HPE Aruba Certified Network Security Expert (ACNSX) — Question 8

An administrator is replacing the current access switches with AOS-CX switches. The access layer switches must authenticate user and networking devices connecting to them. Some devices support no form of authentication, and some support 802.1X. Some ports have a VoIP phone and a PC connected to the same port, where the PC is connected to the data port of the phone and the phone's LAN port is connected to the switch.
Which statement is correct about this situation?

Answer options

• A. 802.1X must be configured to work in fallback mode
• B. Device fingerprinting is required for authentication
• C. The client-limit setting for port access needs to be changed
• D. Device mode should be implemented

Correct answer: C

Explanation

The correct answer is C because in scenarios where a VoIP phone and a PC share a port, the client-limit setting needs to be modified to accommodate multiple devices. Option A is incorrect as fallback mode is not necessary if the correct settings are applied. Option B is not applicable here as device fingerprinting is not required for this authentication method. Option D is incorrect because device mode implementation is not relevant to the issue at hand.