ACSP Network Monitoring and Management 2 — Questions and Answers
Question 1: An administrator wants to monitor real-time traffic flows on an Aruba switch without impacting production traffic. Which feature should they use?
- Port mirroring (SPAN) (Correct answer)
- RSPAN across VLANs
- ERSPAN over GRE tunnel
- NetFlow sampling at 1:1000
Correct answer: Port mirroring (SPAN)
Port mirroring (SPAN) copies traffic from a source port to a monitor port in real time without impacting the forwarded traffic.
Question 2: Which SNMPv3 security level provides both authentication and encryption?
- noAuthNoPriv
- authNoPriv
- authPriv (Correct answer)
- privOnly
Correct answer: authPriv
authPriv uses both an authentication protocol (MD5 or SHA) and a privacy protocol (DES or AES) to secure SNMP communications.
Question 3: A network engineer needs to track when interfaces go up or down on Aruba switches. What is the most efficient method?
- Polling SNMP OID ifOperStatus every 30 seconds
- Configuring SNMP traps for linkUp and linkDown events (Correct answer)
- Using syslog with severity level 7 (debug)
- Running a script with repeated SSH show interface commands
Correct answer: Configuring SNMP traps for linkUp and linkDown events
SNMP traps send immediate event-driven notifications when interface state changes occur, eliminating the latency and overhead of polling.
Question 4: Which Aruba Central feature allows an administrator to set up automated alerts when a switch CPU exceeds a defined threshold?
- AI Insights
- Threshold-based alerts in the Alerts & Events module (Correct answer)
- Audit Trails
- Traffic Analysis
Correct answer: Threshold-based alerts in the Alerts & Events module
Aruba Central's Alerts & Events module allows configuring threshold-based alerts that trigger notifications when metrics like CPU utilization exceed defined limits.
Question 5: What does the 'debug destination' command control on an Aruba switch?
- Where debug log output is sent (session, syslog, or buffer) (Correct answer)
- The severity level of debug messages
- The interface on which debugging is enabled
- The SNMP trap destination server
Correct answer: Where debug log output is sent (session, syslog, or buffer)
The 'debug destination' command specifies where debug output is directed, such as to the current session, a buffer, or a syslog server.
Question 6: Which protocol does Aruba AirWave use to collect performance data from managed switches?
- RADIUS
- SNMP (Correct answer)
- TACACS+
- OSPF
Correct answer: SNMP
AirWave uses SNMP to collect device performance metrics, interface statistics, and configuration data from managed Aruba switches.
Question 7: An Aruba switch is generating excessive syslog messages. Which command limits syslog to only critical and above messages?
- logging severity critical (Correct answer)
- logging level critical
- logging severity-filter 2
- logging facility critical
Correct answer: logging severity critical
The 'logging severity critical' command filters syslog output to only transmit messages at the critical severity level (2) and above (emergency, alert).
