Professional Standards & Best Practices Flashcards
7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Professional Standards & Best Practices flashcards as text
Which Aruba best practice applies when configuring Dynamic Segmentation on AOS-CX switches?
Answer: Use Aruba Policy Enforcement Firewall (PEF) tunneling to enforce consistent role-based policy for wired devices via the controller
Dynamic Segmentation tunnels wired device traffic to the Mobility Controller for centralized PEF enforcement, applying the same role-based policies used for wireless clients.
A security audit requires logging all administrative changes made to an Aruba Mobility Controller. Which Aruba feature supports this requirement?
Answer: ArubaOS Audit Trail and Syslog forwarding to a SIEM
ArubaOS provides an audit trail of configuration changes that can be forwarded via Syslog to a SIEM for compliance and security monitoring.
When designing an Aruba wireless network for a venue with 500+ concurrent users per AP zone, which channel width is recommended on 5 GHz?
Answer: 20 MHz channels to maximize the number of available non-overlapping channels
In high-density environments, 20 MHz channels on 5 GHz maximize the number of non-overlapping channels, reducing co-channel interference across a dense AP deployment.
According to Aruba best practices, what should be done before decommissioning an AP from a production network?
Answer: Remove the AP from its AP group, revoke its certificate, and delete it from the controller or Aruba Central
Properly decommissioning an AP requires removing it from its AP group, revoking its certificate if using CPsec, and deleting it from the management system to prevent orphaned configurations.
Which Aruba best practice should guide the configuration of role-based firewall policies for authenticated users?
Answer: Follow a least-privilege model, allowing only the traffic required for each role's business function
Least-privilege role policies limit authenticated user access to only the resources their role requires, minimizing the attack surface if credentials are compromised.
An Aruba network administrator is planning an ArubaOS upgrade across 50 controllers. Which change management practice is most critical?
Answer: Test the upgrade on a lab or pilot controller first, then roll out in phases
Testing upgrades in a lab or on a pilot controller before phased production rollout is critical to identifying compatibility issues without impacting all sites simultaneously.
When using Aruba Central to manage a distributed enterprise network, which practice improves operational efficiency for configuration management?
Answer: Use Central's template groups and UI groups to apply consistent configurations across device fleets
Aruba Central's template and UI groups allow administrators to push consistent configurations to large fleets of devices simultaneously, reducing human error and management overhead.