ACSP Network Security & Traffic Management 4

Question 1

What is the purpose of Root Guard on an Aruba switch STP configuration?

Accepted Answer

Ensure a port does not become a root port by blocking superior BPDUs

Answer

Root Guard prevents a port from becoming a root port by placing it into a root-inconsistent state if it receives a superior BPDU.

Question 2

An Aruba CX switch has an ACL applied with 'deny ip any any' as the last entry. A packet matching no other ACE arrives. What happens?

Accepted Answer

It is dropped by the explicit deny any any rule

Answer

An explicit 'deny ip any any' at the end of an ACL drops all unmatched traffic, overriding no other behavior.

Question 3

Which Aruba switch feature uses a downloadable role returned by a RADIUS server to enforce per-user access policies?

Accepted Answer

Downloadable User Role (role-based access control)

Answer

Aruba's role-based access control allows RADIUS to return a user role containing ACLs and policies applied dynamically per user.

Question 4

When configuring storm control on an ArubaOS-CX access port, which traffic types can be rate-limited?

Accepted Answer

Broadcast, multicast, and unknown unicast

Answer

Storm control on ArubaOS-CX can rate-limit broadcast, multicast, and unknown unicast traffic to prevent storms from overwhelming the switch.

Question 5

An administrator configures 'spanning-tree port-type admin-edge' on an ArubaOS-CX access port. What is the effect?

Accepted Answer

The port immediately transitions to forwarding without waiting for STP timers

Answer

Admin-edge (equivalent to PortFast) allows the port to immediately move to forwarding state, bypassing STP listening and learning delays.

(ACSP) Aruba Certified Switching Professional Practice Test