I85PREP
⌘ K
Aruba Switching Expert (Written) study materials
Aruba Switching Expert (Written) study resources

Aruba Switching Expert (Written) practice questions

One question at a time. Build your Aruba Switching Expert (Written) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Switching Fundamentals and Network Design

Which statement best describes the primary function of a Layer 2 switch in a network?

  1. It forwards frames between ports based on destination MAC addresses. Correct answer.
  2. It routes packets between subnets based on destination IP addresses.
  3. It terminates encrypted VPN tunnels from remote users.
  4. It translates private IP addresses to public IP addresses.

Explanation

A Layer 2 switch builds a MAC address table and forwards Ethernet frames out the port associated with the frame's destination MAC address. Routing between subnets, NAT, and VPN termination are functions of higher-layer devices or services.

Question 2Switching Fundamentals and Network Design

What is the default behavior of a switch port when it receives a frame with an unknown unicast destination MAC address?

  1. It holds the frame until the MAC address is learned.
  2. It discards the frame and sends an ICMP unreachable message.
  3. It forwards the frame only to the uplink port.
  4. It floods the frame out all ports in the same VLAN except the ingress port. Correct answer.

Explanation

When the destination MAC is not in the forwarding table, the switch floods the frame within the VLAN to all other ports so the destination can be reached. The destination's reply then allows the switch to learn its MAC address.

Question 3Switching Fundamentals and Network Design

A VLAN is best described as which of the following?

  1. A security policy applied to a firewall interface.
  2. A physical segment of cable shared by multiple hosts.
  3. A routing protocol used between Layer 3 switches.
  4. A logical broadcast domain that can span multiple switches. Correct answer.

Explanation

A VLAN creates a logical broadcast domain independent of physical location, allowing devices on different switches to share a broadcast domain while isolating them from other VLANs.

Question 4Switching Fundamentals and Network Design

On an 802.1Q trunk link, what is the purpose of the tag inserted into the Ethernet frame?

  1. It identifies the VLAN to which the frame belongs. Correct answer.
  2. It carries the source IP address for routing decisions.
  3. It encrypts the payload between switches.
  4. It records the frame's time-to-live value.

Explanation

The 802.1Q tag includes a VLAN identifier so the receiving switch can determine which VLAN the frame belongs to and forward it appropriately. It does not provide encryption or carry IP information.

Question 5Switching Fundamentals and Network Design

Which Spanning Tree Protocol state allows a port to learn MAC addresses but not forward user traffic?

  1. Blocking
  2. Listening
  3. Learning Correct answer.
  4. Forwarding

Explanation

In the Learning state a port populates the MAC address table from received frames but does not yet forward user data. Forwarding permits both learning and traffic, while Blocking and Listening do neither.

Question 6Switching Fundamentals and Network Design

What is the primary purpose of link aggregation (a LAG/trunk group) between two switches?

  1. To convert Layer 2 frames into Layer 3 packets.
  2. To increase bandwidth and provide redundancy across multiple physical links. Correct answer.
  3. To encrypt traffic traversing the inter-switch link.
  4. To assign IP addresses to switch ports automatically.

Explanation

Link aggregation bundles multiple physical links into one logical link, adding bandwidth and providing resilience if a member link fails. It does not change addressing or provide encryption.

Question 7Switching Fundamentals and Network Design

In a three-tier network design model, which layer is responsible for policy-based connectivity and inter-VLAN routing?

  1. Core layer
  2. Distribution layer Correct answer.
  3. Access layer
  4. Collapsed layer

Explanation

The distribution layer aggregates access switches and enforces policies such as routing between VLANs and access control. The access layer connects end devices, and the core provides high-speed transport.

Question 8Switching Fundamentals and Network Design

A switch has learned MAC address 00:11:22:33:44:55 on port 5. A frame arrives on port 9 with that same source MAC address. What does the switch do with its forwarding table?

  1. It floods the frame and clears the MAC table.
  2. It updates the entry to point to port 9. Correct answer.
  3. It keeps the entry on port 5 and drops the frame.
  4. It creates a second entry for the same MAC on port 9.

Explanation

When a frame's source MAC is already known but arrives on a different port, the switch updates the table entry to the new port, reflecting the device's current location. The MAC table holds one entry per MAC address.

Question 9Switching Fundamentals and Network Design

Two switches are connected by a trunk. VLAN 10 is allowed on the trunk, but the native VLAN is configured as VLAN 1 on one switch and VLAN 20 on the other. What is the likely result?

  1. All tagged VLANs are dropped on the link.
  2. Untagged traffic is placed into mismatched VLANs, causing connectivity problems. Correct answer.
  3. The trunk automatically negotiates a common native VLAN.
  4. Only VLAN 10 traffic is forwarded and all other traffic is blocked.

Explanation

The native VLAN carries untagged frames on an 802.1Q trunk. If the two ends disagree, untagged frames are classified into different VLANs, which can cause connectivity failures and VLAN-hopping risks.

Question 10Switching Fundamentals and Network Design

A network designer wants to prevent Layer 2 loops while keeping all links active for load sharing across multiple VLANs. Which technology best meets this requirement?

  1. Port security
  2. Rapid Spanning Tree Protocol (RSTP)
  3. Static MAC address binding
  4. Multiple Spanning Tree Protocol (MSTP) Correct answer.

Explanation

MSTP maps groups of VLANs to separate spanning-tree instances, allowing different VLANs to use different active paths while still preventing loops. RSTP provides fast convergence but uses a single topology for all VLANs.

Question 11Switching Fundamentals and Network Design

Which condition causes a spanning-tree root bridge election to favor a particular switch?

  1. The switch with the highest MAC address.
  2. The switch with the highest bridge priority value.
  3. The switch with the lowest bridge priority value. Correct answer.
  4. The switch with the most ports configured.

Explanation

Spanning tree elects the root bridge as the switch with the lowest bridge priority, using the lowest MAC address as a tiebreaker. Lower values are preferred for priority.

Question 12Switching Fundamentals and Network Design

A workstation connected to an access port cannot reach a server in another VLAN even though both VLANs exist on the same switch. What is the most likely missing configuration?

  1. A larger MTU on the trunk.
  2. A Layer 3 gateway or inter-VLAN routing configuration. Correct answer.
  3. A second physical cable to the workstation.
  4. Port security on the access port.

Explanation

Traffic between different VLANs requires Layer 3 forwarding, typically via an SVI or a router-on-a-stick gateway. Without an inter-VLAN routing configuration, the VLANs remain isolated broadcast domains.

Question 13Switching Fundamentals and Network Design

Which statement about an access port versus a trunk port is accurate?

  1. Both access and trunk ports always carry untagged frames only.
  2. A trunk port can only connect to a router, never to another switch.
  3. An access port carries multiple tagged VLANs, while a trunk carries one untagged VLAN.
  4. An access port carries traffic for a single VLAN, while a trunk carries multiple VLANs. Correct answer.

Explanation

An access port is assigned to one VLAN and typically sends untagged frames to end devices. A trunk port carries traffic for multiple VLANs, usually tagged with 802.1Q, between network devices.

Question 14Switching Fundamentals and Network Design

A designer is planning a collapsed core architecture for a small campus. Which characteristic describes this design?

  1. Access and core functions are eliminated entirely.
  2. Routing is disabled throughout the campus.
  3. Core and distribution functions are combined into a single layer. Correct answer.
  4. Each access switch connects directly to every other access switch.

Explanation

A collapsed core combines the core and distribution layers into one tier, reducing cost and complexity for smaller networks. Access switches still connect to this combined layer.

Question 15Switching Fundamentals and Network Design

What is the effect of configuring a switch port as an edge port (PortFast equivalent) in an RSTP network?

  1. The port is elected as the root port.
  2. The port is permanently blocked to prevent loops.
  3. The port becomes a trunk automatically.
  4. The port immediately transitions to forwarding, bypassing listening and learning. Correct answer.

Explanation

Edge ports connect to end devices and can transition directly to forwarding because they are not expected to create loops. Connecting a switch to an edge port can cause loops, so it should be used only for host connections.

Question 16Switching Fundamentals and Network Design

A network engineer wants to limit which source MAC addresses may appear on an access port. Which feature should be configured?

  1. Storm control
  2. Jumbo frames
  3. Port security Correct answer.
  4. Port mirroring

Explanation

Port security restricts the number and identity of source MAC addresses allowed on a port, and can take action when a violation occurs. Port mirroring copies traffic, storm control limits broadcast rates, and jumbo frames change MTU size.

Question 17Switching Fundamentals and Network Design

Which protocol provides loop-free Layer 2 topology by exchanging BPDUs between switches?

  1. STP Correct answer.
  2. LACP
  3. LLDP
  4. OSPF

Explanation

Spanning Tree Protocol exchanges bridge protocol data units to build a loop-free logical topology. LLDP is for neighbor discovery, LACP manages link aggregation, and OSPF is a Layer 3 routing protocol.

Question 18Switching Fundamentals and Network Design

A designer needs to carry voice and data traffic on the same access port with the phone tagging its own VLAN. Which configuration approach is appropriate?

  1. Configure the port as a voice VLAN with tagged voice traffic and untagged data traffic. Correct answer.
  2. Configure the port with port security disabled and no VLAN assignment.
  3. Configure the port as a trunk that allows only the voice VLAN.
  4. Configure the port as an access port in the voice VLAN only.

Explanation

A voice VLAN configuration lets the IP phone tag voice frames while data traffic from a connected PC remains untagged in the data VLAN. This keeps voice and data separated logically on a single port.

Question 19Switching Fundamentals and Network Design

Which statement about the MAC address table aging process is correct?

  1. Entries are removed only when the switch reboots.
  2. Entries are removed after a period of inactivity to keep the table current. Correct answer.
  3. Entries are removed whenever a broadcast frame is received.
  4. Entries never age out once learned.

Explanation

Dynamic MAC entries age out after an inactivity timer so that stale entries are removed and the table reflects current device locations. Static entries do not age out.

Question 20Switching Fundamentals and Network Design

A network uses MSTP with two instances. VLANs 10 and 20 are mapped to instance 1, and VLANs 30 and 40 to instance 2. What benefit does this mapping provide?

  1. It disables STP for the mapped VLANs.
  2. It allows different instances to use different active paths for load balancing. Correct answer.
  3. It requires all VLANs to share one MAC address table.
  4. It forces all VLANs onto a single forwarding path.

Explanation

Mapping VLANs to separate MSTP instances lets each instance compute its own topology, so different VLAN groups can use different active links for load sharing. All instances still prevent loops.

Question 21Switching Fundamentals and Network Design

A switch receives a tagged frame on a trunk port for a VLAN that is not in the allowed VLAN list for that trunk. What happens to the frame?

  1. It is flooded to all access ports.
  2. It is forwarded normally to the VLAN.
  3. It is retagged into the native VLAN and forwarded.
  4. It is dropped. Correct answer.

Explanation

The allowed VLAN list on a trunk acts as a filter; frames tagged for VLANs not permitted on the trunk are discarded. This limits broadcast propagation and improves control over which VLANs traverse a link.

Question 22Switching Fundamentals and Network Design

An engineer observes that a single aggregated link is carrying all traffic on one member while the others are idle. Which is the most likely cause?

  1. The trunk is using the wrong native VLAN.
  2. The hashing algorithm distributes based on flow characteristics that map to one member. Correct answer.
  3. Spanning tree has blocked the other members.
  4. The LAG is configured as an access port.

Explanation

Link aggregation distributes frames using a hash of flow attributes such as source and destination MAC or IP. If most traffic consists of few flows that hash to the same member, other members remain underused.

Question 23Switching Fundamentals and Network Design

A design requires that a failed uplink be replaced within sub-second timing while maintaining a loop-free Layer 2 topology. Which combination best satisfies this requirement?

  1. Static routing only
  2. Port mirroring with redundant uplinks
  3. STP with long timers and a single uplink
  4. RSTP with redundant uplinks Correct answer.

Explanation

RSTP provides rapid convergence through proposal/agreement mechanisms and alternate port roles, allowing fast failover while still preventing loops. Classic STP with long timers converges much more slowly.

Question 24Switching Fundamentals and Network Design

A network designer must prevent unauthorized DHCP servers from handing out addresses on access ports. Which Layer 2 feature addresses this requirement?

  1. Storm control
  2. Dynamic ARP inspection alone
  3. DHCP snooping with trusted uplink ports Correct answer.
  4. LLDP-MED

Explanation

DHCP snooping classifies ports as trusted or untrusted and drops server-originated DHCP offers on untrusted access ports, blocking rogue DHCP servers. Uplinks toward legitimate servers are marked trusted.

Question 25VLANs, Trunking, and Layer 2 Segmentation

On Aruba AOS-CX switches, which statement describes the default VLAN behavior on a factory-default configuration?

  1. All access ports are members of VLAN 1, which is the default VLAN. Correct answer.
  2. No VLAN exists until the administrator creates one explicitly.
  3. The default VLAN is VLAN 4094 and it carries untagged traffic.
  4. VLAN 1 is administratively disabled until an access port is assigned to it.

Explanation

AOS-CX ships with VLAN 1 defined as the default VLAN, and all ports are members of it until they are reassigned. VLAN 1 cannot be deleted, though it can be restricted.

Question 26VLANs, Trunking, and Layer 2 Segmentation

Which VLAN ID range is reserved and cannot be assigned to user traffic on Aruba AOS-CX switches?

  1. 1 through 1001
  2. 3968 through 4094
  3. 4095 only
  4. 1002 through 1005 Correct answer.

Explanation

VLAN IDs 1002-1005 are reserved for legacy Token Ring and FDDI VLANs and are not available for normal Ethernet use. Usable IDs run from 1 to 4094.

Question 27VLANs, Trunking, and Layer 2 Segmentation

A port configured with `vlan trunk allowed 10,20` receives an untagged frame. How does an Aruba AOS-CX switch handle it by default?

  1. It drops the frame because no native VLAN is configured on the trunk. Correct answer.
  2. It forwards the frame in VLAN 1, the default native VLAN.
  3. It floods the frame to all allowed VLANs.
  4. It forwards the frame in VLAN 10 as the lowest allowed VLAN.

Explanation

When a trunk has no native VLAN configured, untagged ingress traffic has no VLAN association and is dropped. A native VLAN must be explicitly set for untagged traffic to be accepted.

Question 28VLANs, Trunking, and Layer 2 Segmentation

Which command assigns VLAN 30 as the native VLAN on interface 1/1/5 of an Aruba AOS-CX switch?

  1. trunk native-vlan 30
  2. switchport native vlan 30
  3. vlan trunk native 30 Correct answer.
  4. native vlan 30

Explanation

In AOS-CX interface context, `vlan trunk native 30` sets the native VLAN for untagged traffic on a trunk port. It is applied inside the interface configuration context.

Question 29VLANs, Trunking, and Layer 2 Segmentation

What is the primary purpose of the Spanning Tree Protocol on a Layer 2 switched network?

  1. To load-balance traffic evenly across all redundant links.
  2. To prevent Layer 2 forwarding loops by blocking redundant paths. Correct answer.
  3. To authenticate hosts before they are placed in a VLAN.
  4. To translate VLAN tags between different trunk encapsulations.

Explanation

STP builds a loop-free logical topology by placing redundant ports in a blocking state, preventing broadcast storms and MAC table instability. It does not balance traffic or handle authentication.

Question 30VLANs, Trunking, and Layer 2 Segmentation

On an Aruba AOS-CX switch, what does the `voice` keyword do when applied to a VLAN on an access port?

  1. It marks the VLAN as a voice VLAN so tagged voice traffic is accepted on the access port. Correct answer.
  2. It disables data VLAN forwarding while voice is active.
  3. It assigns the highest QoS priority to all traffic on the port.
  4. It encrypts all voice traffic traversing the port.

Explanation

The voice VLAN feature allows a port to carry untagged data traffic on the access VLAN while accepting tagged voice traffic on a separate voice VLAN. It does not encrypt traffic or disable data forwarding.

Question 31VLANs, Trunking, and Layer 2 Segmentation

An administrator issues `vlan 50` then `name Sales` in global configuration on AOS-CX. What is the effect?

  1. VLAN 50 is created and all Sales hosts are auto-assigned.
  2. VLAN 50 is created with the description Sales. Correct answer.
  3. The command fails because names cannot contain uppercase letters.
  4. A VLAN named Sales is created with ID 50 only if it already existed.

Explanation

Creating a VLAN and naming it assigns a human-readable description to VLAN 50. Names are labels only and do not affect port membership automatically.

Question 32VLANs, Trunking, and Layer 2 Segmentation

Which interface type carries traffic for multiple VLANs using 802.1Q tags on Aruba AOS-CX?

  1. A loopback interface
  2. A trunk interface Correct answer.
  3. An access interface
  4. A routed-only interface

Explanation

Trunk interfaces carry multiple VLANs and use 802.1Q tags to identify VLAN membership per frame. Access interfaces carry a single untagged VLAN.

Question 33VLANs, Trunking, and Layer 2 Segmentation

Two switches are connected by a trunk. Frames in VLAN 20 must cross the link with an 802.1Q tag. Which configuration on the AOS-CX trunk port ensures this?

  1. vlan trunk allowed all with native VLAN 1
  2. vlan access 20 only
  3. vlan trunk allowed 20 with no native VLAN set to 20 Correct answer.
  4. vlan trunk allowed 20 with native VLAN set to 20

Explanation

VLAN 20 traffic is tagged on the trunk as long as VLAN 20 is in the allowed list and is not the native VLAN. If 20 were the native VLAN, its frames would cross untagged.

Question 34VLANs, Trunking, and Layer 2 Segmentation

What is the purpose of the native VLAN on an 802.1Q trunk?

  1. It is the only VLAN allowed to carry tagged frames.
  2. It is used exclusively for management traffic.
  3. It is the VLAN assigned to the trunk's loopback address.
  4. It carries untagged frames across the trunk link. Correct answer.

Explanation

The native VLAN is the VLAN whose frames are transmitted untagged on an 802.1Q trunk. All other allowed VLANs are tagged.

Question 35VLANs, Trunking, and Layer 2 Segmentation

Which feature prevents a switch port from being automatically placed in a VLAN based on RADIUS attributes without authentication?

  1. LLDP-MED
  2. DHCP snooping
  3. STP root guard
  4. 802.1X port-based access control Correct answer.

Explanation

802.1X authenticates the supplicant before the port is authorized and a VLAN can be assigned dynamically. Without successful authentication, the port stays in an unauthorized state.

Question 36VLANs, Trunking, and Layer 2 Segmentation

AOS-CX uses which command to display the VLAN membership of all ports?

  1. show vlan membership
  2. show running-config vlan
  3. show vlan Correct answer.
  4. show interfaces trunk

Explanation

`show vlan` lists VLANs and the ports assigned to each, including tagged and untagged membership. It is the standard verification command for VLAN-to-port mapping.

Question 37VLANs, Trunking, and Layer 2 Segmentation

What happens when a frame with an 802.1Q tag for a VLAN not in the trunk's allowed list arrives on the trunk?

  1. The frame is dropped. Correct answer.
  2. The frame is flooded to all allowed VLANs.
  3. The frame is retagged into VLAN 1.
  4. The frame is forwarded in the native VLAN.

Explanation

A trunk only accepts frames for VLANs in its allowed list. Tags for other VLANs are not recognized on that link, so the frames are discarded.

Question 38VLANs, Trunking, and Layer 2 Segmentation

Which statement about VLANs and broadcast domains is accurate?

  1. Trunks merge all carried VLANs into one broadcast domain.
  2. Broadcast domains are defined only by subnet masks, not VLANs.
  3. All VLANs on a switch share one broadcast domain.
  4. Each VLAN is a separate broadcast domain. Correct answer.

Explanation

A VLAN defines a Layer 2 broadcast domain; broadcasts are confined to ports in the same VLAN. Trunks carry multiple VLANs but keep their broadcast domains separate.

Question 39VLANs, Trunking, and Layer 2 Segmentation

An engineer wants to restrict a trunk to carry only VLANs 10, 20, and 30. Which AOS-CX command accomplishes this?

  1. vlan allowed 10-30
  2. vlan trunk native 10,20,30
  3. switchport trunk vlan 10,20,30
  4. vlan trunk allowed 10,20,30 Correct answer.

Explanation

`vlan trunk allowed` with a comma-separated list limits the trunk to those VLANs. Only listed VLANs will be tagged across the link.

Question 40VLANs, Trunking, and Layer 2 Segmentation

What is the result of issuing `vlan trunk allowed all` on an AOS-CX trunk port?

  1. Only VLAN 1 is allowed on the trunk.
  2. All VLANs currently defined and future VLANs are allowed on the trunk. Correct answer.
  3. All VLANs are allowed except the native VLAN.
  4. The trunk is converted to an access port.

Explanation

`allowed all` permits every VLAN, including ones created later, to traverse the trunk. This is the default behavior for a trunk unless an explicit list is configured.

Question 41VLANs, Trunking, and Layer 2 Segmentation

Which protocol provides per-VLAN spanning tree instances on Aruba AOS-CX switches to allow load sharing across redundant links?

  1. RSTP
  2. MSTP Correct answer.
  3. STP
  4. LLDP

Explanation

Multiple Spanning Tree Protocol maps VLANs to multiple instances, letting different VLANs use different forwarding topologies for load sharing. RSTP and classic STP run a single topology for all VLANs.

Question 42VLANs, Trunking, and Layer 2 Segmentation

Which command on AOS-CX creates a VLAN and enters its context in one step?

  1. interface vlan 100
  2. vlan 100 Correct answer.
  3. vlan database 100
  4. create vlan 100

Explanation

`vlan 100` in global configuration creates VLAN 100 if needed and enters VLAN context for naming or other settings. It does not require a separate creation step.

Question 43VLANs, Trunking, and Layer 2 Segmentation

A frame arrives untagged on an access port assigned to VLAN 40. How is it handled?

  1. It is accepted and associated with VLAN 40. Correct answer.
  2. It is forwarded in VLAN 1.
  3. It is dropped because access ports require tags.
  4. It is tagged with VLAN 40 before being dropped.

Explanation

Access ports expect untagged frames and internally associate them with the port's access VLAN. Egress frames are sent untagged to the attached device.

Question 44VLANs, Trunking, and Layer 2 Segmentation

What does the Private VLAN (PVLAN) feature provide on Aruba AOS-CX switches?

  1. Layer 2 isolation between ports within the same primary VLAN. Correct answer.
  2. Automatic trunk negotiation between switches.
  3. Encryption of traffic between VLANs.
  4. Layer 3 routing between isolated subnets.

Explanation

PVLANs use primary and secondary VLANs to isolate ports at Layer 2 even when they share an IP subnet. Isolated and community ports control which peers can communicate.

Question 45VLANs, Trunking, and Layer 2 Segmentation

In a PVLAN configuration, which secondary VLAN type allows ports to communicate with the promiscuous port and with each other, but not with other community VLANs?

  1. Isolated VLAN
  2. Native VLAN
  3. Primary VLAN
  4. Community VLAN Correct answer.

Explanation

Community VLAN ports can talk to each other and to the promiscuous port but are isolated from other communities and isolated VLANs. Isolated VLAN ports cannot talk to each other at all.

Question 46VLANs, Trunking, and Layer 2 Segmentation

Which statement about GVRP or MVRP on Aruba switches is correct?

  1. They statically assign VLANs to access ports.
  2. They encrypt VLAN tags on trunks.
  3. They replace STP in loop prevention.
  4. They dynamically propagate VLAN registrations between switches. Correct answer.

Explanation

GVRP/MVRP are registration protocols that advertise VLAN membership so switches can dynamically create and prune VLANs on trunk links. They do not assign access ports or replace STP.

Question 47VLANs, Trunking, and Layer 2 Segmentation

What is the effect of configuring `vlan trunk native 1 tag` on an AOS-CX trunk port?

  1. VLAN 1 is removed from the allowed list.
  2. The trunk refuses all tagged frames.
  3. Frames in the native VLAN are transmitted with an 802.1Q tag. Correct answer.
  4. The native VLAN is changed to VLAN 1 untagged.

Explanation

The `tag` option forces the native VLAN's frames to be tagged on the trunk instead of untagged. This is useful when both ends must tag all traffic consistently.

Question 48VLANs, Trunking, and Layer 2 Segmentation

Which AOS-CX command shows the trunk status and allowed VLANs for a specific interface?

  1. show running-config interface 1/1/1 trunk
  2. show interface 1/1/1 trunk Correct answer.
  3. show trunk allowed 1/1/1
  4. show vlan trunk 1/1/1

Explanation

`show interface <port> trunk` displays trunk operational details including native VLAN and allowed VLANs. It is the targeted verification command for trunk configuration.

Question 49VLANs, Trunking, and Layer 2 Segmentation

Two access ports on the same switch are in different VLANs. What is required for hosts on those ports to communicate at Layer 3?

  1. The native VLAN must match on both ports.
  2. A Layer 3 device or SVI must route between the VLANs. Correct answer.
  3. STP must be disabled on both ports.
  4. The ports must be placed in the same broadcast domain.

Explanation

Because each VLAN is a separate broadcast domain, inter-VLAN traffic must be routed by a Layer 3 device such as an SVI or an external router. Layer 2 switching alone cannot cross VLAN boundaries.

Question 50VLANs, Trunking, and Layer 2 Segmentation

On an Aruba AOS-CX switch, which VLAN identifier range is reserved and cannot be assigned to user-created VLANs?

  1. 2 through 1000
  2. 1 through 1001
  3. 1002 through 1005 Correct answer.
  4. 4095 only

Explanation

AOS-CX reserves VLAN IDs 1002-1005 for legacy Token Ring and FDDI translations, mirroring the IEEE 802.1Q reserved range, so these IDs cannot be configured as normal VLANs. The usable configurable range is 1-4094 with those four IDs excluded.