Question 1
Which statement is correct regarding ACLs and TCAM usage?
Answer and explanation
Correct answer: B
Which statement is correct regarding ACLs and TCAM usage?
Correct answer: B
What is correct regarding rate limiting and egress queue shaping on AOS-CX switches?
Correct answer: A
A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches. The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes.Which solution should the administrator implement?
Correct answer: C
A company has implemented 802.1X authentication on AOS-CX access switches, where two ClearPass servers are used to implement AAA. Each switch has the two servers defined. A network engineer notices the following command configured on the AOS-CX switches: radius-server tracking user-name monitor password plaintext aruba123What is the purpose of this configuration?
Correct answer: D
A Senior Network Architect is designing a high-availability campus core solution for a financial institution. The design requires the use of two Aruba CX 8325 switches in a VSX cluster. The client requires that in the event of a split-brain scenario, the secondary switch must immediately shut down all its SVI interfaces to prevent routing loops, but the Keepalive link is routed through a separate management network. Which specific VSX configuration setting handles this SVI shutdown behavior during a split-brain event?
Correct answer: A
The 'split-recovery' command in the VSX context controls the behavior of the secondary switch during a split-brain situation. When enabled (default), if the ISL goes down but the keepalive is up, the secondary shuts down its VSX LAGs and SVIs to prevent loops and traffic blackholing. If the keepalive also fails (true split-brain), this mechanism relies on the initial state. However, specifically for shutting down SVIs during ISL failure when keepalive is active, split-recovery logic applies.
An administrator is planning the subnet sizing for a new building that will utilize Dynamic Segmentation with User-Based Tunneling (UBT). There will be approximately 2000 users. All traffic will be tunneled back to a cluster of Aruba Gateways. What is a critical design consideration regarding the VLAN configuration on the access layer CX 6300 switches?
Correct answer: A
In a User-Based Tunneling (UBT) deployment, the user traffic is encapsulated in GRE tunnels at the access switch and sent to the Gateway. The access switch only needs a 'reserved' VLAN (often called a transport or intermediate VLAN) to initiate the tunnel. The actual client VLANs where the users' IP addresses reside must exist on the Gateway, but they are NOT required (and often not recommended) to be configured on the local access switches.
A network consultant is designing a migration plan from a legacy three-tier architecture to a collapsed core using Aruba CX 8360 switches. The current environment uses PVST+ with 500 VLANs. The new design will utilize MSTP. Which design decision ensures the smoothest interoperability during the migration phase?
Correct answer: A
When interfacing MSTP with PVST+, the MSTP region appears as a single bridge (the IST master). To prevent topology loops and issues, it is best practice for the MSTP region to be the root of the CST (Common Spanning Tree), or for the PVST+ root to be consistent for ALL VLANs. This ensures the interaction on the boundary links is predictable.
You are configuring a VSX cluster on two CX 6400 switches. You have configured the Inter-Switch Link (ISL) on a 100GbE LAG. Which requirement regarding the ISL VLAN membership is mandatory for VSX synchronization to function correctly?
Correct answer: A
The VSX ISL (Inter-Switch Link) serves as the data path for traffic between the two VSX nodes for any VLANs that need to traverse the cluster (e.g., during single-link failures). Therefore, the ISL LAG must be configured as a trunk allowing all VLANs that are active on the VSX downstream links.
Register free to unlock 9 more sample questions