HPE Aruba Certified Design Expert (ACDX) — Question 14

A company has an Aruba solution with a guest WLAN named exam_guest. A network administrator creates the guest WLAN with the wizard and does not change any of the default roles. The authentication server does not send particular role assignments for authorized users. The company wants to deny guests access to specific IP ranges after the guest authenticate.
For which role should the administrator create the rule to deny this traffic?

Answer options

• A. guest
• B. authorized
• C. exam_guest-guest-logon
• D. guest-logon

Correct answer: C

Explanation

The correct answer is C, as the exam_guest-guest-logon role is specifically designed for users who have authenticated through the guest WLAN. The other options, such as guest and guest-logon, do not apply to the authenticated user context needed to enforce the IP restrictions effectively, while authorized is not relevant since it pertains to users with different permissions.