ACA Aruba Associate Routing & IP Services 3

Question 1

What is IPv6 and why was it developed?

Accepted Answer

The successor to IPv4 developed to address IPv4 address exhaustion with a 128-bit address space

Answer

IPv6 was developed to replace IPv4 due to IPv4 address exhaustion, using 128-bit addresses to provide an essentially unlimited pool of unique IP addresses.

Question 2

Which IPv6 address type is only routable within the local network segment and always begins with fe80?

Accepted Answer

Link-Local (fe80::/10)

Answer

IPv6 Link-Local addresses (fe80::/10 prefix) are automatically assigned to interfaces and are only routable within the local link, not forwarded by routers.

Question 3

What Aruba AOS-CX feature can act as a DHCP server to assign IP addresses to clients on directly connected VLANs?

Accepted Answer

DHCP Server Pool

Answer

Aruba AOS-CX switches can be configured with a DHCP Server Pool to act as a local DHCP server, assigning IP addresses to clients connected to local VLAN interfaces.

Question 4

What is DHCP Snooping, and what does it protect against?

Accepted Answer

A security feature that validates DHCP messages; protects against rogue DHCP servers

Answer

DHCP Snooping validates DHCP messages on untrusted ports and blocks unauthorized DHCP server responses, protecting clients from receiving incorrect IP configuration from rogue servers.

Question 5

Which ARP security feature on Aruba switches prevents ARP spoofing attacks by validating ARP packets against the DHCP Snooping binding table?

Accepted Answer

Dynamic ARP Inspection (DAI)

Answer

Dynamic ARP Inspection (DAI) validates ARP packets against the DHCP Snooping binding table, dropping ARP packets with invalid MAC-to-IP mappings to prevent ARP spoofing.

(ACA) Aruba Certified Associate Certification Practice Test

(ACA) Aruba Certified Associate Certification Practice Test

ACA Aruba Associate Routing & IP Services 3