ACP Aruba ClearPass Policy Management 1 — Questions and Answers
Question 1: What is the primary role of Aruba ClearPass Policy Manager (CPPM) in an enterprise network?
- It provides wireless RF management and channel optimization
- It serves as a Network Access Control (NAC) solution providing AAA services (Correct answer)
- It manages SD-WAN overlay tunnels between branch offices
- It functions as a core routing and switching platform
Correct answer: It serves as a Network Access Control (NAC) solution providing AAA services
ClearPass Policy Manager is Aruba's NAC platform that provides Authentication, Authorization, and Accounting (AAA) services to centrally control who and what can access the network.
Question 2: Which protocol does ClearPass primarily use to communicate with network access devices for user authentication?
- DIAMETER
- TACACS
- RADIUS (Correct answer)
- LDAP
Correct answer: RADIUS
RADIUS (Remote Authentication Dial-In User Service) is the primary protocol ClearPass uses to exchange AAA messages with network devices like wireless controllers and switches.
Question 3: In ClearPass Policy Manager, what is the purpose of a 'Service'?
- A software license module that enables specific ClearPass features
- A background process that maintains cluster synchronization
- A policy rule set that defines how incoming authentication requests are processed (Correct answer)
- A hardware component that handles RADIUS encryption operations
Correct answer: A policy rule set that defines how incoming authentication requests are processed
A ClearPass Service is a top-level policy construct that matches incoming AAA requests and defines which authentication sources, role mapping, and enforcement policies to apply.
Question 4: Which 802.1X EAP method supported by ClearPass uses mutual certificate-based authentication on both the client and server?
- EAP-PEAP
- EAP-TLS (Correct answer)
- EAP-TTLS
- EAP-FAST
Correct answer: EAP-TLS
EAP-TLS uses digital certificates on both the client device and the authentication server, providing the strongest form of 802.1X authentication supported by ClearPass.
Question 5: What is ClearPass OnBoard primarily used for?
- Configuring initial ClearPass cluster publisher settings
- Provisioning BYOD devices with certificates and network configuration profiles (Correct answer)
- Monitoring network device health and uptime status
- Managing guest user accounts and time-limited access policies
Correct answer: Provisioning BYOD devices with certificates and network configuration profiles
ClearPass OnBoard provides a self-service BYOD portal that automates certificate enrollment and delivers network configuration profiles to personal devices.
Question 6: Which authentication source type in ClearPass is used to verify user credentials and group membership against Microsoft Active Directory?
- SQL Database
- HTTP Authentication
- Static Host List
- Active Directory / LDAP (Correct answer)
Correct answer: Active Directory / LDAP
ClearPass uses the Active Directory / LDAP authentication source type to bind to Microsoft AD and query user credentials and group memberships during authentication.
Question 7: What does ClearPass Guest provide in an enterprise deployment?
- A posture assessment engine for checking device health compliance
- A customizable web portal and management interface for temporary guest network access (Correct answer)
- A built-in certificate authority for issuing device certificates
- An API gateway for third-party security integrations
Correct answer: A customizable web portal and management interface for temporary guest network access
ClearPass Guest provides a fully customizable self-registration portal and admin interface for creating time-limited guest accounts with sponsor approval workflows.
ACP Aruba ClearPass Policy Management 1
What is the primary role of Aruba ClearPass Policy Manager (CPPM) in an enterprise network?