Aruba Campus Access Architect Free Sample Questions

Dynamic Segmentation is the correct technology. It uses a centralized, policy-based approach to create secure GRE tunnels from the access device (switch or AP) to a Gateway Cluster. This encapsulates user traffic and enforces policies centrally, providing the required traffic isolation and security at the edge. VSX is for high availability, EVPN-VXLAN is a fabric technology, and VSF is for switch stacking; none provide this specific user-to-gateway tunneling mechanism for policy enforcement.

BGP is the standard control plane protocol for EVPN, used to distribute MAC and IP reachability information across the VXLAN fabric, making it a key component of the solution.

EVPN-VXLAN is a modern fabric technology that provides Layer 2 extension over a Layer 3 underlay. This directly addresses the requirement for L2 adjacency across buildings while offering a scalable, standards-based overlay.

A Gantt chart is a project management tool specifically designed to illustrate a project schedule over time. It is ideal for showing the start and end dates of different phases (e.g., core upgrade, distribution rollout, access layer refresh), their dependencies, and the overall project timeline, making it perfect for a migration plan. The other diagram types are used for showing data relationships, interactions, or system states, not project timelines.

This statement is false. While floor plans are essential, they often lack critical information about wall materials, ceiling heights, attenuation sources (like metal shelving or inventory), and potential RF interference. An architect must physically walk the site to verify the plans, identify materials, and note any factors that could impact RF propagation to create an accurate design.

Multicast Transmission Optimization (MTO), also known as Dynamic Multicast Optimization (DMO) in some contexts, is the feature specifically designed to improve the reliability of multicast streaming over Wi-Fi. It converts multicast frames to unicast frames, which are acknowledged and can be sent at higher data rates, drastically reducing packet loss and improving performance for latency-sensitive applications. Air Slice is for QoS, ClientMatch is for client steering, and AirGroup is for managing Bonjour/mDNS services.

VSX is the ideal technology for this scenario. It allows two separate switches to act as a single logical device from the perspective of downstream devices, enabling true active-active LACP uplinks from the VSF stacks. Crucially, VSX maintains independent control planes on each switch, meaning a software failure on one does not impact the other, providing high availability without downtime. VRRP is for gateway redundancy only, VSF is for stacking, and Multi-Chassis Link Aggregation (MC-LAG) is a general term, with VSX being Aruba's specific, advanced implementation.

The diagram shows that AGG1 only connects to CORE1, and AGG2 only connects to CORE2. If CORE1 fails, the entire network segment served by AGG1 (and ACC1) will lose its path to the core and external services. For true high availability, each aggregation switch must be connected to both core switches in a full-mesh or similar redundant topology.

The Low-Level Design (LLD) document provides the detailed, specific information required for implementation. While the High-Level Design (HLD) outlines the overall architecture and approach, the LLD gets into the specifics like IP addressing schemes, VLAN mappings, and exact configuration details. A BOM lists parts, and a SOW defines project scope and deliverables.

This is a functional requirement. It specifies what the system must do: control access with 802.1X and assign VLANs based on AD groups. A constraint would be a limitation on the solution (e.g., 'must use existing RADIUS servers' or 'budget under $50k'). A non-functional requirement would describe how well the system does something (e.g., 'authentication must take less than 500ms').

User Experience Insight (UXI) is the solution specifically designed for this purpose. UXI uses sensors (hardware or software agents) to continuously test network and application performance from the user's perspective. It simulates user actions and provides detailed insights into the health of services like Office 365, helping to identify issues proactively. NetEdit is for switch configuration, ClearPass Device Insight is for device profiling, and Central provides network management but not this specific synthetic monitoring capability.