Exam 19: Aruba Certified Switching Associate

Which concept is implemented using Aruba's dynamic segmentation?

An administrator is implementing a downloadable user role solution involving AOS-CX switches. The AAA solution and the AOS-CX switches can successfully authenticate users; however, the role information fails to download to the switches. What policy should be added to an intermediate firewall to allow the downloadable role function to succeed?

An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles: Switch# show port-access role clearpass Role information: Name : icx aruba dur_employee-3044-2 Type : clearpass Status: failed, parsing_failed     Reauthentication Period        :     Authentication Mode            :     Session Timeout                : The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

How does PIM build the IP multicast routing table to route traffic between a multicast source and one or more receivers?

A company requires access by all users, guests, and employees to be authenticated. Employees will be authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of authentication must be configured on an AOS-CX switch ports where both guests and employees connect?

An administrator of a large campus network needs a solution that will provide root cause analytics to quickly identify problems so that they can quickly be fixed. Which AOS-CX switch feature should the administrator utilize to help with root cause analytics?

Examine the network exhibit: The ACL configuration defined on Core-1 is as follows: If telnet was being used, which device connection would be permitted and functional in both directions? (Choose two.)

The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what actually connects to the user ports on the access layer switch, Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches. What should the company do to solve this problem?

A network administrator wants to replace older access layer switches with AOS-CX 6300 switches. Which virtual switching technology can the administrator implement with this solution?

Which option correctly defines how to identify a VLAN as a voice VLAN on an AOS-CX switch?

A network engineer is having a problem adding a custom-written script to an AOS-CX switch's NAE GUI. The script was written in Python and was successfully added on other AOS-CX switches. The engineer examines the following items from the CLI of the switch: What should the engineer perform to fix this issue?

Examine the network topology. The network is configured for OSPF with the following attributes: Core1 and Core2 and ABRs Area 1 has 20 networks in the 10.1.0.0/16 range Area 0 has 10 networks in the 10.0.0.0/16 range Area 2 has 50 networks in the 10.2.0.0/16 range The ASBR is importing a static route into Area 1 Core2 has a summary for Area 2: area 0.0.0.2 range 10.2.0.0/16 type inter-area Here is the OSPF configuration performed on Core1: Based on the above information, what is correct?

A network engineer is examining NAE graphs from the Dashboard but notices that the time shown in the graph does not represent the current time. The engineer verifies that the AOS-CX switch is configured for NTP and is successfully synchronized. What should be done to fix this issue?

A network engineer is using NetEdit to manage AOS-CX switches. The engineer notices that a lot of third-party VoIP phones are showing up in the NetEdit topology. The engineer deletes these, but they are automatically rediscovered by NetEdit and added back in. What should the administrator do to solve this problem?

What are best practices when implementing VSX on AOS-CX switches? (Choose two.)

A network administrator is installing NetEdit. In order for NetEdit to manage the AOS-CX switches in the network, what must be defined on the AOS-CX switches? (Choose two.)

An administrator wants to track what configuration changes were made on a switch. What should the administrator implement to see the configuration changes on an AOS-CX switch?