Practice Test Geeks(ACP) Aruba Certified Professional Certification Practice Test
← All ACP Flashcard Decks

Security and Access Control Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security and Access Control flashcards as text

  1. Which Aruba ClearPass service type is used to handle MAC Authentication Bypass (MAB) for devices that cannot perform 802.1X?

    Answer: MAC Authentication

    ClearPass's MAC Authentication service type processes MAB requests where the device's MAC address is used as both the username and password.

  2. An administrator wants to prevent rogue DHCP servers on an Aruba-managed wired network. Which feature should be enabled?

    Answer: DHCP Snooping

    DHCP Snooping builds a binding table of valid DHCP leases and drops DHCP offers or acks from untrusted ports, blocking rogue DHCP servers.

  3. What is the primary function of Aruba's 'Air Monitor' (AM) mode?

    Answer: To scan the RF environment for rogue APs and wireless threats without serving clients

    An AP in Air Monitor mode dedicates its radios entirely to WIDS/WIPS scanning, detecting rogue APs, ad-hoc networks, and wireless attacks.

  4. Which Aruba security feature automatically contains a rogue AP by sending deauthentication frames to its clients?

    Answer: Wireless Intrusion Prevention (WIPS) Containment

    Aruba WIPS can actively contain rogue APs by sending 802.11 deauthentication frames, disconnecting clients that associate with the rogue.

  5. In ClearPass Policy Manager, what is a 'Posture Policy' used for?

    Answer: Assessing endpoint health (antivirus, patch level, OS) and returning a posture token

    A Posture Policy in ClearPass evaluates the security health of an endpoint and produces a posture token (Healthy, Checkup, Quarantine, Infected) used in enforcement decisions.

  6. Which Aruba Mobility Controller feature restricts a wireless client from communicating directly with other clients on the same SSID?

    Answer: Client Isolation

    Client Isolation (also called station isolation) prevents wireless clients associated to the same SSID or BSSID from sending traffic directly to each other.

  7. What does 'Protected Management Frames' (PMF / 802.11w) protect against in a wireless network?

    Answer: Spoofed deauthentication and disassociation frames used in DoS attacks

    802.11w (PMF) cryptographically protects unicast and broadcast management frames, preventing attackers from forging deauth/disassoc frames to disconnect clients.