HPE Aruba Certified Professional (ACP) – SD-WAN — Question 133

What should you configure for an interface connected to a device you cannot trust to assign DSCP markings? (Choose two.)

Answer options

Correct answer: B, C

Explanation

The correct choices are B and C because 'qos trust none' ensures that the interface does not trust any incoming DSCP markings, and applying a classifier-based policy allows you to define how traffic is prioritized. Options A and D are incorrect as they either rely on trusting incoming traffic or do not provide a method for handling untrusted sources.