ACA Aruba Associate Routing & IP Services 3

Question 1

What is IPv6 and why was it developed?

Accepted Answer

The successor to IPv4 developed to address IPv4 address exhaustion with a 128-bit address space

Answer

An encryption protocol developed to secure IPv4 networks

Answer

A routing protocol designed to replace OSPF in large networks

Answer

A wireless standard developed to replace 802.11ac

Question 2

Which IPv6 address type is only routable within the local network segment and always begins with fe80?

Accepted Answer

Link-Local (fe80::/10)

Answer

Global Unicast

Answer

Multicast

Answer

Loopback (::1)

Question 3

What Aruba AOS-CX feature can act as a DHCP server to assign IP addresses to clients on directly connected VLANs?

Accepted Answer

DHCP Server Pool

Answer

DHCP Snooping

Answer

DHCP Relay

Answer

DHCP Binding

Question 4

What is DHCP Snooping, and what does it protect against?

Accepted Answer

A security feature that validates DHCP messages; protects against rogue DHCP servers

Answer

A feature that encrypts DHCP traffic; protects against eavesdropping

Answer

A protocol that speeds up DHCP lease renewal; protects against IP conflicts

Answer

A monitoring tool that logs all DHCP traffic; protects against bandwidth overuse

Question 5

Which ARP security feature on Aruba switches prevents ARP spoofing attacks by validating ARP packets against the DHCP Snooping binding table?

Accepted Answer

Dynamic ARP Inspection (DAI)

Answer

ARP Guard

Answer

ARP Proxy

Answer

Gratuitous ARP Blocker

Question 6

What is the purpose of IP Source Guard on an Aruba switch?

Accepted Answer

To validate that source IP addresses on untrusted ports match the DHCP Snooping binding table, preventing IP spoofing

Answer

To limit the number of IP addresses a port can learn

Answer

To encrypt all IP traffic passing through the switch

Answer

To block all non-routable RFC 1918 addresses from entering the network