Practice Test Geeks(ACA) Aruba Certified Associate Certification Practice Test
← All ACA Flashcard Decks

Network Security & Access Control Flashcards

7 cards from real ACA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Network Security & Access Control flashcards as text

  1. Which Aruba feature uses machine learning to detect anomalous client behavior on the wireless network?

    Answer: ArubaAI / Aruba Client Insights

    Aruba Client Insights (part of ArubaAI) uses ML to baseline client behavior and flag deviations indicative of threats.

  2. In ClearPass Policy Manager, what object defines the conditions under which a policy rule is applied?

    Answer: Conditions

    Conditions in ClearPass are logical expressions (attributes compared to values) that determine whether a policy rule matches a request.

  3. An Aruba AP is configured with a WLAN that uses WPA3-Enterprise. Which key management protocol does WPA3-Enterprise mandate?

    Answer: CCMP-128 with 192-bit mode optional

    WPA3-Enterprise requires CCMP-128 at minimum and optionally supports a 192-bit security mode (CNSA suite) for high-security environments.

  4. Which Aruba solution provides posture assessment to check endpoint compliance before granting network access?

    Answer: ClearPass OnGuard

    ClearPass OnGuard is the posture assessment agent that checks endpoint health (antivirus, patch level, firewall status) before allowing access.

  5. What is the purpose of a 'deny' ACL entry placed at the end of an Aruba user role firewall policy?

    Answer: It acts as an implicit catch-all to block any traffic not explicitly permitted

    An explicit deny-all at the end ensures any traffic not matched by earlier permit rules is dropped, enforcing a default-deny posture.

  6. Which 802.1X EAP method tunnels inner authentication inside a TLS tunnel established with server-side certificates only?

    Answer: PEAP

    PEAP creates an outer TLS tunnel using only a server certificate, then carries an inner method (e.g., MSCHAPv2) inside that tunnel.

  7. When Aruba's Role-Based Access Control (RBAC) is used, what determines which firewall policy is applied to a wireless client?

    Answer: The user role assigned after authentication

    The user role — assigned by ClearPass or the controller based on authentication outcome — determines which firewall policy governs the client's traffic.