Aruba (ACSP): Certified Switching Professional Sample Questions
Advanced Sample Questions
What is the default switch configuration mode in Aruba switches?
- A. Interface Configuration Mode
- B. VLAN Configuration Mode
- C. Global Configuration Mode
- D. Spanning Tree Configuration Mode
Answer: C. Global Configuration Mode
Explanation: The default configuration mode in Aruba switches is the Global Configuration Mode, which is used to configure global settings and parameters that affect the entire switch.
How does an Aruba switch handle multiple VLANs on a single interface?
- A. Inter-VLAN Routing
- B. VLAN Translation
- C. VLAN Trunking
- D. VLAN Switching
Answer: C. VLAN Trunking
Explanation: Aruba switches support VLAN Trunking, which allows multiple VLANs to be transmitted over a single interface. This allows for efficient use of network resources and increased security.
How can you secure communication between two Aruba switches in a network?
- A. Disable unused switch ports
- B. Enable 802.1x authentication
- C. Configure a VLAN Trunk between the switches
- D. Enable Spanning Tree Protocol
Answer: B. Enable 802.1x authentication
Explanation: 802.1x authentication can be used to secure communication between two Aruba switches in a network. This protocol requires authentication of network devices before they are allowed to communicate, adding an extra layer of security to the network.
What is the function of the Spanning Tree Protocol (STP) in an Aruba switch network?
- A. To prevent loops in the network
- B. To increase network performance
- C. To control broadcast traffic in the network
- D. To improve network reliability
Answer: A. To prevent loops in the network
Explanation: The Spanning Tree Protocol is used to prevent loops in a network by blocking redundant switch ports and forming a tree-like network topology. This ensures that network traffic is properly directed and prevents any loops that may cause network downtime.
How does Aruba switch handle port security?
- A. By configuring MAC address filters
- B. By disabling unused switch ports
- C. By enabling 802.1x authentication
- D. By configuring VLAN Trunks
Answer: A. By configuring MAC address filters
Explanation: Aruba switches support port security, which allows administrators to configure MAC address filters on switch ports. This restricts the number of MAC addresses that are allowed to access the network through a particular port, providing an extra layer of security and reducing the risk of unauthorized access.
What is the function of the Virtual Router Redundancy Protocol (VRRP) in an Aruba switch network?
- A. To increase network performance
- B. To provide redundant default gateways for end devices
- C. To improve network reliability
- D. To control broadcast traffic in the network
Answer: B. To provide redundant default gateways for end devices
Explanation: VRRP is a protocol that provides redundant default gateways for end devices in a network. It allows for automatic failover in case of a gateway failure, providing increased network availability and reliability.
What is the function of the Link Aggregation Control Protocol (LACP) in an Aruba switch network?
- A. To combine multiple physical links into a single logical link
- B. To provide redundant default gateways for end devices
- C. To increase network performance
- D. To control broadcast traffic in the network
Answer: A. To combine multiple physical links into a single logical link
Explanation: LACP is a protocol used to combine multiple physical links into a single logical link, providing increased bandwidth and improved network resiliency. This allows for efficient use of network resources and improved network performance.
What is the purpose of Spanning Tree Protocol (STP) in an Aruba switch network?
- A. To eliminate broadcast storms
- B. To prevent loops in the network
- C. To increase network performance
- D. To provide redundant default gateways for end devices
Answer: B. To prevent loops in the network
Explanation: STP is a protocol used to prevent loops in a network by disabling unnecessary network paths. This ensures that network traffic flows in a consistent and predictable manner, reducing the risk of network failures and improving network reliability.
What is the purpose of VLAN Trunking Protocol (VTP) in an Aruba switch network?
- A. To provide a secure connection between switches
- B. To manage VLAN configuration across multiple switches
- C. To control broadcast traffic in the network
- D. To increase network performance
Answer: B. To manage VLAN configuration across multiple switches
Explanation: VTP is a protocol used to manage VLAN configuration across multiple switches in a network. It allows for consistent and centralized management of VLANs, reducing the risk of configuration errors and improving network efficiency.
What is the purpose of the Address Resolution Protocol (ARP) in an Aruba switch network?
- A. To map IP addresses to physical addresses
- B. To provide a secure connection between switches
- C. To manage VLAN configuration across multiple switches
- D. To control broadcast traffic in the network
Answer: A. To map IP addresses to physical addresses
Explanation: ARP is a protocol used to map IP addresses to physical addresses (MAC addresses) in a network. This allows for efficient and reliable communication between devices, improving network performance and reducing the risk of network failures.
Basic Sample Questions
Question 1: Which of the following statement is correct regarding ACLs and TCAM usage?
- A. Apply an ACL to a group of ports that consumes the same resources as specific ACE entries
- B. Use object groups that consume the same resources as specific ACE entries
- C. Compression is automatically enabled for ASIC TCAMs on AOS-CX switches
- D. Apply an ACL to a group of VLANs consumes the same resources as specific ACE entries
Correct Answer: B
Question 2: An administrator is configuring BGP on two different routers and has two connections to a service provider. In order to influence which local router a service provider will use to reach specific routes, which of the following BGP metrics should the administrator configure?
- A. Weight
- B. Multiple exit discriminator
- C. Local preference
- D. Origin
Correct Answer: B
Question 3: Area 0 and Area 1 are connected by an ABR in a network. An area 0 summarized route is configured by a network engineer. As a designated router (DR), the ABR connects area 1 to the segment. Which LSA type is assigned to this route when the summarized route is advertised into area 1 by the ABR?
- A. LSA 1
- B. LSA 4
- C. LSA 3
- D. LSA 2
Correct Answer: B
Question 4: Approximately 1,000 other SNMP-capable devices are being managed by NetEdit in a network with 700 AOS-CX switches. In addition to monitoring all the devices and seeing a topology picture of how they are connected, which management solution should the company use?
- A. NetEdit
- B. Aruba AirWave
- C. Aruba Activate
- D. Network Analysis Engine (NAE)
Correct Answer: A
Question 5: During the implementation of user-based tunneling, administrators are concerned about the security of the control plane connection between an AOS-CX switch and a Mobility Controller (MC). How must the administrator protect this traffic?
- A. IPSec with a digital certificate
- B. GRE with a pre-shared key
- C. PAPI with an MD5 pre-shared key
- D. IPSec with a pre-shared key
Correct Answer: C
Question 6: Switches with the AOS-CX 6300 are being replaced by older access layer switches by a network administrator. Which of the following virtual switching technology can the administrator implement with this solution?
- A. Both VSF and VSX
- B. Only Backplane stacking
- C. Only VSF
- D. Only VSX
Correct Answer: C
Question 7: NetEdit is being installed by a network administrator. What is required on the AOS-CX switches in order for NetEdit to manage them? (Choose two.)
- A. Enabling telnet
- B. Defining an admin user password
- C. Defining the HTTPS user group
- D. Enabling the RESTful API for read and write access
- E. Enabling SFTP
Correct Answer: BD
Question 8: Which of the following are the best practices when implementing VSX on AOS-CX switches? (Choose two.)
- A. The ISL lag must use the default MTU size.
- B. Timers must be left at their default values.
- C. The default system MAC addresses must be used.
- D. The keepalive connection must use a direct layer-3 connection.
- E. The ISL lag must use at least 10GbE links or faster.
Correct Answer: BD
Question 9: It is important for an administrator to keep track of what configuration changes have been made on a switch. What must the administrator be implementing for seeing the configuration changes on an AOS-CX switch?
- A. AAA authorization
- B. Network Analysis Engine (NAE)
- C. AAA authentication
- D. VSX synchronization logging
Correct Answer: B
Question 10: Which of the following statements is correct about the rate-limiting and egress queue shaping on AOS-CX switches?
- A. Only a traffic rate and burst size can be defined for a queue
- B. Limits can be defined only for broadcast and multicast traffic
- C. Rate limiting and egress queue shaping can be used to restrict inbound traffic
- D. Rate limiting and egress queue shaping can be applied globally
Correct Answer: A
Question 11: During the implementation of user-based tunneling, administrators are concerned about the security of the control plane connection between an AOS-CX switch and a Mobility Controller (MC). How must the administrator protect this traffic?
- A. IPSec with a digital certificate
- B. GRE with a pre-shared key
- C. PAPI with an MD5 pre-shared key
- D. IPSec with a pre-shared key
Correct Answer: C
Question 12: Which of the given ways is correct for associating a VRF instance to either a VLAN or an interface?
- A. Switch(config)# interface <interface-ID> Switch(config-if)# vlan access <VLAN-ID> vrf attach <vrf-name>
- B. Switch(config)# vlan <VLAN-ID> vrf attach < vrf-name >
- C. Switch(config)# vlan <VLAN-ID> Switch(config-vlan-<VLAN-ID># vrf attach < vrf-name >
- D. Switch(config)# vlan <VLAN-ID> vrf < vrf-name >
Correct Answer: C
Question 13: How does NetEdit verify that AOS-CX switches use a correct configuration state database when they use a temporary copy?
- A. Syntax validation
- B. Semantic validation
- C. Conformance validation
- D. Change validation
Correct Answer: D
Question 14: To make an NAE script run on AOS-CX switches what steps should a network administrator take?
- A. Deployment
- B. Schedule
- C. Plan
- D. Agent
Correct Answer: D
Question 15: Which of the following statements is correct about policy-based routing?
- A. Policies can only be applied to routed interfaces.
- B. Policies can be applied inbound and outbound.
- C. Monitoring of policy interfaces occurs every 60 seconds.
- D. Policy actions include routing permitting or dropping traffic.
Correct Answer: A
Question 16: Which of the following option correctly defines the process following for identifying a VLAN as a voice VLAN on an AOS-CX switch?
- A. Switch(config)# port-access lldp-group <LLDP-group-name> Switch(config-lldp-group)# vlan <VLAN-ID>
- B. Switch(config)# port-access role <role-name> Switch(config-pa-role)# vlan access <VLAN-ID>
- C. Switch(config)# vlan <VLAN-ID> Switch(config-vlan-<VLAN-ID>)# voice
- D. Switch(config)# vlan <VLAN-ID> voice
Correct Answer: C
Question 17: What is the correct statement regarding the tunneling of user traffic between AOS-CX switches and Aruba Mobility Controllers (MCs)?
- A. Uses IPSec for protecting the management and data traffic
- B. Uses IPSec for protecting the management traffic
- C. Supports only port-based tunneling
- D. Uses the same management protocol as Aruba APs
Correct Answer: C
Question 18: An administrator wants to implement a multicast solution in a multi-VLAN network. Which of the following options is true regarding the configuration of the switches in the network?
- A. IGMP snooping must be enabled on all interfaces on a switch to intelligently forward traffic
- B. IGMP requires joining and leaving messages to graft and prune multicast streams between switches
- C. IGMP must be enabled on all routed interfaces where multicast traffic will traverse
- D. IGMP must be enabled on all interfaces where multicast sources and receivers are connected
Correct Answer: B
Question 19: What is the proper way to prioritize voice traffic on an AOS-CX switch?
- A. By defining device profiles with QOS settings
- B. By placing it in the strict priority queue
- C. By implementing voice VLANs
- D. By implementing weighted fair queueing (WFQ)
Correct Answer: C
Question 20: Which of the following protocols are used by NetEdit to interact with third-party devices? (Choose two.)
- A. telnet
- B. SNMP
- C. SSH
- D. Restful API
- E. CDP
Correct Answer: BC
