Aruba Campus Access Professional - part 3

What is the best practice for handling voice traffic with dynamic segmentation on AOS-CX switches?. A. Switch authentication and local forwarding of the voice traffic. B. Switch authentication and user-based tunneling of the voice traffic. C. Central authentication and port-based tunneling of the voice traffic. D. Controller authentication and port-based tunneling of all traffic.

A customer is using Aruba Cloud Guest, but visitors keep complaining that the captive portal page keeps coming up after devices go to sleep Which solution should be enabled to deal with this issue?. A. MAC Caching under the splash page. B. MAC Caching under the user-role. C. Wireless Caching under the splash page. D. MAC Caching under the WLAN.

With the Aruba CX switch configuration, what is the first-hop protocol feature that is used for VSX L3 gateway as per Aruba recommendation?. A. Active Gateway. B. Active-Active VRRP. C. SVI with vsx-sync. D. VRRP.

Which method is used to onboard a new UXI in an existing environment with 802 1X authentication? (The sensor has no cellular connection). A. Use the UXI app on your smartphone and connect the UXI via Bluetooth. B. Connect the new UXI from an already installed one and adjust the initial configuration. C. Use the Aruba installer app on your smartphone to scan the barcode. D. Use the CLI via the serial cable and adjust the initial configuration.

You are setting up a customer's 15 headless loT devices that do not support 802.1X. What should you use?. A. Multiple Pre-Shared Keys (MPSK) Local. B. Clearpass with WPA3-PSK. C. Clearpass with WPA3-AES. D. Multiple Pre-Shared Keys (MPSK) with WPA3-AES.

Which feature allows the device to remain operational when a remote link failure occurs between a Gateway cluster and a RADIUS server that is either in the cloud or a datacenter?. A. MAC caching. B. MAC Authentication. C. Authentication survivability. D. Opportunistic key caching.

What is one advantage of using OCSP vs CRLs for certificate validation?. A. reduces latency between the time a certificate is revoked and validation reflects this status. B. less complex to implement. C. higher availability for certificate validation. D. supports longer certificate validity periods.

Your customer is having connectivity issues with a newly-deployed Microbranch group The access points in this group are online in Aruba Central, but no VPN tunnels are forming. What is the most likely cause of this issue?. A. There is a time difference between the AP and the gateways The gateways should have NTP added. B. The SSL certificate on the gateway used to encrypt the connection has not been added to the APs trust list. C. There may be a firewall blocking GRE tunneling between the AP and the gateway. D. The gateway group is running in automatic cluster mode and should be in manual cluster mode.

Refer to the exhibit. With Core-1. what is the default value for config-revision?. A. 0. B. 1. C. 1-0. D. 0. 0.

Your customer is complaining of weak Wi-Fi coverage in their office. They mention that the office on the other side of the hall has much better signal. What is the likely cause of this issue?. A. The AP is a remote access point. B. The AP is using a directional antenna. C. The AP is an outdoor access point. D. The AP is configured in Mesh mode.

What are the requirements to ensure that WMM is working effectively? (Select two). A. The APs and the controller are Wi-Fi CERTIFIED for WMM which is enabled. B. All APs need to be from the AP-5xx series and AP-6xx series which are Wi-Fi CERTIFIED 6. C. The Client must be Wi-Fi CERTIFIED for WMM and configured for WMM marking. D. The Aruba AOS10 APs installed have to be converted to controlled mode. E. The AP needs to be connected via a tagged VLAN to the wired port.

You need to ensure that voice traffic sent through an ArubaOS-CX switch arrives with minimal latency. What is the best scheduling technology to use for this task?. A. Strict queuing. B. Rate limiting. C. QoS shaping. D. DWRR queuing.

How do you allow a new VLAN 100 between VSX pair inter-switch-link 256 for port 1/45 and 2/45?. A. vlan trunk allowed 100 for ports 1/45 and 1/46. B. vlan trunk add 100 in LAG256. C. vlan trunk allowed 100 in LAG256. D. vlan trunk add 100 in MLAG256.

A large retail client is looking to generate a rich set of contextual data based on the location information of wireless clients in their stores Which standard uses Round Trip Time (RTT) and Fine Time Measurements (FTM) to calculate the distance a client is from an AP?. A. 802.11ah. B. 802.11mc. C. 802.11be. D. 802.11V.

What are two advantages of splitting a larger OSPF area into a number of smaller areas? (Select two). A. It extends the LSDB. B. It increases stability. C. it simplifies the configuration. D. It reduces processing overhead. E. It reduces the total number of LSAs.

You are troubleshooting an issue with a pair of Aruba CX 8360 switches configured with VSX. Each switch has multiple VRFs. You need to find the IP address of a particular client device with a known MAC address. You run the "show arp" command on the primary switch in the pair but do not find a matching entry for the client MAC address. The client device is connected to an Aruba CX 6100 switch by VSX LAG. Which action can be used to find the IP address successfully?. A. Run the following command on the CX 6100 switch: show mac-address-table. B. Run the following command on the VSX primary switch: show arp all-vrfs. C. Run the following command on the VSX primary switch: show mac-address-table. D. Run the following command.

A customer is looking for a wireless authentication solution for all of their loT devices that meet the following requirements: - The wireless traffic between the IoT devices and the Access Points must be encrypted. - Unique passphrase per device. - Use fingerprint information to perform role-based access. Which solutions will address the customer's requirements? (Select two.). A. MPSK and an internal RADIUS server. B. MPSK Local with MAC Authentication. C. ClearPass Policy Manager. D. MPSK Local with EAP-TLS. E. Local User Derivation Rules.

For the Aruba CX 6400 switch, what does virtual output queueing (VOQ) implement that is different from most typical campus switches?. A. large ingress packet buffers. B. large egress packet buffers. C. per port ASICs. D. VSX.

Which component is used by the Aruba Network Analytics Engine (NAE)?. A. JSON-based scripts. B. Lisp-based agents. C. Ruby-based scripts. D. Current State Database.

A customer wants to provide wired security as close to the source as possible. The wired security must meet the following requirements: -allow ping from the IT management VLAN to the user VLAN. -deny ping sourcing from the user VLAN to the IT management VLAN. The customer is using Aruba CX 6300s. What is the correct way to implement these requirements?. A. Apply an outbound ACL on the user VLAN allowing temp echo-reply traffic toward the IT management VLAN. B. Apply an inbound ACL on the user VLAN allowing icmp echo-reply traffic toward the IT management VLAN. C. Apply an inbound ACL on the user VLAN denying icmp echo traffic toward the IT management VLAN. D. Apply an outbound ACL on the user VLAN denying icmp echo traffic toward the IT management VLAN.

Which statements are true about VSX LAG? (Select two.). A. The total number of configured links may not exceed 8 for the pair or 4 per switch. B. Outgoing traffic is switched to a port based on a hashing algorithm which may be either switch in the pair. C. LAG traffic is passed over VSX ISL links only while upgrading firmware on the switch pair. D. Outgoing traffic is preferentially switched to local members of the LAG. E. Up to 255 VSX lags can be configured on all 83xx and 84xx model switches.

Which statements regarding OSPFv2 route redistribution are true for Aruba OS CX switches? (Select two.). A. The "redistribute connected" command will redistribute all connected routes for the switch including local loopback addresses. B. The "redistribute ospf" command will redistribute routes from all OSPF V2 and V3 processes. C. The "redistribute static route-map connected-routes" command will redistribute all static routes without a matching deny in the route map "connected-routes". D. The "redistribute connected" command will redistribute all connected routes for the switch except local loopback addresses. E. The "redistribute static route-map connected-routes" command will redistribute all static routes with a matching permit in the route map "connected-routes.

A customer is using a legacy application that communicates at layer-2. The customer would like to keep this application working to a remote site connected via layer-3. All legacy devices are connected to a dedicated Aruba CX 6200 switch at each site. What technology on the Aruba CX 6200 could be used to meet this requirement?. A. Inclusive Multicast Ethernet Tag (IMET). B. Ethernet over IP (EolP). C. Generic Routing Encapsulation (GRE). D. Static VXLAN.

Your customer has asked you to assign a switch management role for a new user. The customer requires the user role to only have Web Ul access to the System > Log page and only have access to the GET method for REST API for the /logs/event resource Which default AOS-CX user role meets these requirements?. A. administrators. B. auditors. C. sysops. D. operators.

With Aruba CX 6300 how do you configure ip address 10.10.10.1 for the interface in default state for interface 1/1/1?. A. int 1/1/1. switching, ip address 10.10.10.1/24. B. int 1/1/1. no switching, ip address 10.10.10.1/24. C. int 1/1/1. ip address 10.10.10.1/24. D. int 1/1/1. routing, ip address 10.10.10.1/24.