Network Security & Traffic Management Flashcards
7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network Security & Traffic Management flashcards as text
On an Aruba CX switch, which protocol detects and prevents loops on ports where STP is disabled, typically access ports connected to end devices?
Answer: Loop Protect
Loop Protect detects loops on ports not participating in STP by sending periodic PDUs and blocking the port if a loop is detected.
What action does BPDU Guard take when it receives a BPDU on a protected PortFast-enabled access port?
Answer: Places the port into an err-disabled state
BPDU Guard immediately disables (err-disables) a PortFast port upon receiving any BPDU, protecting the STP topology.
An Aruba switch uses 802.1X with multi-domain authentication. In which scenario are both a phone and a PC authenticated on the same port?
Answer: The phone uses MAB and the PC uses 802.1X in separate domains
Multi-domain authentication allows one device (commonly a phone via MAB) and another (PC via 802.1X) to authenticate independently on the same port.
What does the 'critical' authentication role provide on an Aruba switch when the RADIUS server is unreachable?
Answer: It grants limited, pre-defined access to keep the network functional
The critical role provides a fallback access level when the RADIUS server is unavailable, preventing complete loss of access.
Which QoS scheduling mechanism guarantees a minimum bandwidth percentage for each traffic class on an ArubaOS-CX switch?
Answer: Deficit Weighted Round Robin (DWRR)
DWRR allocates bandwidth to queues proportionally based on assigned weights, guaranteeing minimums for each class.
On an Aruba switch, which DSCP value is typically used to mark voice bearer (RTP) traffic per Aruba QoS best practices?
Answer: DSCP 46 (EF)
DSCP EF (Expedited Forwarding, value 46) is the standard marking for real-time voice traffic requiring low latency and jitter.
A trunk port on an Aruba CX switch is receiving frames tagged with VLAN 10, but VLAN 10 is not in the allowed VLAN list. What happens to these frames?
Answer: They are dropped by the switch
Frames tagged with a VLAN not in the trunk's allowed VLAN list are dropped at ingress on the trunk port.