Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

An administrator implements interim accounting for guest users so that ClearPass can track the amount of bandwidth that guests upload and download. Guests that abuse bandwidth consumption should be disconnected from the network. The administrator configures the following on the AOS-CX access switches:

After performing this configuration, the administrator notices that guest users that have exceeded the guest bandwidth limit are not being disconnected. Upon further investigation, Access Tracker in ClearPass indicates a disconnect CoA message is being sent to the AOS-CX switch.

What is causing this issue?

A.

RADIUS change of authorization is not enabled on the AOS-CX switch.

B.

Bandwidth consumption of the guests is not being reported by the AOS-CX switch.

C.

NTP is not configured on the AOS-CX switch.

D.

There is a time discrepancy between the AOS-CX switch and ClearPass.

A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX

switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility

Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.

What is correct about how the company should implement a security solution where the wired traffic is

processed by the gateways?

A.

Implement downloadable user roles with a gateway role defined on the AOS-CX switches

B.

Implement local user roles with a gateway role defined on the AOS-CX switches

C.

Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs

D.

Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs

Which statement is correct regarding ACLs and TCAM usage?

A.

Applying an ACL to a group of ports consumes the same resources as specific ACE entries

B.

Using object groups consumes the same resources as specific ACE entries

C.

Compression is automatically enabled for ASIC TCAMs on AOS-CX switches

D.

Applying an ACL to a group of VLANs consumes the same resources as specific ACE entries

A company requires access by all users, guests, and employees to be authenticated. Employees will be

authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of

authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

A.

Both 802.1X and captive portal

B.

802.1X only

C.

Both 802.1X and MAC-Auth

D.

802.1X, captive portal, and MAC-Auth

A network has an ABR that connects area 0 and 1. A network engineer configures a summarized route for area 0. The ABR is a designated router (DR) for the segment it uses to connect to area 1.

Which LSA type is assigned to this route when the summarized route is advertised into area 1 by the ABR?

A.

LSA1

B.

LSA4

C.

LSA3

D.

LSA2

An administrator is replacing the current access switches with AOS-CX switches. The access layer switches

must authenticate user and networking devices connecting to them. Some devices support no form of

authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same

port, where the PC is connected to the data port of the phone and the phone’s LAN port is connected to the switch.

Which statement is correct about this situation?

A.

802.1X must be configured to work in fallback mode

B.

Device fingerprinting is required for authentication

C.

The client-limit setting for port access needs to be changed

D.

Device mode should be implemented

Which protocol should be configured to allow NetEdit to discover third-party devices?

A.

SNMP

B.

SSH

C.

HTTPS

D.

HTTP

An administrator will be deploying HPE Aruba Networking Switch Multi-Edit Software to manage an Aruba solution. What does Switch Multi-Edit Software support?

A.

Manages AOS-CX switches and HPE Aruba Networking Gateways

B.

Tracks configuration and hardware information

C.

Support for HPE Aruba Networking-supplied security updates

D.

Can be purchased as a VM and/or hardware appliance

Which protocol does NetEdit use to discover devices in a subnet during the discovery process?

A.

LLDP

B.

ARP

C.

DHCP

D.

ICMP

What is required when implementing captive portal an AOS-CX switches?

A.

Certificate installed on the switch

B.

Web server running on the switch

C.

Device fingerprinting

D.

AAA server