ACP Risk Management & Quality Assurance 3 — Questions and Answers
Question 1: A company purchases cyber liability insurance to cover losses resulting from a breach of its Aruba-secured network. Which risk management strategy does this represent?
- Risk avoidance
- Risk mitigation
- Risk transfer (Correct answer)
- Risk acceptance
Correct answer: Risk transfer
Purchasing insurance shifts the financial consequences of a risk to a third party, which is risk transfer.
Question 2: During an Aruba network change management process, a change advisory board (CAB) reviews a proposed firmware upgrade. What is the PRIMARY purpose of the CAB review?
- To assign blame if the upgrade fails
- To assess the risk and impact of the change before approving it (Correct answer)
- To perform the actual firmware upgrade
- To document post-change results
Correct answer: To assess the risk and impact of the change before approving it
The CAB evaluates proposed changes for risk, impact, and feasibility before authorizing implementation.
Question 3: Which of the following BEST describes a qualitative risk assessment in an Aruba network deployment project?
- Calculating the exact financial loss per hour of downtime
- Using probability and impact ratings such as Low/Medium/High to prioritize risks (Correct answer)
- Measuring packet loss percentage across all WLANs
- Counting the number of rogue APs detected per month
Correct answer: Using probability and impact ratings such as Low/Medium/High to prioritize risks
Qualitative risk assessment uses descriptive scales like Low/Medium/High to prioritize risks without requiring precise financial calculations.
Question 4: An Aruba network team documents every identified risk, its likelihood, impact, owner, and mitigation plan in a single structured document. What is this document called?
- Change log
- Risk register (Correct answer)
- Network topology diagram
- Service level agreement
Correct answer: Risk register
A risk register is the central document that records all identified risks along with their attributes, ownership, and treatment plans.
Question 5: An organization decides NOT to deploy guest Wi-Fi because it introduces too many security risks. Which risk treatment is this?
- Risk mitigation
- Risk transfer
- Risk acceptance
- Risk avoidance (Correct answer)
Correct answer: Risk avoidance
Deciding not to implement a feature to eliminate the associated risk entirely is risk avoidance.
Question 6: In Aruba's AirWave or Central platforms, which capability directly supports continuous quality assurance of the wireless environment?
- Zero-touch provisioning of new APs
- Real-time RF health monitoring and alerting (Correct answer)
- Automatic VLAN trunk negotiation
- Layer 3 routing between subnets
Correct answer: Real-time RF health monitoring and alerting
Real-time RF health monitoring detects coverage gaps, interference, and performance degradation, supporting ongoing QA of the WLAN.
Question 7: When performing a root cause analysis (RCA) after an Aruba network outage, what is the FIRST step a team should take?
- Immediately replace all affected hardware
- Collect and preserve logs, configuration snapshots, and event timelines (Correct answer)
- Blame the most recent change made to the network
- Submit a ticket to Aruba TAC before doing anything else
Correct answer: Collect and preserve logs, configuration snapshots, and event timelines
Collecting and preserving evidence (logs, configs, timelines) before making changes is essential to conduct an accurate root cause analysis.
ACP Risk Management & Quality Assurance 3
A company purchases cyber liability insurance to cover losses resulting from a breach of its Aruba-secured network.
Which risk management strategy does this represent?