Professional Standards & Best Practices Flashcards
7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Professional Standards & Best Practices flashcards as text
When implementing Aruba's Zero Trust Security framework, which principle is applied to every access request regardless of network location?
Answer: Verify identity and posture before granting access to any resource
Zero Trust requires continuous verification of identity, device posture, and context before granting access, regardless of whether the request originates inside or outside the network.
A company needs to onboard BYOD devices securely onto an Aruba wireless network. Which solution follows Aruba best practices?
Answer: Use Aruba ClearPass Onboard to provision unique certificates to BYOD devices
Aruba ClearPass Onboard automates provisioning of unique device certificates, enabling secure, identity-based access for BYOD devices without sharing static credentials.
What is the recommended Aruba practice for managing AP group configurations in a multi-site deployment?
Answer: Use AP groups with inheritance from global templates to maintain consistency
AP groups with inherited global templates ensure configuration consistency across sites while allowing site-specific overrides where needed.
During a ClearPass profiling deployment, an administrator notices unknown devices are not being profiled correctly. Which best practice should be reviewed first?
Answer: Verify that SNMP, HTTP User-Agent, and DHCP fingerprinting sources are enabled
ClearPass relies on multiple data sources (SNMP, DHCP, HTTP User-Agent) for accurate device profiling; ensuring these sources are enabled is the first troubleshooting step.
Which SSID design approach does Aruba recommend to reduce co-channel interference in high-density environments?
Answer: Minimize the number of SSIDs broadcast per AP to reduce beacon overhead
Each SSID adds beacon overhead and increases channel contention; Aruba recommends keeping the number of active SSIDs per AP to a minimum (typically 3 or fewer).
An Aruba engineer is asked to implement client isolation on a guest SSID. What is the primary security benefit of this configuration?
Answer: It blocks direct peer-to-peer communication between wireless clients on the same SSID
Client isolation prevents wireless clients on the same SSID from communicating directly with each other, protecting users from lateral attacks on shared networks.
What is the Aruba best practice for placing the Mobility Controller in relation to the core network switch?
Answer: Deploy the MC in the data center or core, upstream from the distribution layer
Placing the MC at the core or data center ensures that all user traffic passes through the centralized policy enforcement point before reaching network resources.