An organization has many IoT devices that need different access policies based on their security risk level. Which feature of Aruba ClearPass allows for automatic enforcement of security policies?

Question

Options

• AAI-driven policy assignment
• BStatic VLAN Assignment
• CARP Table Filtering
• DManual IP Addressing

• A
  91% (41)
• B
  2% (1)
• C
  4% (2)
• D
  2% (1)

Explanation

Aruba ClearPass uses AI-driven policy assignment (A) to automatically analyze device attributes, risk posture, and context, then dynamically enforce the appropriate security policy - making it ideal for environments with diverse IoT devices requiring differentiated access control. Static VLAN Assignment (B) is wrong because it applies fixed network segments without any dynamic or risk-based logic, meaning every device gets the same treatment regardless of threat level. ARP Table Filtering (C) is a network-layer technique for preventing ARP spoofing attacks, not a policy enforcement mechanism for device access control. Manual IP Addressing (D) is simply a network administration task with no relationship to security policy automation.

Memory tip: Think "AI = Automatic Intelligence" - ClearPass's AI-driven engine continuously learns device risk and automatically acts, so you never have to manually intervene to change a policy. If the answer involves automation + security policy in ClearPass, AI-driven is the keyword to lock onto.

No community discussion yet for this question.