ACP Fundamentals & Core Principles 3 — Questions and Answers
Question 1: Which Aruba switching architecture allows multiple switches to be managed as a single logical unit using VSX?
- Stacking via proprietary backplane
- Virtual Switching Extension creating an active-active pair (Correct answer)
- Spanning Tree-based ring topology
- OSPF equal-cost multipath
Correct answer: Virtual Switching Extension creating an active-active pair
VSX (Virtual Switching Extension) pairs two switches to operate as an active-active redundant system while maintaining independent control planes.
Question 2: In Aruba's PPSK (Private Pre-Shared Key) implementation, what is the key differentiator from standard WPA2-Personal?
- Each user or device gets a unique passphrase mapped to a specific role (Correct answer)
- PPSK uses 256-bit AES instead of 128-bit
- PPSK requires a RADIUS server for every association
- PPSK disables the 4-way handshake
Correct answer: Each user or device gets a unique passphrase mapped to a specific role
PPSK assigns individual passphrases per user or device, allowing unique policy enforcement without deploying 802.1X infrastructure.
Question 3: What does 802.11r (Fast BSS Transition) improve in a wireless environment?
- Maximum data throughput on 5 GHz band
- Roaming speed between APs by pre-authenticating before disassociation (Correct answer)
- MIMO spatial stream negotiation
- WPA3 key derivation time
Correct answer: Roaming speed between APs by pre-authenticating before disassociation
802.11r reduces roaming latency by allowing a client to pre-establish keys with the target AP before leaving the current AP.
Question 4: Which component of Aruba ClearPass is responsible for profiling and identifying device types on the network?
- ClearPass Guest
- ClearPass OnGuard
- ClearPass Access Tracker
- ClearPass Device Insight / Profiling Engine (Correct answer)
Correct answer: ClearPass Device Insight / Profiling Engine
ClearPass's profiling engine fingerprints devices using DHCP, HTTP, and SNMP data to categorize endpoint types automatically.
Question 5: In an Aruba Instant deployment, which AP automatically assumes the role of Virtual Controller (VC)?
- The AP with the highest IP address
- The AP with the highest MAC address that wins the election (Correct answer)
- The first AP powered on in the cluster
- The AP designated manually via the console only
Correct answer: The AP with the highest MAC address that wins the election
Aruba Instant APs elect a Virtual Controller using a MAC-address-based election process; the AP with the highest MAC wins by default.
Question 6: What is the function of Aruba's AppRF technology?
- Automatically selects the best RF band per client
- Provides Layer 7 application visibility and policy enforcement (Correct answer)
- Compresses application data before transmission
- Manages RF spectrum licensing compliance
Correct answer: Provides Layer 7 application visibility and policy enforcement
AppRF uses deep packet inspection to identify applications and enforce QoS or access policies at Layer 7.
Question 7: Which protocol does Aruba use for controller-to-AP communication in a tunneled WLAN deployment?
- LWAPP (Lightweight Access Point Protocol)
- CAPWAP (Control and Provisioning of Wireless Access Points) (Correct answer)
- GRE over IPsec
- VXLAN
Correct answer: CAPWAP (Control and Provisioning of Wireless Access Points)
Aruba uses CAPWAP to tunnel both control and data traffic between the Mobility Controller and managed APs.
Which Aruba switching architecture allows multiple switches to be managed as a single logical unit using VSX?