Aruba Network Security Expert (Written) study plan
Aruba Network Security Expert (Written) · Give each week a clear focus.
8 weeks · About 6 hours per week
Network Security Architecture and Design & Wired and Wireless Security Enforcement (Dynamic Segmentation, Tunnels, Device Profiles)
Diagram a three-tier campus design that places enforcement at access, distribution, and core, labeling where segmentation policy is applied
Compare VLAN-based, role-based, and tunneled segmentation and write a one-paragraph decision rule for each
Map each security control in your diagram to the threat it mitigates
List the Aruba components (gateway, controller, switch, ClearPass) that participate in each enforcement point
Your checkpoint
A labeled reference architecture diagram with a written control-to-threat mapping table covering at least 10 controls
Identity, Authentication, and Access Control (AAA, 802.1X, RADIUS, Roles)
Trace a full 802.1X EAP exchange and annotate each frame with the device that handles it
Differentiate EAP-TLS, PEAP-MSCHAPv2, and EAP-TTLS on certificate requirements and credential exposure
Configure RADIUS shared-secret and CoA behavior in a lab and verify reauthentication triggers
Explain how role assignment flows from authentication result to enforcement policy
Identify common 802.1X failure points and the log source that reveals each
Your checkpoint
A one-page 802.1X sequence diagram plus a troubleshooting table listing at least 6 failure symptoms, causes, and log sources
Identity, Authentication, and Access Control (AAA, 802.1X, RADIUS, Roles) & Network Access Control and Endpoint Visibility (ClearPass Policy Manager)
Describe ClearPass service selection order and predict which service handles a given request
Configure role mapping and enforcement policies driven by AD group membership and device attributes
Set up a guest or BYOD onboarding flow and document the certificate lifecycle
Compare posture assessment outcomes and how they alter enforcement
Explain how ClearPass integrates with external identity stores and which attributes it consumes
Your checkpoint
A ClearPass service-and-enforcement design document for three use cases (corporate, BYOD, guest) with role mapping tables
Network Access Control and Endpoint Visibility (ClearPass Policy Manager)
Build and test at least three ClearPass policy services in a lab environment
Capture and interpret Access Tracker output to confirm which enforcement policy fired
Tune a posture policy and verify the compliant and non-compliant paths both enforce correctly
Document the profiler fingerprints used to identify at least four endpoint categories
Explain how CoA is used to re-enforce policy after a posture or role change
Your checkpoint
A lab workbook with Access Tracker screenshots and a written verdict for each of three services showing the matching enforcement policy
Wired and Wireless Security Enforcement (Dynamic Segmentation, Tunnels, Device Profiles)
Design a dynamic segmentation policy that assigns roles by device type and user group
Compare tunneled and local enforcement and select the right model for three given scenarios
Configure device profiling rules and verify a device is classified correctly
Explain how downlink and uplink enforcement differ on a wired port
Trace how a wireless client's role is applied from association through gateway policy
Your checkpoint
A segmentation policy matrix mapping device profile, user group, role, and enforcement action across wired and wireless
Encryption, Certificates, and Secure Management Access & Threat Detection, Monitoring, and Incident Response
Build a certificate hierarchy plan covering root, intermediate, and server certificates for RADIUS and management access
Diagnose a certificate chain validation failure and identify the missing element
Harden management access using role-based admin accounts, MFA, and least-privilege AAA
Describe how to collect and correlate security events from switches, gateways, and ClearPass
Outline an incident response runbook for a rogue device detection event
Your checkpoint
A PKI plan plus a one-page incident response runbook for rogue device detection with named log sources and escalation steps
Security Integration, Automation, and Troubleshooting & Network Security Architecture and Design
Integrate ClearPass with an external SIEM or syslog collector and verify event delivery
Automate a repetitive policy task using an API call and document the request and response
Revisit the week 1 architecture and revise it based on integration and monitoring findings
Explain how API-based automation changes the operational risk profile of policy changes
Your checkpoint
A working API script or documented API call sequence plus an updated architecture diagram showing monitoring and integration flows
Identity, Authentication, and Access Control (AAA, 802.1X, RADIUS, Roles) & Network Access Control and Endpoint Visibility (ClearPass Policy Manager) & Wired and Wireless Security Enforcement (Dynamic Segmentation, Tunnels, Device Profiles) & Security Integration, Automation, and Troubleshooting
Complete a timed full-length practice assessment and score each domain separately
Re-study the two lowest-scoring domains and rewrite the notes for each
Walk through a full end-to-end scenario from supplicant to enforcement and narrate every step
Review all deliverables for gaps and consolidate them into a single reference sheet
Your checkpoint
A scored practice assessment with a per-domain breakdown and a consolidated one-page reference sheet for weak areas
Milestones
Week 2: Can trace an 802.1X exchange from memory and name the log source for any step that fails
Week 4: Can build and validate a ClearPass service end-to-end in a lab without notes
Week 6: Can explain certificate chain validation and diagnose a chain failure in under five minutes
Week 8: Practice assessment shows no domain below 70 percent and the two weakest domains are documented with remediation notes