Practice Test Geeks(ACSP) Aruba Certified Switching Professional Practice Test
← All ACSP Flashcard Decks

Switch Security Features Flashcards

7 cards from real ACSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Switch Security Features flashcards as text

  1. What is the function of DHCP snooping on an ArubaOS-CX switch?

    Answer: Filter rogue DHCP server responses on untrusted ports

    DHCP snooping validates DHCP messages and drops DHCP server responses (OFFER/ACK) arriving on untrusted ports, preventing rogue DHCP servers.

  2. Which type of port should be configured as 'trusted' in a DHCP snooping deployment?

    Answer: The uplink port connected to the legitimate DHCP server

    Uplink ports toward the legitimate DHCP server must be trusted so DHCP server responses are allowed; all other ports default to untrusted.

  3. What does Dynamic ARP Inspection (DAI) use to validate ARP packets on ArubaOS-CX switches?

    Answer: The DHCP snooping binding database

    DAI checks ARP packets against the DHCP snooping binding table to verify that IP-to-MAC mappings are legitimate before forwarding.

  4. On an ArubaOS-CX switch, which ports are exempt from DAI validation by default?

    Answer: Trusted ports

    DAI trusted ports (typically uplinks) bypass ARP inspection, while all untrusted ports have their ARP packets validated against the binding database.

  5. What is the purpose of IP Source Guard (IPSG) on ArubaOS-CX switches?

    Answer: Prevent IP spoofing by validating source IP against the DHCP snooping binding table

    IP Source Guard filters traffic on untrusted ports, dropping frames whose source IP does not match the IP-MAC-port binding in the DHCP snooping table.

  6. Which ArubaOS-CX feature can detect and disable ports receiving their own BPDUs (indicating a potential loop or rogue switch)?

    Answer: BPDU Guard

    BPDU Guard err-disables a port configured as an edge port when it receives any BPDU, protecting against rogue switches being connected to access ports.

  7. What is the difference between BPDU Guard and BPDU Filter on ArubaOS-CX switches?

    Answer: BPDU Guard disables the port on receipt; BPDU Filter silently drops BPDUs in both directions

    BPDU Guard err-disables the port if any BPDU is received, while BPDU Filter suppresses sending and receiving BPDUs without shutting down the port.