HPE Aruba Certified Associate (ACA) – Network Security — Question 39

A large multinational financial institution has contracted you to design a new full-stack wired and wireless network for their new 6-story regional office building. The bottom two floors of this facility will be retail space for a large banking branch. The upper floors will be carpeted office space for corporate users, each floor being approximately 100,000 sq ft (9290 sq m). Data centers are all offsite and will be out of scope for this project. The customer is underserved by its existing L2-based network infrastructure and would like to take advantage of modem best practices in the new design. The network should be fully resilient and fault-tolerant, with dynamic segmentation at the edge.
The retail space will include public guest Wi-Fi access. Retail associates will have corporate tablets for customer service, and there will be a mix of wired and wireless devices throughout the retail floors. The corporate users will primarily use wireless for connectivity, but several wired clients, printers, and hard VoIP phones will be in use.
The customer is also planning on renovating the corporate office space in order to take advantage of ‘smart office’ technology. These improvements will drive blue-dot wayfinding, presence analytics, and other location-based services.
The client decided that wired headless devices would be authenticated using Mac Authentication and would have RADIUS attributes sent back to the NAD to assign VLAN and port access parameters to the authentication session on the switch port.
What would be critical in making this a successful deployment? (Choose two.)

Answer options

Correct answer: A, C

Explanation

The correct answers are A and C. DHCP is crucial for assigning IP addresses to devices on the network, facilitating connectivity for both wired and wireless clients. ClearPass is essential for managing authentication and access control, especially for wired headless devices using Mac Authentication. Options B and D are less critical in this scenario; Mobility Gateway is not specifically necessary for the requirements outlined, and while Airwave can assist in network management, it does not directly impact the immediate deployment needs for authentication and IP addressing.