ACSP - Aruba Certified Switching Professional Network Monitoring and Management Questions and Answers — Questions and Answers
Question 1: A network administrator needs to implement a monitoring solution on an Aruba CX core switch to analyze traffic patterns and identify top talkers. The solution must have minimal impact on the switch's CPU. Which technology is most suitable for this requirement?
- Port Mirroring (SPAN)
- sFlow (Correct answer)
- SNMP Polling
- Syslog
Correct answer: sFlow
sFlow is a packet sampling technology designed for high-speed networks. It statistically samples packets and sends the samples to a collector, providing visibility into traffic patterns with very low CPU overhead on the switch. Port Mirroring copies every packet, which can be resource-intensive. SNMP is for polling device status and metrics, not deep traffic analysis. Syslog is for event messages.
Question 2: An IT department uses Aruba NetEdit to manage its fleet of ArubaOS-CX switches. What is a primary function of Aruba NetEdit?
- Real-time deep packet inspection and threat analysis.
- Wireless LAN planning and RF heat map generation.
- Orchestrating multi-switch configuration changes with validation and auditing. (Correct answer)
- On-box scripting and automated remediation of network events.
Correct answer: Orchestrating multi-switch configuration changes with validation and auditing.
Aruba NetEdit is a network management platform designed to simplify and automate the configuration, validation, deployment, and auditing of ArubaOS-CX switches. It allows administrators to orchestrate changes across multiple devices, validate configurations for consistency, and maintain an audit trail.
Question 3: A security policy requires that all SNMP traffic to and from Aruba CX switches must be authenticated to verify the source and encrypted to protect the data in transit. Which SNMP version and security level MUST be configured?
- SNMPv2c
- SNMPv3 with noAuthNoPriv
- SNMPv3 with authNoPriv
- SNMPv3 with authPriv (Correct answer)
Correct answer: SNMPv3 with authPriv
SNMPv3 is the only version that supports strong authentication and encryption. The 'authPriv' (Authentication and Privacy) security level ensures that messages are both authenticated (using MD5 or SHA) and encrypted (using DES or AES), meeting the stated security requirements. 'authNoPriv' only provides authentication, and 'noAuthNoPriv' provides neither.
Question 4: An administrator is troubleshooting a fiber optic link and needs to check the health of the SFP+ transceiver, including its real-time transmit (Tx) power and receive (Rx) power levels. Which ArubaOS-CX feature provides this information?
- LLDP (Link Layer Discovery Protocol)
- NetFlow
- Digital Optical Monitoring (DOM) (Correct answer)
- Cable Diagnostics (TDR)
Correct answer: Digital Optical Monitoring (DOM)
Digital Optical Monitoring (DOM), also known as Digital Diagnostic Monitoring (DDM), is a feature in optical transceivers that allows for real-time monitoring of key parameters such as optical Tx power, optical Rx power, temperature, and supply voltage. This is the correct tool for checking the physical health of a fiber link at the transceiver level.
Question 5: A network engineer wants to proactively monitor an Aruba CX switch for intermittent high CPU utilization. When the CPU exceeds 80% for more than five minutes, the switch should automatically collect detailed process information and send an alert. Which built-in AOS-CX feature is best suited for this type of intelligent, on-box monitoring and automation?
- Network Analytics Engine (NAE) (Correct answer)
- Remote Syslog Server
- Port Mirroring
- SNMP Traps
Correct answer: Network Analytics Engine (NAE)
The Network Analytics Engine (NAE) is a built-in framework in AOS-CX that allows for monitoring and troubleshooting through simple scripting. NAE agents can monitor system states (like CPU utilization), and when a condition is met, they can trigger actions like collecting more data or sending customized alerts, making it perfect for this scenario.
Question 6: Which command will configure an ArubaOS-CX switch to send all log messages of severity 'warning' and higher to a remote syslog server located at 192.168.50.100?
- syslog server 192.168.50.100 severity warning
- logging host 192.168.50.100 level warn
- logging 192.168.50.100 severity warning (Correct answer)
- log server 192.168.50.100 level warning
Correct answer: logging 192.168.50.100 severity warning
The correct command syntax in ArubaOS-CX to configure a remote syslog server is `logging <IP_ADDRESS> severity <SEVERITY_LEVEL>`. Setting the severity to 'warning' ensures that messages with a severity of warning, error, critical, alert, and emergency are all sent to the specified server.
