Question 6 of 70
You are setting up user based tunneling (UBT) between access layer AOS-CX switches and AOS-10 gateways. You have selected reserved (local) VLAN mode.
Tunneled devices include IoT devices, which should be assigned to:
*Roles: iot on the switches and iot-wired on the gateways
*VLAN: 64, for which the gateways route traffic
IoT devices connect to the access layer switches’ edge ports, and the access layer switches reach the gateways on their uplinks.
Where must you configure VLAN 64?
Correct Answer: A

Question 7 of 70
A company has a third-party security appliance deployed in its data center. The company wants to pass all traffic for certain clients through that device before forwarding that traffic toward its ultimate destination.
Which AOS-CX switch technology fulfills this use case?
Correct Answer: A

Question 8 of 70
You manage AOS-10 APs with HPE Aruba Networking Central. A role is configured on these APs with these rules:
1. Allow udp on port 67 to any destination
2. Allow any to network 10.1.6.0/23
3. Deny any to network 10.1.0.0/16 + log
4. Deny any to network 10.0.0.0/8
5. Allow any to any destination
You add this new rule immediately before rule 2:
Deny ssh to network 10.1.4.0/23 + denylist
After this change, what happens when a client assigned to this role sends SSH traffic to 10.1.11.42?
Correct Answer: B

Question 9 of 70
HPE Aruba Networking ClearPass Device Insight (CPDI) could not classify some endpoints using system and user rules. Using machine learning, it did assign those endpoints to a cluster and discover a recommendation. In which of these circumstances does CPDI automatically classify the endpoints based on that recommendation?
Correct Answer: C

Question 10 of 70
You are setting up HPE Aruba Networking SSE. Which use case requires you to apply a non-default posture in a rule?
Correct Answer: B