Aruba ClearPass APC
Aruba Certified Professional (ACP) - ClearPass
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Aruba Certified Professional (ACP) – ClearPass credential is a vendor certification for network and security engineers who design, deploy, and operate HPE Aruba Networking ClearPass Policy Manager as a network access control (NAC) platform. It suits administrators and consultants who already understand RADIUS, 802.1X, and basic identity concepts and now need to build policy, enforcement, and guest/onboarding workflows in ClearPass itself. The exam tests breadth across the product rather than deep dives into one module: architecture and service placement, licensing and deployment models, policy service design and enforcement profiles, authentication methods and identity source integration, guest and device onboarding, OnGuard posture checks, monitoring and troubleshooting, and integration with Aruba controllers, switches, and third-party infrastructure. Expect scenario-based multiple choice that asks you to pick the right service type, role mapping, or enforcement action for a described requirement, and to interpret log or diagnostic output. Preparation should be hands-on first: build a lab with ClearPass (or a virtual evaluation appliance), a RADIUS client such as an Aruba controller or switch, and at least one external identity source, then work through policy services, enforcement, guest, and OnGuard end to end. Supplement with the official HPE Aruba Networking documentation and training catalog, which is the authoritative source for current exam scope, registration, and delivery details.
What you'll study
About Aruba ClearPass APC preparation
What is the exam format?
It is a multiple-choice, proctored certification exam delivered through HPE's certification testing partner. The official HPE Aruba Networking certification page publishes the current question count, time limit, and delivery options; check there rather than relying on secondhand figures, since these details change between exam revisions.
How much does it cost and what is the passing score?
Fees and passing scores are set by HPE and vary by region and currency, and they change when the exam is revised. The official HPE Aruba Networking certification site lists the current price and scoring information. Do not budget from forum posts or training-vendor pages, which are frequently out of date.
How long is the certification valid, and can I retake the exam?
Validity periods and retake rules are defined in HPE's certification policies, including any waiting period between attempts and recertification requirements. Both are documented on the official certification site and in the program's terms. Confirm there before scheduling, especially if you are close to an expiration date.
How hard is it?
Candidates with production ClearPass experience generally find it manageable; those who have only read documentation find it hard. The difficulty comes from scenario questions that combine identity sources, policy service types, role mapping, and enforcement into one decision. Hands-on lab time shortens preparation more than extra reading.
Do I need the lower-level certification first?
Check the official prerequisites on the HPE Aruba Networking certification page, as entry requirements and recommended (versus required) prior certifications differ by track. Even when not mandatory, familiarity with Aruba switching and wireless fundamentals helps, because many exam scenarios involve Aruba infrastructure as the RADIUS client.
What should I study first?
Start with architecture and service flow: how a request reaches a policy service, how services are ordered and matched, and how role mapping feeds enforcement. Everything else - authentication, guest, OnGuard, troubleshooting - hangs off that model. Build a working 802.1X flow in a lab before moving to guest and posture.
What are the most common failure modes?
Weak spots are usually service ordering and service matching rules, the distinction between role mapping and enforcement policy, identity source configuration (especially AD/LDAP filters and certificate-based methods), and reading Access Tracker output to diagnose a failed authentication. Candidates also underestimate OnGuard posture and health-check configuration.
Is hands-on lab experience necessary?
Strongly recommended. ClearPass concepts such as enforcement profiles, role mapping, and posture policies are much easier to answer correctly if you have configured them and watched the resulting authentication in Access Tracker. A virtual appliance plus a RADIUS client and a directory service is enough to practice the core flows.
Where do I find the official exam topics?
The HPE Aruba Networking certification page for this credential publishes the authoritative exam blueprint and any available training courses. Use that blueprint to weight your study time, and treat third-party outlines as approximate. The blueprint is the only document guaranteed to match the exam you will actually sit.