ACP Security and Access Control 4

Question 1

A company requires that only corporate-owned devices with a valid certificate can access the internal WLAN. Which solution best enforces this?

Accepted Answer

EAP-TLS with device certificates issued by the corporate CA

Answer

EAP-TLS with device certificates ensures only devices provisioned with a certificate from the corporate CA can authenticate, preventing unauthorized BYOD access.

Question 2

In Aruba ClearPass, which component is responsible for profiling endpoints to identify device type, OS, and manufacturer?

Accepted Answer

ClearPass Endpoint Profiler (Device Profiler)

Answer

ClearPass Device Profiler (Endpoint Profiler) uses DHCP fingerprinting, HTTP User-Agent, MAC OUI, and SNMP to classify devices on the network.

Question 3

Which Aruba feature provides a pre-connect posture check by scanning an endpoint before granting full network access?

Accepted Answer

ClearPass OnGuard

Answer

ClearPass OnGuard is the persistent agent that performs pre-connect and post-connect posture assessment, checking antivirus, firewall, patch status, and more.

Question 4

What is the purpose of TACACS+ in an Aruba network infrastructure?

Accepted Answer

Authenticating and authorizing administrator access to network devices and providing command-level accounting

Answer

TACACS+ separates authentication, authorization, and accounting, making it ideal for controlling administrator access and logging every command entered on network devices.

Question 5

Which WPA3 feature protects previously captured traffic even if the passphrase is later compromised?

Accepted Answer

Forward Secrecy via unique per-session PMKs

Answer

WPA3-Personal uses SAE, which derives a unique Pairwise Master Key per session, providing Perfect Forward Secrecy so past sessions remain secure if the password is disclosed later.

(ACP) Aruba Certified Professional Certification Practice Test

(ACP) Aruba Certified Professional Certification Practice Test

ACP Security and Access Control 4