HPE Aruba Certified Network Security Expert (ACNSX) — Question 110

A company has an existing wireless solution involving Aruba APs and Aruba gateway. The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?

Answer options

• A. IPSec
• B. User-based tunneling
• C. RADIUS dynamic authorization
• D. Downloadable user roles

Correct answer: B

Explanation

The correct answer is B, User-based tunneling, as it allows for the same security policies to be applied to both wired and wireless traffic by creating a secure tunnel for user sessions. Other options like IPSec and RADIUS dynamic authorization do not provide the same level of integration for maintaining consistent policies across both traffic types, while downloadable user roles are more focused on role-based access rather than session tunneling.