashcards as text

  1. What is the primary difference between Aruba's 'tunnel mode' and 'bridge mode' WLAN deployments?

    Answer: Tunnel mode forwards all client traffic to the controller; bridge mode switches traffic locally at the AP

    In tunnel mode, the AP encapsulates client traffic and sends it to the Mobility Controller for policy enforcement; in bridge mode, traffic is locally switched at the AP.

  2. Which IEEE standard defines the Power over Ethernet (PoE) specification that delivers up to 30W per port, commonly used for high-power Aruba APs?

    Answer: IEEE 802.3at (PoE+)

    IEEE 802.3at (PoE+) delivers up to 30W, making it suitable for dual-radio APs and devices with moderate power requirements.

  3. In Aruba ClearPass, what is an 'Enforcement Profile' used for?

    Answer: Defines what attributes and policies are sent to the NAS after authentication

    An Enforcement Profile specifies the RADIUS attributes, VLAN assignments, or ACLs returned to the Network Access Server (NAS) after a policy decision.

  4. What is the purpose of Aruba's 'User-Based Tunneling' (UBT) on an AOS-CX switch?

    Answer: Tunnels authenticated user traffic from a wired switch port to a Mobility Controller for centralized policy enforcement

    UBT allows AOS-CX switches to tunnel wired user traffic to an Aruba Mobility Controller, extending Dynamic Segmentation to the wired edge.

  5. Which Aruba AI Insights capability in Aruba Central helps identify Wi-Fi performance issues before users report them?

    Answer: AI-powered proactive anomaly detection using baseline comparisons

    Aruba Central uses AI/ML to establish normal baselines and proactively flag anomalies in client experience before they escalate.

  6. What is WPA3-SAE (Simultaneous Authentication of Equals) designed to protect against compared to WPA2-PSK?

    Answer: Offline dictionary attacks against captured 4-way handshakes

    WPA3-SAE replaces the PSK 4-way handshake with a Dragonfly key exchange that prevents offline brute-force attacks even if the handshake is captured.

  7. In Aruba's hierarchical WLAN architecture, which entity holds the global licensing pool and pushes configuration down to Mobility Controllers?

    Answer: Mobility Master

    Mobility Master sits at the top of the on-premises Aruba WLAN hierarchy, managing licenses and distributing configuration to Mobility Controllers.