โ† All ACP Flashcard Decks

Professional Standards & Best Practices Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Professional Standards & Best Practices flashcards as text
  1. A hospital requires that medical IoT devices on the wireless network be restricted to only communicate with specific servers. Which Aruba approach best enforces this?

    Answer: Use ClearPass device profiling to auto-assign IoT devices to a dedicated role with restrictive firewall policies

    ClearPass can profile and auto-assign IoT devices to a dedicated role with role-based firewall policies that restrict communication to approved servers only.

  2. Which Aruba best practice reduces the risk of rogue APs going undetected in a campus environment?

    Answer: Enable Aruba WIDS/WIPS with rogue AP detection and containment in the wireless policy

    Aruba's WIDS/WIPS continuously monitors the RF environment to detect and optionally contain rogue APs, providing automated and continuous protection.

  3. When configuring Aruba role derivation rules in ClearPass, which attribute type provides the most reliable basis for assigning user roles?

    Answer: Active Directory group membership retrieved via LDAP

    Active Directory group membership is authoritative and centrally managed, making it the most reliable attribute for deriving roles and enforcing access policies.

  4. What is the Aruba recommended practice for handling band steering in environments with a high density of legacy 2.4 GHz-only clients?

    Answer: Enable band steering but configure it to apply only to dual-band capable clients

    Configuring band steering to target only dual-band capable clients ensures legacy 2.4 GHz-only devices connect normally without disruption.

  5. According to Aruba professional standards, when should a network engineer escalate an issue during a production wireless outage?

    Answer: When the issue exceeds the engineer's scope of knowledge or available tools and impacts SLA commitments

    Professional standards require timely escalation when an issue exceeds available expertise or tools and risks violating SLA commitments, prioritizing service restoration over individual troubleshooting ego.

  6. Which Aruba Airheads community and vendor resource should a certified professional consult first when encountering an undocumented ArubaOS behavior?

    Answer: Aruba Support Portal, official documentation, and Aruba's Ask the Expert community resources

    Aruba's official Support Portal and Ask the Expert community provide authoritative, product-specific guidance vetted by Aruba engineers and community experts.

  7. What does Aruba best practice recommend regarding the use of Control Plane Security (CPsec) in a Mobility Controller deployment?

    Answer: Enable CPsec to encrypt and authenticate all control traffic between APs and the Mobility Controller

    CPsec should be enabled in all deployments to authenticate APs to the controller and encrypt PAPI control traffic, preventing rogue AP injection and man-in-the-middle attacks.