ACP Security and Access Control 2

Question 1

Which Aruba feature allows administrators to dynamically assign users to different VLANs based on their role after authentication?

Accepted Answer

Dynamic VLAN Assignment

Answer

Dynamic VLAN Assignment uses RADIUS attributes to place authenticated users into the appropriate VLAN based on their role or group membership.

Question 2

In Aruba ClearPass, what is the purpose of the 'Enforcement Policy'?

Accepted Answer

To map authentication results to specific access privileges or enforcement profiles

Answer

An Enforcement Policy in ClearPass maps the outcome of authentication and authorization checks to Enforcement Profiles that define the actual access control actions.

Question 3

Which port is used by RADIUS for authentication requests by default?

Accepted Answer

UDP 1812

Answer

RADIUS authentication uses UDP port 1812 per RFC 2865, though legacy implementations may use 1645.

Question 4

What does the Aruba Mobility Controller use 'user roles' for?

Accepted Answer

Applying firewall policies, bandwidth limits, and session ACLs to authenticated wireless users

Answer

User roles on Aruba Mobility Controllers bind a set of policies—firewall rules, QoS, and session attributes—to users after they authenticate.

Question 5

Which EAP method uses a server-side certificate and a client-side certificate for mutual authentication?

Accepted Answer

EAP-TLS

Answer

EAP-TLS requires both the server and the client to present X.509 certificates, providing the strongest form of mutual authentication.

(ACP) Aruba Certified Professional Certification Practice Test

(ACP) Aruba Certified Professional Certification Practice Test

ACP Security and Access Control 2