ACSP Access Control Lists (ACLs) 5

Question 1

Which Aruba AOS-CX ACL feature allows an ACE to redirect matching traffic to a specified next-hop IP address instead of normal routing?

Accepted Answer

ACE redirect action with a nexthop parameter

Answer

AOS-CX ACEs support a 'redirect' action that policy-routes matching packets to a specified next-hop, bypassing the normal routing table.

Question 2

On an Aruba switch, what is the primary purpose of a 'remark' entry in an ACL configuration?

Accepted Answer

To add a human-readable comment to the ACL without affecting traffic

Answer

A 'remark' is a comment line in an ACL that is visible in the configuration for documentation purposes but has no effect on packet processing.

Question 3

An ACL contains these sequential ACEs: (1) permit tcp any any eq 443, (2) deny ip 10.0.0.0/8 any, (3) permit ip any any. What happens to HTTPS traffic from 10.5.5.5?

Accepted Answer

It is permitted by ACE 1 before reaching ACE 2

Answer

ACL processing is top-down and stops at the first match; TCP port 443 from any source matches ACE 1 and is permitted before ACE 2 is evaluated.

Question 4

In Aruba AOS-CX, which ACL type uses 'ipv6 access-list' to filter IPv6 traffic on an interface?

Accepted Answer

IPv6 ACL

Answer

AOS-CX uses 'ipv6 access-list <name>' to create dedicated IPv6 ACLs that match on IPv6 source/destination addresses and upper-layer protocols.

Question 5

What is the recommended best practice for ACL sequence numbers on Aruba switches to allow future ACE insertions?

Accepted Answer

Number ACEs in increments of 10 (10, 20, 30…) to leave gaps for insertion

Answer

Numbering ACEs in increments of 10 leaves room to insert new entries between existing ones without resequencing the entire ACL.

(ACSP) Aruba Certified Switching Professional Practice Test

(ACSP) Aruba Certified Switching Professional Practice Test

ACSP Access Control Lists (ACLs) 5