An administrator wants to leverage always-on PoE on AOS-CX switches. Which statement is correct regarding this feature?
Answer : A
A company requires access by all users, guests, and employees to be authenticated. Employees will be
authenticated using 802.1X, whereas guests will be authenticated using captive portal. Which type of
authentication must be configured on an AOS-CX switch ports where both guests and employees connect?
Answer : C
Employees use 802.1x
The Aruba guest solution uses MAC-auth.
The Portal is not configured on the switch port.
What are best practices when implementing VSX on AOS-CX switches? (Choose two.)
Answer : B, D
An administrator will be replacing a campus switching infrastructure with AOS-CX switches that support VSX capabilities. The campus involves a core, as well as multiple access layers. Which feature should the
administrator implement to allow both VSX-capable core switches to process traffic sent to the default gateway in the campus VLANs?
Answer : D
Active gateway = both devices route/forward traffic VRRP = Active-standbye, only active member routes/forwards traffic
Understand the Active Gateway principle In a VSX system, active gateway provides redundant default gateway functionality for the end-hosts. The default gateway of the end-host is automatically handled by both the VSX systems.
Examine the network exhibit:

The ACL configuration defined on Core-1 is as follows:
If telnet was being used, which device connection would be permitted and functional in both directions?
(Choose two.)
Answer : B, D
CL3 - CL2 - drop on forward path by core1 cause match VLAN 20 and CL3 not CL1 as SRC IP
CL1 - CL2 - pass - no ACL cause forwarded by Access2
SR2 - CL2 - pass on forward path by core1 cause match VLAN 10
Drop on return path by core1 cause match VLAN 20 and no CL1 as SRC IP
SR1 - CL1 - pass on forward path by core1 cause match VLAN 10
pass on return path by core1 cause match VLAN 20 and CL1 as SRC IP
CL1 - CL3 - pass on forward path by core1 cause match VLAN 20 and CL1 as SRC IP
drop on return path by core1 cause match VLAN 20 and not CL1 but CL3 as SRC IP
An administrator wants to track what configuration changes were made on a switch. What should the
administrator implement to see the configuration changes on an AOS-CX switch?
Answer : B
An administrator is managing a pair of core AOS-CX switches configured for VSX. Connected to this core are pairs of aggregation layer AOS-CX switches configured for VSX. OSPF is running between the aggregation and core layers. To speed up OSPF convergence, the administrator has configured BFD between the core and aggregation switches.
What is a best practice the administrator should implement to reduce CPU processing on the switches if a BFD neighbor fails?
Answer : A