ACP Risk Management & Quality Assurance 2 — Questions and Answers
Question 1: An Aruba network administrator discovers that a critical WLAN controller has no redundant power supply. Which risk treatment strategy is being applied when the team decides to purchase a UPS and a second PSU?
- Risk acceptance
- Risk avoidance
- Risk mitigation (Correct answer)
- Risk transfer
Correct answer: Risk mitigation
Purchasing a UPS and redundant PSU reduces the likelihood and impact of a power failure, which is risk mitigation.
Question 2: During a quality audit of an Aruba ClearPass deployment, an auditor finds that authentication policies have never been reviewed since initial configuration. What is the BEST corrective action?
- Rebuild ClearPass from scratch
- Establish a periodic policy review schedule and document findings (Correct answer)
- Disable all authentication policies temporarily
- Migrate to a different NAC vendor
Correct answer: Establish a periodic policy review schedule and document findings
Establishing a periodic review schedule ensures ongoing compliance and reflects a mature quality assurance process.
Question 3: Which metric is MOST useful for measuring the quality of an Aruba wireless network's performance against agreed service levels?
- Number of access points deployed
- Mean time between failures (MTBF) (Correct answer)
- Total RF channels available
- Number of SSIDs configured
Correct answer: Mean time between failures (MTBF)
MTBF measures reliability over time and is a key indicator used in SLA compliance and quality benchmarking.
Question 4: A risk register for an Aruba campus network lists a threat of unauthorized AP rogue devices. The team opts to use Aruba WIDS/WIPS to automatically contain rogue APs. This BEST represents which risk response?
- Risk avoidance
- Risk transfer
- Risk mitigation (Correct answer)
- Risk acceptance
Correct answer: Risk mitigation
Deploying WIDS/WIPS to detect and contain rogue APs reduces the impact of the threat, classifying it as risk mitigation.
Question 5: In the context of Aruba network quality assurance, what does a post-deployment RF validation survey primarily verify?
- That all VLANs are correctly routed
- That AP coverage, signal strength, and channel overlap meet design specifications (Correct answer)
- That firewall rules are correctly applied
- That ClearPass licenses are valid
Correct answer: That AP coverage, signal strength, and channel overlap meet design specifications
A post-deployment RF survey confirms that wireless coverage and channel design match the original network design requirements.
Question 6: An organization's risk assessment rates a vulnerability in the Aruba Mobility Controller firmware as High likelihood and High impact. According to standard risk matrix methodology, what priority should remediation receive?
- Low — defer to next maintenance window
- Medium — schedule within 90 days
- Critical — remediate immediately (Correct answer)
- Informational — document only
Correct answer: Critical — remediate immediately
High likelihood combined with High impact places the risk in the Critical zone of a standard risk matrix, requiring immediate remediation.
Question 7: Which Aruba feature helps maintain quality assurance by automatically detecting and reporting deviations in client health scores across the wireless network?
- Aruba Central AI Insights (Correct answer)
- Aruba Policy Enforcement Firewall (PEF)
- Aruba Dynamic Segmentation
- Aruba Activate
Correct answer: Aruba Central AI Insights
Aruba Central AI Insights uses machine learning to detect anomalies and deviations in client health, supporting continuous quality monitoring.
ACP Risk Management & Quality Assurance 2
An Aruba network administrator discovers that a critical WLAN controller has no redundant power supply.
Which risk treatment strategy is being applied when the team decides to purchase a UPS and a second PSU?