ACP Fundamentals & Core Principles 2 — Questions and Answers
Question 1: Which Aruba technology provides role-based access control by dynamically assigning policies to users regardless of their network access method?
- Dynamic Segmentation (Correct answer)
- Tunnel Node
- AirMatch
- ClientMatch
Correct answer: Dynamic Segmentation
Dynamic Segmentation enforces consistent, role-based policies on users whether they connect via wired or wireless infrastructure.
Question 2: In Aruba's Zero Trust Security model, what is the default access stance for any device attempting to connect to the network?
- Full trust with monitoring
- Deny all until identity is verified (Correct answer)
- Limited trust based on device type
- Trust based on IP subnet
Correct answer: Deny all until identity is verified
Zero Trust assumes no implicit trust; every device must be verified before access is granted.
Question 3: What does the Aruba Central platform primarily provide to network administrators?
- On-premises CLI management only
- Cloud-based network management and analytics (Correct answer)
- Hardware firmware compilation
- Physical port configuration via console
Correct answer: Cloud-based network management and analytics
Aruba Central is a cloud-native platform that provides unified management, monitoring, and AI-driven insights for Aruba infrastructure.
Question 4: Which authentication framework does Aruba ClearPass primarily use to authenticate wired and wireless users?
- TACACS+ only
- RADIUS and 802.1X (Correct answer)
- Kerberos only
- LDAP direct bind only
Correct answer: RADIUS and 802.1X
ClearPass Policy Manager uses RADIUS and 802.1X as the core framework for authenticating and authorizing network users and devices.
Question 5: In Aruba OS-CX, what is the purpose of a VRF (Virtual Routing and Forwarding) instance?
- To create separate Layer 2 broadcast domains
- To provide isolated Layer 3 routing tables on a single switch (Correct answer)
- To bond multiple physical links together
- To encrypt traffic between switches
Correct answer: To provide isolated Layer 3 routing tables on a single switch
VRF creates multiple independent routing tables on a single device, enabling network segmentation at Layer 3.
Question 6: Which Aruba feature uses AI/ML to automatically optimize 5 GHz channel and power assignments across an RF environment?
- ClientMatch
- AirMatch (Correct answer)
- ARM (Adaptive Radio Management)
- AppRF
Correct answer: AirMatch
AirMatch is Aruba's AI-driven RF optimization engine that calculates and applies optimal channel and power settings network-wide.
Question 7: What is the primary role of the Aruba Mobility Master in a hierarchical Aruba WLAN deployment?
- Terminate client Wi-Fi associations directly
- Centrally manage and push configuration to Mobility Controllers (Correct answer)
- Provide DHCP services to wireless clients
- Act as a Layer 2 bridge for APs
Correct answer: Centrally manage and push configuration to Mobility Controllers
Mobility Master sits at the top of the Aruba hierarchy and manages Mobility Controllers, handling licensing and global configuration.
ACP Fundamentals & Core Principles 2
Which Aruba technology provides role-based access control by dynamically assigning policies to users regardless of their network access method?