ACSP Switch Security Features 2

Question 1

Which ArubaOS-CX feature limits the number of MAC addresses learned on a port to prevent MAC flooding attacks?

Accepted Answer

Port security

Answer

Port security restricts the number of MAC addresses allowed on a switch port, mitigating MAC flooding attacks that overflow the CAM table.

Question 2

On an ArubaOS-CX switch, what action does port security take by default when a violation is detected?

Accepted Answer

Shutdown the port

Answer

The default port security violation action is to shut down the port (err-disable state), requiring manual intervention to restore connectivity.

Question 3

What is the primary purpose of 802.1X port-based authentication on ArubaOS-CX switches?

Accepted Answer

Authenticate devices before granting network access

Answer

802.1X enforces authentication via EAP between a supplicant, authenticator (switch), and authentication server before allowing network access.

Question 4

In an ArubaOS-CX 802.1X deployment, which role does the switch play?

Accepted Answer

Authenticator

Answer

The switch acts as the authenticator, relaying EAP messages between the supplicant (client device) and the RADIUS authentication server.

Question 5

Which ArubaOS-CX feature assigns a VLAN dynamically based on RADIUS-returned attributes after 802.1X authentication?

Accepted Answer

Dynamic VLAN assignment

Answer

Dynamic VLAN assignment uses RADIUS attributes (Tunnel-Type, Tunnel-Medium-Type, Tunnel-Private-Group-ID) to place authenticated clients into the correct VLAN.

(ACSP) Aruba Certified Switching Professional Practice Test

(ACSP) Aruba Certified Switching Professional Practice Test

ACSP Switch Security Features 2