ACSP Network Security & Traffic Management 3

Question 1

On an Aruba CX switch, which protocol detects and prevents loops on ports where STP is disabled, typically access ports connected to end devices?

Accepted Answer

Loop Protect

Answer

Loop Protect detects loops on ports not participating in STP by sending periodic PDUs and blocking the port if a loop is detected.

Question 2

What action does BPDU Guard take when it receives a BPDU on a protected PortFast-enabled access port?

Accepted Answer

Places the port into an err-disabled state

Answer

BPDU Guard immediately disables (err-disables) a PortFast port upon receiving any BPDU, protecting the STP topology.

Question 3

An Aruba switch uses 802.1X with multi-domain authentication. In which scenario are both a phone and a PC authenticated on the same port?

Accepted Answer

The phone uses MAB and the PC uses 802.1X in separate domains

Answer

Multi-domain authentication allows one device (commonly a phone via MAB) and another (PC via 802.1X) to authenticate independently on the same port.

Question 4

What does the 'critical' authentication role provide on an Aruba switch when the RADIUS server is unreachable?

Accepted Answer

It grants limited, pre-defined access to keep the network functional

Answer

The critical role provides a fallback access level when the RADIUS server is unavailable, preventing complete loss of access.

Question 5

Which QoS scheduling mechanism guarantees a minimum bandwidth percentage for each traffic class on an ArubaOS-CX switch?

Accepted Answer

Deficit Weighted Round Robin (DWRR)

Answer

DWRR allocates bandwidth to queues proportionally based on assigned weights, guaranteeing minimums for each class.

(ACSP) Aruba Certified Switching Professional Practice Test