ACSP Access Control Lists (ACLs) 3

Question 1

Which Aruba switch ACL feature allows you to assign a QoS priority to packets matching a specific ACE?

Accepted Answer

ACL remarking with DSCP set action

Answer

Aruba AOS-Switch ACEs support a 'set dscp' or priority action that remarks the DSCP value of matching packets for QoS treatment.

Question 2

On an Aruba switch, what is the maximum number of ACLs that can be simultaneously applied to a single port?

Accepted Answer

One per direction per traffic type (e.g., one IPv4 in, one IPv4 out)

Answer

Aruba switches allow one ACL per direction per type (IPv4, IPv6, MAC) on a port, so multiple ACLs can coexist if they are different types or directions.

Question 3

An extended ACL entry reads: 'deny tcp 192.168.10.0/24 172.16.0.0/16 eq 80'. Which traffic does this block?

Accepted Answer

TCP port 80 from 192.168.10.0/24 to 172.16.0.0/16

Answer

The ACE matches TCP traffic sourced from 192.168.10.0/24 destined for port 80 on any host in 172.16.0.0/16.

Question 4

What does the 'established' keyword do when used in an Aruba extended IP ACL entry for TCP?

Accepted Answer

Matches only TCP segments with ACK or RST flags set

Answer

The 'established' keyword matches TCP packets with the ACK or RST bit set, indicating they belong to an existing connection rather than initiating a new one.

Question 5

An Aruba switch ACL is applied outbound on a routed VLAN interface. Which traffic does it inspect?

Accepted Answer

Traffic being routed out of that VLAN toward other networks

Answer

An outbound ACL on a routed VLAN interface inspects traffic that has been routed and is exiting through that interface toward its destination.

(ACSP) Aruba Certified Switching Professional Practice Test

(ACSP) Aruba Certified Switching Professional Practice Test

ACSP Access Control Lists (ACLs) 3