ACP Security and Access Control 5

Question 1

In an Aruba 802.1X deployment, what happens when a switch port's authentication fails and 'auth-fail VLAN' is configured?

Accepted Answer

The client is placed into a restricted VLAN with limited access instead of being blocked entirely

Answer

The auth-fail VLAN (also called restricted VLAN) allows authentication-failed devices limited connectivity, useful for remediation or guest access scenarios.

Question 2

Which ClearPass component allows unauthenticated users to self-register and receive temporary network credentials?

Accepted Answer

ClearPass Guest

Answer

ClearPass Guest provides a customizable web portal for visitor self-registration, sponsor approval workflows, and temporary credential issuance.

Question 3

What is OWE (Opportunistic Wireless Encryption) designed to protect against?

Accepted Answer

Passive eavesdropping on open (unencrypted) Wi-Fi networks

Answer

OWE (defined in RFC 8110) adds encryption to open Wi-Fi networks without requiring a passphrase, protecting against passive packet capture on public hotspots.

Question 4

An administrator wants to ensure that only Aruba APs with valid certificates can terminate tunnels on the Mobility Controller. Which feature accomplishes this?

Accepted Answer

CPsec (Control Plane Security)

Answer

CPsec uses certificates to authenticate APs to the Mobility Controller, encrypting the control plane tunnel and preventing rogue APs from joining the managed infrastructure.

Question 5

What does RADIUS Change of Authorization (CoA) allow a ClearPass server to do after a session is already established?

Accepted Answer

Dynamically modify or terminate an active user session without requiring reauthentication

Answer

RADIUS CoA (RFC 5176) lets ClearPass send a CoA-Request to the NAS to change session attributes—like re-assigning a VLAN or disconnecting a user—based on posture changes or policy events.

(ACP) Aruba Certified Professional Certification Practice Test

(ACP) Aruba Certified Professional Certification Practice Test

ACP Security and Access Control 5