HPE Aruba Certified Network Security Expert (ACNSX) — Question 28

Which statement is correct regarding ACLs and TCAM usage?

Answer options

• A. Applying an ACL to a group of ports consumes the same resources as specific ACE entries
• B. Using object groups consumes the same resources as specific ACE entries
• C. Compression is automatically enabled for ASIC TCAMs on AOS-CX switches
• D. Applying an ACL to a group of VLANs consumes the same resources as specific ACE entries

Correct answer: B

Explanation

The correct answer is B because using object groups allows for the aggregation of ACE entries, leading to more efficient resource usage. Options A and D are incorrect as they imply that applying ACLs to multiple entities consumes the same resources as individual entries, which is not the case. Option C is also incorrect; while AOS-CX switches may have compression capabilities, it is not automatically enabled for ASIC TCAMs.