An AOS-CX switch is configured to implement downloadable user roles Examine the AOS-CX switch output:
Access11config i$ show aaa authentication port-access interface ail client-status Port Access Client Status Details

Based on this output what is the state of the users access'?

• A.The RADIUS request timed out to the AAA server
• B.The port should be configured for 802 1X
• C.MAC authentication has passed, but 802 1X authentication is in progress
• D.No downloadable user role exists

Comment: *

Name: *

Email: *

Verification: *

Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:
Switch# show port-access role clearpass
Role information:
Name : icxarubadur_employee-3044-2
Type : clearpass
Status: failed, parsing_failed
Reauthentication Period :
Authentication Mode :
Session Timeout :
The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

• A.The AOS-CX switch does not have the ClearPass certificate involved
• B.There is a date/time issue between the ClearPass server and the switch
• C.The certificate that ClearPass uses in invalid
• D.DNS fails to resolve the ClearPass server's FQDN

Comment: *

Name: *

Email: *

Verification: *

A network administrator needs to replace an antiquated access layer solution with a modular solution involving AOS-CX switches The administrator wants to leverage virtual switching technologies. The solution needs to support high-availability with dual-control planes Which solution should the administrator implement?

• A.AOS-CX 8325
• B.AOS-CX 6400
• C.AOS-CX 6300
• D.AOS-CX S400

Comment: *

Name: *

Email: *

Verification: *

An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

• A.IPSec with a pre-shared key
• B.GRE with a pre-shared key
• C.IPSec with a digital certificate
• D.PAPI with an MD5 pre-shared key

Comment: *

Name: *

Email: *

Verification: *

An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone's LAN port is connected to the switch.
Which statement is correct about this situation?

• A.Device fingerprinting is required for authentication
• B.Device mode should be implemented
• C.802.1X must be configured to work in fallback mode
• D.The client-limit setting for port access needs to be changed

Comment: *

Name: *

Email: *

Verification: *