Practice Test Geeks(ACP) Aruba Certified Professional Certification Practice Test
← All ACP Flashcard Decks

Security and Access Control Flashcards

7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security and Access Control flashcards as text

  1. A company requires that only corporate-owned devices with a valid certificate can access the internal WLAN. Which solution best enforces this?

    Answer: EAP-TLS with device certificates issued by the corporate CA

    EAP-TLS with device certificates ensures only devices provisioned with a certificate from the corporate CA can authenticate, preventing unauthorized BYOD access.

  2. In Aruba ClearPass, which component is responsible for profiling endpoints to identify device type, OS, and manufacturer?

    Answer: ClearPass Endpoint Profiler (Device Profiler)

    ClearPass Device Profiler (Endpoint Profiler) uses DHCP fingerprinting, HTTP User-Agent, MAC OUI, and SNMP to classify devices on the network.

  3. Which Aruba feature provides a pre-connect posture check by scanning an endpoint before granting full network access?

    Answer: ClearPass OnGuard

    ClearPass OnGuard is the persistent agent that performs pre-connect and post-connect posture assessment, checking antivirus, firewall, patch status, and more.

  4. What is the purpose of TACACS+ in an Aruba network infrastructure?

    Answer: Authenticating and authorizing administrator access to network devices and providing command-level accounting

    TACACS+ separates authentication, authorization, and accounting, making it ideal for controlling administrator access and logging every command entered on network devices.

  5. Which WPA3 feature protects previously captured traffic even if the passphrase is later compromised?

    Answer: Forward Secrecy via unique per-session PMKs

    WPA3-Personal uses SAE, which derives a unique Pairwise Master Key per session, providing Perfect Forward Secrecy so past sessions remain secure if the password is disclosed later.

  6. An Aruba administrator sees clients being redirected to a captive portal even though they have already authenticated via 802.1X. What is the most likely cause?

    Answer: The RADIUS server returned a vendor-specific attribute redirecting to the captive portal URL

    A RADIUS server can return a Cisco-AVPair or Aruba VSA that triggers a captive portal redirect even after 802.1X succeeds, commonly used for health remediation or terms acceptance.

  7. Which Aruba firewall policy type is applied to traffic flowing between two user roles within the same controller?

    Answer: Inter-role Firewall Policy

    Inter-role firewall policies on Aruba Mobility Controllers control traffic between users in different roles, enabling micro-segmentation within the wireless network.