HPE Aruba Certified Network Security Expert (ACNSX) — Question 43

An administrator is concerned about the security of the control plane connection between an AOS-CX switch and an Aruba Mobility Controller (MC) when implementing user-based tunneling. How should the administrator protect this traffic?

Answer options

• A. IPSec with a digital certificate
• B. GRE with a pre-shared key
• C. PAPI with an MD5 pre-shared key
• D. IPSec with a pre-shared key

Correct answer: C

Explanation

The correct answer is C, as PAPI with an MD5 pre-shared key provides adequate protection for control plane traffic in this configuration. Options A and D utilize IPSec, which is not the preferred method here, and option B uses GRE, which lacks sufficient security for this purpose.