I85PREP
⌘ K
Aruba Campus Access Associate study materials
Aruba Campus Access Associate study resources

Aruba Campus Access Associate practice questions

One question at a time. Build your Aruba Campus Access Associate understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Campus Access Networking Fundamentals

What is the primary function of a wireless access point (AP) in an Aruba campus network?

  1. To filter traffic based on security policies
  2. To route traffic between VLANs
  3. To provide wireless clients with access to the network Correct answer.
  4. To connect wired clients to the network

Explanation

An access point bridges wireless clients to the wired network, allowing them to communicate with other devices. It does not perform routing or policy enforcement by itself.

Question 2Campus Access Networking Fundamentals

Which Aruba product line is specifically designed for campus core and aggregation layer switching?

  1. Aruba AirWave
  2. Aruba CX Correct answer.
  3. Aruba ClearPass
  4. Aruba Instant On

Explanation

Aruba CX switches are built for campus core, aggregation, and access layers, offering high performance and advanced features. Other options are for small business, policy management, or network monitoring.

Question 3Campus Access Networking Fundamentals

In a typical Aruba campus network design, what is the role of the aggregation layer?

  1. To connect access switches to the core and aggregate traffic Correct answer.
  2. To provide direct connections to end-user devices
  3. To host centralized wireless controllers
  4. To connect the campus to the internet

Explanation

The aggregation layer sits between the access layer and the core, concentrating traffic from access switches and applying policies. It does not directly connect end devices or the internet.

Question 4Campus Access Networking Fundamentals

Which protocol is used by Aruba switches to automatically negotiate trunk links and prevent loops?

  1. STP Correct answer.
  2. LLDP
  3. CDP
  4. LACP

Explanation

Spanning Tree Protocol (STP) prevents Layer 2 loops by blocking redundant paths. LACP bundles links, LLDP and CDP are discovery protocols.

Question 5Campus Access Networking Fundamentals

What is the purpose of a VLAN in a campus network?

  1. To provide redundant paths between switches
  2. To logically segment a physical network into multiple broadcast domains Correct answer.
  3. To assign IP addresses to end devices
  4. To encrypt traffic between switches

Explanation

VLANs divide a physical network into separate logical broadcast domains, improving security and reducing broadcast traffic. They do not encrypt, provide redundancy, or assign IP addresses.

Question 6Campus Access Networking Fundamentals

Which Aruba wireless solution uses a controller-less architecture where access points operate in a cluster?

  1. Aruba Instant Correct answer.
  2. Aruba AirWave
  3. Aruba ClearPass
  4. Aruba Mobility Controller

Explanation

Aruba Instant is a controller-less solution where APs form a cluster and one AP acts as the master. Mobility Controllers are hardware appliances, ClearPass is for policy, and AirWave is for management.

Question 7Campus Access Networking Fundamentals

What is the default administrative access method for an ArubaOS-CX switch?

  1. Telnet
  2. SNMP
  3. SSH Correct answer.
  4. HTTP

Explanation

ArubaOS-CX switches use SSH for secure CLI access by default. Telnet and HTTP are typically disabled, and SNMP is for monitoring.

Question 8Campus Access Networking Fundamentals

Which protocol provides centralized authentication for wireless users in an Aruba campus network?

  1. RADIUS Correct answer.
  2. TACACS+
  3. Kerberos
  4. LDAP

Explanation

RADIUS is commonly used for authentication, authorization, and accounting of wireless users. TACACS+ is typically for device administration, LDAP is a directory protocol, and Kerberos is for ticket-based authentication.

Question 9Campus Access Networking Fundamentals

In a Layer 3 campus design, what is the recommended practice for VLAN gateways?

  1. Place gateways on the core switches
  2. Place gateways on the aggregation switches Correct answer.
  3. Place gateways on the access switches
  4. Place gateways on the wireless controller

Explanation

Placing VLAN gateways on aggregation switches localizes routing and reduces traffic on the core. Gateways on access switches can be done in some designs but are less common; core gateways can cause suboptimal paths.

Question 10Campus Access Networking Fundamentals

Which Aruba feature allows a switch to automatically configure VLANs and other settings when a new device connects?

  1. ZTP
  2. PoE
  3. VSF
  4. Device Profile Correct answer.

Explanation

Device profiles enable automatic port configuration based on the type of device detected. PoE provides power, ZTP is for zero-touch provisioning of switches, and VSF is for stacking.

Question 11Campus Access Networking Fundamentals

What is the purpose of the Aruba Mobility Master in a campus network?

  1. To provide centralized management and orchestration of Mobility Controllers Correct answer.
  2. To serve as a standalone access point
  3. To provide PoE to access points
  4. To act as a firewall for wireless traffic

Explanation

Mobility Master is a management platform that centralizes configuration and monitoring of multiple Mobility Controllers. It does not function as an AP, firewall, or power source.

Question 12Campus Access Networking Fundamentals

Which command would you use on an ArubaOS-CX switch to view the current configuration?

  1. display current-configuration
  2. show running-config Correct answer.
  3. show configuration
  4. get config

Explanation

ArubaOS-CX uses show running-config to display the active configuration. Other commands are from different vendor CLI syntaxes.

Question 13Campus Access Networking Fundamentals

What is the role of a DHCP relay agent in a campus network?

  1. To forward DHCP requests from clients to a DHCP server on another subnet Correct answer.
  2. To provide DNS resolution
  3. To assign IP addresses to clients directly
  4. To authenticate clients before IP assignment

Explanation

A DHCP relay agent forwards broadcast DHCP requests to a configured DHCP server, enabling clients to obtain IP addresses from a server on a different subnet. It does not assign addresses itself.

Question 14Campus Access Networking Fundamentals

Which Aruba solution provides network access control (NAC) for both wired and wireless clients?

  1. ClearPass Correct answer.
  2. Mobility Master
  3. Instant On
  4. AirWave

Explanation

ClearPass is Aruba's NAC solution, offering policy management, guest access, and device onboarding. AirWave is for monitoring, Mobility Master for controller management, and Instant On for small business.

Question 15Campus Access Networking Fundamentals

In ArubaOS-CX, what is the purpose of a VRF?

  1. To aggregate multiple physical links
  2. To encrypt management traffic
  3. To provide redundant power supplies
  4. To create separate routing tables for network segmentation Correct answer.

Explanation

A Virtual Routing and Forwarding (VRF) instance creates an independent routing table, allowing overlapping IP addresses and traffic separation. It does not relate to power, link aggregation, or encryption.

Question 16Campus Access Networking Fundamentals

What is the recommended maximum number of access points in an Aruba Instant cluster?

  1. 32 Correct answer.
  2. 64
  3. 16
  4. 128

Explanation

Aruba Instant clusters support up to 32 access points in a single cluster. Larger deployments require a controller-based architecture.

Question 17Campus Access Networking Fundamentals

Which feature allows an Aruba switch to provide power to devices such as IP phones and access points?

  1. STP
  2. QoS
  3. VLAN
  4. PoE Correct answer.

Explanation

Power over Ethernet (PoE) delivers electrical power along with data on Ethernet cables. QoS, VLAN, and STP do not provide power.

Question 18Campus Access Networking Fundamentals

What is the primary benefit of using Link Aggregation (LAG) between two Aruba switches?

  1. Simplified VLAN configuration
  2. Increased bandwidth and redundancy Correct answer.
  3. Enhanced wireless coverage
  4. Stronger encryption

Explanation

LAG combines multiple physical links into one logical link, increasing throughput and providing fault tolerance. It does not simplify VLANs, affect wireless, or encrypt traffic.

Question 19Campus Access Networking Fundamentals

Which ArubaOS-CX command enables you to save the running configuration to the startup configuration?

  1. write memory
  2. save configuration
  3. commit
  4. copy running-config startup-config Correct answer.

Explanation

In ArubaOS-CX, the command copy running-config startup-config saves the current configuration. Other commands are from different systems.

Question 20Campus Access Networking Fundamentals

What is the purpose of the Aruba Central platform?

  1. Local switching for access points
  2. Policy enforcement for wired ports
  3. Cloud-based management for Aruba devices Correct answer.
  4. Wireless intrusion detection

Explanation

Aruba Central is a cloud-based management platform for Aruba access points, switches, and gateways. It provides centralized monitoring and configuration.

Question 21Campus Access Networking Fundamentals

In a campus network, what is the primary purpose of QoS?

  1. To provide redundant links
  2. To prioritize certain types of traffic during congestion Correct answer.
  3. To authenticate users
  4. To assign VLANs to ports

Explanation

Quality of Service (QoS) prioritizes traffic such as voice and video to ensure performance during congestion. It does not assign VLANs, authenticate users, or provide redundancy.

Question 22Campus Access Networking Fundamentals

Which Aruba feature allows seamless roaming for wireless clients across access points?

  1. ARM
  2. Mobility Master
  3. AirMatch
  4. ClientMatch Correct answer.

Explanation

ClientMatch continuously monitors and steers clients to the best AP, improving roaming and performance. AirMatch optimizes RF, ARM manages channel and power, and Mobility Master is for management.

Question 23Campus Access Networking Fundamentals

What is the function of the ArubaOS-CX command 'show interface brief'?

  1. Displays a summary of interface status and configuration Correct answer.
  2. Resets all interfaces to default settings
  3. Configures an interface with an IP address
  4. Shows detailed packet statistics for all interfaces

Explanation

The 'show interface brief' command provides a concise summary of interface status, including link state and VLAN. It does not show detailed statistics or configure interfaces.

Question 24Campus Access Networking Fundamentals

In a ArubaOS-CX VSF stack, what happens if the conductor switch fails?

  1. All stack members reboot
  2. The stack splits into multiple independent switches
  3. The stack continues to operate with a new conductor elected Correct answer.
  4. Traffic is halted until the conductor is replaced

Explanation

VSF (Virtual Switching Framework) provides high availability; if the conductor fails, a new conductor is elected and the stack continues forwarding traffic. It does not cause a full reboot or split.

Question 25Campus Access Networking Fundamentals

Which statement accurately describes the difference between ArubaOS-Switch and ArubaOS-CX?

  1. ArubaOS-Switch supports VSF, while ArubaOS-CX does not
  2. ArubaOS-Switch is cloud-native, while ArubaOS-CX is not
  3. ArubaOS-CX uses a database-driven configuration model, while ArubaOS-Switch uses a text-based configuration file Correct answer.
  4. ArubaOS-CX is only for wireless controllers

Explanation

ArubaOS-CX uses a structured, database-driven configuration with a REST API, while ArubaOS-Switch uses a traditional text-based configuration. Both support stacking (VSF/VSX), and neither is cloud-native.

Question 26Campus Access Networking Fundamentals

Which ArubaOS-CX feature allows multiple physical switches to be managed as a single logical device, providing redundancy and simplified management?

  1. LACP (Link Aggregation Control Protocol)
  2. STP (Spanning Tree Protocol)
  3. VSF (Virtual Switching Framework) Correct answer.
  4. VLAN (Virtual Local Area Network)

Explanation

VSF (Virtual Switching Framework) is an ArubaOS-CX feature that combines multiple physical switches into a single logical stack, simplifying management and providing high availability. VLANs segment networks, STP prevents loops, and LACP aggregates links, but none of these create a single logical switch from multiple devices.

Question 27Campus Access Networking Fundamentals

In an Aruba campus network, which protocol is used to prevent Layer 2 loops by electing a root bridge and blocking redundant paths?

  1. LLDP (Link Layer Discovery Protocol)
  2. VRRP (Virtual Router Redundancy Protocol)
  3. RSTP (Rapid Spanning Tree Protocol) Correct answer.
  4. OSPF

Explanation

RSTP (Rapid Spanning Tree Protocol) is a Layer 2 protocol that prevents loops by creating a loop-free logical topology through root bridge election and port state blocking. OSPF is a routing protocol, VRRP provides gateway redundancy, and LLDP is a neighbor discovery protocol.

Question 28Campus Access Networking Fundamentals

A network engineer wants to connect two ArubaOS-CX switches using multiple links to increase bandwidth and provide redundancy. Which technology should be used?

  1. VSF (Virtual Switching Framework)
  2. VXLAN (Virtual Extensible LAN)
  3. LACP (Link Aggregation Control Protocol) Correct answer.
  4. STP (Spanning Tree Protocol)

Explanation

LACP (Link Aggregation Control Protocol) bundles multiple physical links into a single logical link, increasing bandwidth and providing redundancy. VSF combines switches into a stack, STP prevents loops, and VXLAN is an overlay tunneling protocol.

Question 29Campus Access Networking Fundamentals

Which ArubaOS-CX command displays the current running configuration of the switch?

  1. show startup-config
  2. show running-config Correct answer.
  3. show configuration
  4. show version

Explanation

The 'show running-config' command displays the current active configuration in ArubaOS-CX. 'show startup-config' shows the saved configuration, 'show configuration' is not a valid command, and 'show version' displays software version information.

Question 30Campus Access Networking Fundamentals

In an ArubaOS-CX VSF stack, what is the role of the conductor switch?

  1. It acts as the backup for the standby switch.
  2. It provides Power over Ethernet (PoE) to all stack members.
  3. It manages the stack and runs the control plane. Correct answer.
  4. It forwards all traffic between stack members.

Explanation

The conductor switch in a VSF stack manages the stack, runs the control plane, and coordinates configuration across all members. It does not forward all traffic (data plane is distributed), provide PoE to other switches, or serve as a backup for the standby (the standby is a separate member).

Question 31Wired Access Switching and VLANs

On an Aruba AOS-CX switch, which VLAN is the factory default VLAN that all access ports are assigned to out of the box?

  1. VLAN 100
  2. VLAN 1 Correct answer.
  3. VLAN 0
  4. VLAN 4094

Explanation

AOS-CX ships with VLAN 1 as the default VLAN, and all ports are members of it until reconfigured. VLAN 1 cannot be deleted, though it can be restricted.

Question 32Wired Access Switching and VLANs

What is the valid configurable VLAN ID range on Aruba AOS-CX switches?

  1. 1 to 1024
  2. 1 to 65535
  3. 2 to 4095
  4. 1 to 4094 Correct answer.

Explanation

AOS-CX supports VLAN IDs from 1 through 4094. IDs above 4094 are outside the 12-bit 802.1Q tag field.

Question 33Wired Access Switching and VLANs

Which CLI command assigns an access port to VLAN 20 on an AOS-CX switch?

  1. port vlan 20 untagged
  2. vlan access 20
  3. switchport access vlan 20 Correct answer.
  4. tagged vlan 20

Explanation

Within the interface context, switchport access vlan 20 sets the untagged access VLAN for that port. The port must be in access mode for this to apply as intended.

Question 34Wired Access Switching and VLANs

What does an 802.1Q trunk do when forwarding frames for multiple VLANs across a single link?

  1. Converts tagged frames to untagged frames
  2. Encrypts each VLAN separately
  3. Compresses payloads per VLAN
  4. Inserts a VLAN tag into the Ethernet frame Correct answer.

Explanation

802.1Q adds a 4-byte tag containing the VLAN identifier so a single link can carry traffic for many VLANs. The receiving switch reads the tag to place the frame in the correct VLAN.

Question 35Wired Access Switching and VLANs

On an AOS-CX switch, which command makes a port carry tagged traffic for VLAN 30 while remaining untagged (native) for VLAN 1?

  1. vlan trunk native 1 tag Correct answer.
  2. switchport mode access
  3. switchport trunk allowed vlan 30
  4. vlan 30 tag

Explanation

The vlan trunk native 1 tag command causes the native VLAN to be tagged, allowing VLAN 30 to be carried as tagged traffic. Trunk allowed VLAN lists alone do not define tagging behavior.

Question 36Wired Access Switching and VLANs

A trunk port is configured with 'vlan trunk allowed 10,20'. A frame arrives tagged for VLAN 30. What happens?

  1. It is forwarded untagged
  2. It is dropped Correct answer.
  3. It is retagged as VLAN 10
  4. It is flooded to all VLANs

Explanation

Frames tagged with a VLAN not in the allowed list are discarded at ingress. Only VLANs explicitly permitted on the trunk are forwarded.

Question 37Wired Access Switching and VLANs

Which statement describes a routed (SVI) interface on an Aruba switch?

  1. It aggregates multiple physical links
  2. It provides Layer 3 connectivity for a VLAN Correct answer.
  3. It forwards frames only within one VLAN
  4. It tags frames with 802.1Q headers

Explanation

An SVI (interface vlan) gives the switch a Layer 3 presence in a VLAN, enabling routing and management. It is the gateway for hosts in that VLAN.

Question 38Wired Access Switching and VLANs

Which command creates a Layer 3 SVI for VLAN 50 on an AOS-CX switch?

  1. ip interface 50
  2. vlan 50 ip
  3. interface 50
  4. interface vlan 50 Correct answer.

Explanation

interface vlan 50 enters the SVI context, where an IP address can be assigned. This provides the default gateway for hosts in VLAN 50.

Question 39Wired Access Switching and VLANs

What is the primary purpose of a link aggregation group (LAG) between two switches?

  1. To increase bandwidth and provide redundancy Correct answer.
  2. To route between VLANs
  3. To encrypt inter-switch traffic
  4. To assign VLANs to access ports

Explanation

A LAG bundles multiple physical links into one logical link, increasing aggregate throughput and providing resilience if a member link fails. VLANs can still be carried across the LAG as tagged traffic.

Question 40Wired Access Switching and VLANs

Which protocol dynamically negotiates a multi-chassis LAG between two Aruba switches?

  1. MSTP
  2. LLDP
  3. LACP Correct answer.
  4. OSPF

Explanation

LACP (IEEE 802.3ad) negotiates link aggregation, including multi-chassis LAGs when supported. It ensures both ends agree on the bundle membership.

Question 41Wired Access Switching and VLANs

Which spanning-tree variant maps multiple VLANs to a smaller number of instances to reduce resource usage?

  1. MSTP (802.1s) Correct answer.
  2. PVST
  3. RSTP (802.1w)
  4. STP (802.1D)

Explanation

MSTP groups VLANs into instances, allowing a single spanning-tree computation to serve many VLANs. This scales better than per-VLAN trees.

Question 42Wired Access Switching and VLANs

A network engineer wants to prevent a user-facing port from participating in spanning tree and from forwarding BPDUs. Which feature should be enabled?

  1. BPDU guard
  2. Loop guard
  3. Root guard
  4. Portfast/edge port Correct answer.

Explanation

Configuring a port as an edge (PortFast) port skips normal spanning-tree listening/learning states and is intended for host-facing ports. BPDU guard is often paired with it to err-disable the port if a BPDU is received.

Question 43Wired Access Switching and VLANs

Which feature should be enabled on an edge port to err-disable it if a BPDU is received, protecting against unauthorized switches?

  1. Loop guard
  2. BPDU guard Correct answer.
  3. Storm control
  4. Root guard

Explanation

BPDU guard places the port into an error-disabled state if it receives a BPDU, preventing loops from unauthorized switch connections. It is typically applied to host-facing edge ports.

Question 44Wired Access Switching and VLANs

What is the purpose of the Aruba 'voice' VLAN configuration on an access port?

  1. It converts the port to a trunk
  2. It encrypts voice traffic
  3. It disables spanning tree on the port
  4. It places IP phones in a separate VLAN while data remains untagged Correct answer.

Explanation

A voice VLAN lets an IP phone tag its own traffic into a dedicated VLAN while connected hosts send untagged data into the access VLAN. This separates voice and data traffic for QoS and security.

Question 45Wired Access Switching and VLANs

Which command displays the VLAN membership and tagging state of switch ports on AOS-CX?

  1. show vlan Correct answer.
  2. show running-config
  3. show arp
  4. show interfaces brief

Explanation

show vlan lists VLANs and their member ports, including tagging information. It is the primary command for verifying VLAN assignment.

Question 46Wired Access Switching and VLANs

A host in VLAN 10 must communicate with a host in VLAN 20 on the same switch. What is required?

  1. A Layer 3 device routing between the VLANs Correct answer.
  2. A LAG between the VLANs
  3. A second access port in VLAN 10
  4. A trunk between the hosts

Explanation

Traffic between VLANs must be routed by a Layer 3 device, such as an SVI on the switch or an external router. Layer 2 switching alone cannot move traffic between VLANs.

Question 47Wired Access Switching and VLANs

Which statement about a VLAN trunk port is correct?

  1. It can belong to only one VLAN
  2. It cannot carry untagged traffic
  3. It can carry traffic for multiple VLANs Correct answer.
  4. It must be a routed port

Explanation

A trunk port carries tagged traffic for multiple VLANs plus an untagged native VLAN. This makes it suitable for switch-to-switch or switch-to-hypervisor links.

Question 48Wired Access Switching and VLANs

An engineer needs to allow only VLANs 5 and 15 on a trunk. Which command accomplishes this on AOS-CX?

  1. switchport trunk vlan 5,15
  2. vlan allowed 5,15
  3. vlan trunk allowed 5,15 Correct answer.
  4. trunk permit 5,15

Explanation

vlan trunk allowed restricts which VLANs may traverse the trunk. Only listed VLANs are forwarded; others are dropped.

Question 49Wired Access Switching and VLANs

What is the effect of the 'no routing' command on a VLAN interface in AOS-CX?

  1. It enables proxy ARP
  2. It removes the SVI's IP address
  3. It disables Layer 3 processing on that VLAN Correct answer.
  4. It deletes the VLAN

Explanation

Disabling routing on a VLAN SVI stops the switch from routing traffic for that VLAN. The interface remains but does not perform Layer 3 forwarding.

Question 50Wired Access Switching and VLANs

A switch has two SVIs, VLAN 10 (10.0.0.1/24) and VLAN 20 (10.0.1.1/24). Hosts in each VLAN use their SVI as gateway. What must be enabled to route between them?

  1. IP routing globally Correct answer.
  2. BPDU guard
  3. LACP
  4. Spanning tree

Explanation

Global IP routing must be enabled for the switch to forward packets between SVIs. Without it, the SVIs provide only local addressing.