HPE Aruba Certified Network Security Expert (ACNSX) — Question 63

An administrator wants to implement dynamic segmentation policies. The network consists of AOS-CX and Aruba gateways.
Which type of forwarding should the administrator implement for users that already connect via wireless, but will also be connecting on Ethernet switch ports?

Answer options

• A. User-based tunneling (UBT)
• B. Port-based tunneling (PBT)
• C. Switch-to-switch tunneling (SST)
• D. Local switching

Correct answer: A

Explanation

User-based tunneling (UBT) is the correct choice as it allows for consistent policy application across different connection types. Port-based tunneling (PBT) is specific to switch ports and does not accommodate wireless connections, while switch-to-switch tunneling (SST) is not applicable for user-specific policies. Local switching does not facilitate dynamic segmentation in the same way that UBT does.