Network Security & Traffic Management Flashcards
7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Network Security & Traffic Management flashcards as text
An Aruba CX switch administrator needs to prioritize voice traffic end-to-end. At the ingress access port, which action should be taken to trust the phone's DSCP markings?
Answer: Apply 'qos trust dscp' on the access port
'qos trust dscp' on the access port instructs the switch to honor the DSCP markings applied by the IP phone.
What is the role of LLDP-MED on Aruba switches in a voice deployment?
Answer: It advertises voice VLAN and QoS policy to IP phones
LLDP-MED allows the switch to advertise the voice VLAN ID and QoS (CoS/DSCP) parameters to connected IP phones automatically.
On an Aruba CX switch, a security policy requires that all RADIUS packets use a specific source IP. Which configuration achieves this?
Answer: Configure 'radius-server host source-interface '
The 'source-interface' option on the RADIUS server configuration forces all RADIUS packets to use the IP of the specified interface.
Which Aruba switch feature detects when a port connected to another switch is sending BPDUs and automatically moves it from an edge state to a non-edge STP state?
Answer: Admin-edge with automatic BPDU detection
ArubaOS-CX admin-edge ports automatically revert to a non-edge state if a BPDU is received, protecting STP topology.
When applying an IPv4 ACL on an ArubaOS-CX interface, which direction applies the ACL to traffic entering the switch from a host?
Answer: Inbound (ingress)
Ingress (inbound) ACLs are applied to traffic arriving at the switch interface from an external host before it is forwarded.
A network engineer wants to ensure that only one specific MAC address is allowed on an access port. Which combination of features is most appropriate on an Aruba CX switch?
Answer: Port security with a static allowed MAC and MAC limit of 1
Port security with a static allowed MAC and a limit of 1 ensures only that single device can communicate on the port.
An Aruba switch is part of a VSX pair. How is MSTP handled across the VSX active and standby switches?
Answer: VSX synchronizes MSTP state so both peers appear as a single logical switch to STP
VSX synchronizes MSTP across both peers, presenting a single bridge identity to the network to prevent loops and ensure consistent STP topology.