ACP Professional Standards & Best Practices 4

Question 1

Which Aruba best practice applies when configuring Dynamic Segmentation on AOS-CX switches?

Accepted Answer

Use Aruba Policy Enforcement Firewall (PEF) tunneling to enforce consistent role-based policy for wired devices via the controller

Answer

Dynamic Segmentation tunnels wired device traffic to the Mobility Controller for centralized PEF enforcement, applying the same role-based policies used for wireless clients.

Question 2

A security audit requires logging all administrative changes made to an Aruba Mobility Controller. Which Aruba feature supports this requirement?

Accepted Answer

ArubaOS Audit Trail and Syslog forwarding to a SIEM

Answer

ArubaOS provides an audit trail of configuration changes that can be forwarded via Syslog to a SIEM for compliance and security monitoring.

Question 3

When designing an Aruba wireless network for a venue with 500+ concurrent users per AP zone, which channel width is recommended on 5 GHz?

Accepted Answer

20 MHz channels to maximize the number of available non-overlapping channels

Answer

In high-density environments, 20 MHz channels on 5 GHz maximize the number of non-overlapping channels, reducing co-channel interference across a dense AP deployment.

Question 4

According to Aruba best practices, what should be done before decommissioning an AP from a production network?

Accepted Answer

Remove the AP from its AP group, revoke its certificate, and delete it from the controller or Aruba Central

Answer

Properly decommissioning an AP requires removing it from its AP group, revoking its certificate if using CPsec, and deleting it from the management system to prevent orphaned configurations.

Question 5

Which Aruba best practice should guide the configuration of role-based firewall policies for authenticated users?

Accepted Answer

Follow a least-privilege model, allowing only the traffic required for each role's business function

Answer

Least-privilege role policies limit authenticated user access to only the resources their role requires, minimizing the attack surface if credentials are compromised.

(ACP) Aruba Certified Professional Certification Practice Test

(ACP) Aruba Certified Professional Certification Practice Test

ACP Professional Standards & Best Practices 4