A customer is concerned about me unprotected traffic between an AOS-CX switch and a gateway, running on AOStO. What is a feasible option to protect this traffic?

• A.no action is needed, an RSA certificate already encrypts the traffic
• B.Implement an MD5 HMAC function lo protect PAPI between the AOS-CX switches and the gateway
• C.Implement an IPSec tunnel to protect PAPI between the AOS-CX switches and the gateway
• D.Implement a GRE tunnel to protect PAPI between the AOS-CX switches and the gateway

Comment: *

Name: *

Email: *

Verification: *

When configuring UBT on a switch what will happen when a gateway role is not specified?

• A.The switch will put the client on the access VLAN
• B.The gateway will assign a default role to the client
• C.The switch will assign the default deny role to the client.
• D.The gateway will send back the deny role to the client.

Comment: *

Name: *

Email: *

Verification: *

A customer is using stacked Aruba CX 6200 and CX 6300 switches for access and a VSX pair of Aruba CX
8325 as a collapsed core 802 1X is implemented for authentication. Due to the lack of cabling, some unmanaged switches are still in use Sometimes devices behind these switches cause network outages The switch should send a warning to the helpdesk when the problem occurs You have been asked to implement an effective solution to the problem What is the solution for this?

• A.Configure spanning tree on the Aruba CX 8325 switches Set the trap-option
• B.Configure loop protection on all edge ports of the Aruba CX 6200 and CX 6300 switches No trap option is needed
• C.Configure loop protection on all edge ports of the Aruba CX 6200 and CX 6300 switches Set up the trap-option
• D.Configure spanning tree on the Aruba CX 6200 and CX 6300 switches No trap option is needed

Comment: *

Name: *

Email: *

Verification: *

A customer just upgraded aggregation layer switches and noticed traffic dropping for 120 seconds after the aggregation layer came online again.
What is the best way to avoid having this traffic dropped given the topology below?

• A.Configure the linkup delay timer to 240 seconds to double the amount of lime for the initial phase to sync
• B.Configure the linkup delay timer to exclude LAGS 101 and 102, which will allow time for routing adjacencies to form and to learn upstream routes
• C.Configure the linkup delay timer to include LAGs 101 and 102, which will allow time for routing adjacencies lo form and to learn upstream routes
• D.Configure the linkup delay timer to 120 seconds, which will allow the right amount of time for the initial phase to sync

Comment: *

Name: *

Email: *

Verification: *

What is an Aruba-recommended best practice for hardening that only applies to Aruba CX 6300 series switches with dedicated management ports?

• A.Implement a control plane ACL to limit access to approved IPs and/or subnets
• B.Manually enable Enhanced Security Mode from a console session.
• C.Disable all management services on the default VRF.
• D.Create a dedicated management VRF, and assign the management port to it.

Comment: *

Name: *

Email: *

Verification: *