HPE Aruba Certified Network Security Expert (ACNSX) — Question 4

A company has an existing wireless solution involving Aruba APs and Mobility controllers running 8.4 code. The solution leverages a third-party AAA solution. The company is replacing existing access switches with AOS-CX 6300 and 6400 switches. The company wants to leverage the same security and firewall policies for both wired and wireless traffic.
Which solution should the company implement?

Answer options

• A. RADIUS dynamic authorization
• B. Downloadable user roles
• C. IPSec
• D. User-based tunneling

Correct answer: D

Explanation

The correct answer is D, User-based tunneling, as it allows for consistent security policies across both wired and wireless networks by creating a secure tunnel for user traffic. Options A and B do not provide the necessary level of integration for managing security policies across both mediums, while C, IPSec, is more suited for securing network layer communications rather than user-specific policies.