ACSP Switch Security Features 4

Question 1

What is the role of Root Guard in ArubaOS-CX Spanning Tree security?

Accepted Answer

Prevent a connected switch from becoming the STP root bridge

Answer

Root Guard places a port in root-inconsistent state if it receives a superior BPDU, preventing external devices from taking over the root bridge role.

Question 2

Which ArubaOS-CX MAC authentication method allows a device that fails 802.1X to fall back to authenticating by its MAC address?

Accepted Answer

MAC Authentication Bypass (MAB)

Answer

MAC Authentication Bypass (MAB) allows non-802.1X-capable devices to authenticate using their MAC address as both the username and password sent to RADIUS.

Question 3

In ArubaOS-CX, what is a 'critical authentication VLAN' used for in 802.1X deployments?

Accepted Answer

Place clients in a designated VLAN when the RADIUS server is unreachable

Answer

The critical authentication VLAN ensures that when the RADIUS server is down, clients are placed in a predefined VLAN allowing limited access rather than being denied completely.

Question 4

Which ArubaOS-CX feature prevents unauthorized devices from connecting to a switch port by storing specific allowed MAC addresses?

Accepted Answer

Sticky MAC (port security with sticky learning)

Answer

Sticky MAC learning allows port security to dynamically learn and permanently save MAC addresses to the running configuration, locking those addresses to the port.

Question 5

What does the ArubaOS-CX 'auth-priority' setting control in port-access configurations?

Accepted Answer

The order in which authentication methods (802.1X, MAB) are attempted

Answer

Auth-priority defines the sequence in which authentication methods are tried on a port, such as trying 802.1X first and falling back to MAB if it times out.

(ACSP) Aruba Certified Switching Professional Practice Test

(ACSP) Aruba Certified Switching Professional Practice Test

ACSP Switch Security Features 4