ACP Security and Access Control 3

Question 1

Which Aruba ClearPass service type is used to handle MAC Authentication Bypass (MAB) for devices that cannot perform 802.1X?

Accepted Answer

MAC Authentication

Answer

ClearPass's MAC Authentication service type processes MAB requests where the device's MAC address is used as both the username and password.

Question 2

An administrator wants to prevent rogue DHCP servers on an Aruba-managed wired network. Which feature should be enabled?

Accepted Answer

DHCP Snooping

Answer

DHCP Snooping builds a binding table of valid DHCP leases and drops DHCP offers or acks from untrusted ports, blocking rogue DHCP servers.

Question 3

What is the primary function of Aruba's 'Air Monitor' (AM) mode?

Accepted Answer

To scan the RF environment for rogue APs and wireless threats without serving clients

Answer

An AP in Air Monitor mode dedicates its radios entirely to WIDS/WIPS scanning, detecting rogue APs, ad-hoc networks, and wireless attacks.

Question 4

Which Aruba security feature automatically contains a rogue AP by sending deauthentication frames to its clients?

Accepted Answer

Wireless Intrusion Prevention (WIPS) Containment

Answer

Aruba WIPS can actively contain rogue APs by sending 802.11 deauthentication frames, disconnecting clients that associate with the rogue.

Question 5

In ClearPass Policy Manager, what is a 'Posture Policy' used for?

Accepted Answer

Assessing endpoint health (antivirus, patch level, OS) and returning a posture token

Answer

A Posture Policy in ClearPass evaluates the security health of an endpoint and produces a posture token (Healthy, Checkup, Quarantine, Infected) used in enforcement decisions.

(ACP) Aruba Certified Professional Certification Practice Test

(ACP) Aruba Certified Professional Certification Practice Test

ACP Security and Access Control 3