An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

• A.PAPI with an MD5 pre-shared key
• B.GRE with a pre-shared key
• C.IPSec with a digital certificate
• D.IPSec with a pre-shared key

Comment: *

Name: *

Email: *

Verification: *

Examine the output from an AOS-CX switch implementing a dynamic segmentation solution involving downloadable user roles:
Switch# show port-access role clearpass
Role information:
Name : icxarubadur_employee-3044-2
Type : clearpass
Status: failed, parsing_failed
Reauthentication Period :
Authentication Mode :
Session Timeout :
The downloadable user roles are not being downloaded to the AOS-CX switch. Based on the above output, what is the problem?

• A.The AOS-CX switch does not have the ClearPass certificate involved
• B.The certificate that ClearPass uses in invalid
• C.There is a date/time issue between the ClearPass server and the switch
• D.DNS fails to resolve the ClearPass server's FQDN

Comment: *

Name: *

Email: *

Verification: *

A company has a third-party AAA server solution. The campus access layer was just upgraded to AOS-CX switches that perform access control with MAC-Auth and 802.1X. The company has an Aruba Mobility Controller (MC) solution for wireless, and they want to leverage the firewall policies on the controllers for the wired traffic.
What is correct about how the company should implement a security solution where the wired traffic is processed by the MCs?

• A.Implement standards-based RADIUS VSAs to pass policy information directly to the AOS-CX switches and MCs
• B.Implement local user roles with a gateway role defined on the AOS-CX switches
• C.Implement downloadable user roles with a gateway role defined on the AOS-CX switches
• D.Implement downloadable user roles with a device role defined on the AOS-CX switches and MCs

Comment: *

Name: *

Email: *

Verification: *

How should a network administrator add NAE scripts and implement NAE agents that will run on an AOS-CX switch?

• A.Use the web interface of the NetEdit server
• B.Use the web interface of Aruba Central
• C.Use the CLI of the AOS-CX switch
• D.Use the web interface of the AOS-CX switch

Comment: *

Name: *

Email: *

Verification: *

The company has just upgraded their access layer switches with AOS-CX switches and implemented an AAA solution with ClearPass. The company has become concerned about what actually connects to the user ports on the access layer switch, Therefore, the company is implementing 802.1X authentication on the AOS-CX switches. An administrator has globally enabled 802.1X, and has enabled it on all the access ports connected to user devices, including VoIP phones, security cameras, and wireless Aruba IAPs. Wireless users are complaining that they successfully authenticate to the IAPs; however, they do not have access to network resources. Previously, this worked before 802.1X was implemented on the AOS-CX switches.
What should the company do to solve this problem?

• A.Implement downloadable user roles and user-based tunneling (UBT) on the AOS-CX switches.
• B.Implement AAA RADIUS change of authorization on the AOS-CX switches.
• C.Implement local user roles and local forwarding on the AOS-CX switches.
• D.Implement device-based mode on the lAP-connected AOS-CX switch ports.

Comment: *

Name: *

Email: *

Verification: *