Your colleague has created a proposed design for a large enterprise customer using HPE Aruba Networking AOS-CX 6300 switches at the wired access layer. The customer requires a secure, scalable solution based on Zero Trust Security (ZTS) principles.
In their current environment, endpoint devices connected to access switches are configured to send 802.1Q tagged frames, and the new design intends to tunnel traffic from the switches to an AOS-10 Gateway cluster using User-Based Tunneling (UBT) in its default mode.
During a design review, you're asked to assess whether this solution supports the customer's requirement to preserve the endpoint VLAN tags across the tunnel.
You recommend a change, stating that the proposed default configuration will not meet the customer's technical need.
Which UBT configurations would support the customer's requirement to preserve VLAN tagging from the endpoints across the UBT tunnel to the gateway?

• A. Configure UBT reserved VLAN mode and assign VLAN 10 to the endpoint aruba user role applied on the switch.
• B. Configure UBT extend VLAN mode, ensure VLAN 10 exists on the 6300 switch and at the cluster.
• C. Configure UBT extend VLAN mode, VLAN 10 is only required to exist on the GW cluster.
• D. Configure UBT reserved VLAN mode, make no VLAN assignment to the endpoint aruba user role applied on the switch.

You and the customer decide that DUR should be used for centralized policy management. The plan also includes dynamic VNBT-based distributed Dynamic Segmentation. Which switch model should be used?

• A. 8360
• B. 6200F/M
• C. 8100
• D. 6300F/M

A global cruise line company needs to refresh its current fleet. They will refresh the 'insides' of the ship to be cost-effective and increase their sustainability. They will replace the complete WLAN/LAN hardware of the ship. In this refresh, the company will not refresh its current security requirements. The CIO also wants to limit the number of unused ports in the switches. Future expansion will always mean a refresh of hardware. They start with the smallest ship with a maximum of 800 guests.
Each ship has a LAN infrastructure consisting of two core switches, up to 10 redundant distribution switches, and up to 500 access switches (400 cabins, 100 technical rooms). The Core switches are located in the MDF of the ship and the distribution switches are located in the IDFs of the ship. Each cabin and technical room gets one single access switch.
The cabling structure of the ship will not be refreshed. Each IDF is connected to the MDF by SMF, of which two pairs are available for the interconnect between the core and distribution. The length of SM fiber between MDF and IDF is less than 300 meters (980 ft) and the type used is OS1. Each cabin is connected by a single OM2 pair to the IDF, the maximum length is 60 meters (200 ft). Each technical room is connected by a single OM2 pair to the IDF, with lengths between
100 and 150 meters (320 and 500 ft).
For each cabin/technical room the customer is looking to replace their current fan-less 2530/2540 without changing the requirements, except they need to upgrade the uplink to distribution switch to 10GbE to handle the increased network traffic, and the technical rooms need redundant power.
The WLAN infrastructure will be 1:1 refreshed without new cabling or new AP locations. Their WLAN infrastructure is based on the 200/300 series indoor and outdoor APs running InstantOS (less than 300 APs), the customer has no change in WLAN requirements.
The cruise line company will replace its current Internet connection before the LAN/WLAN refresh. The new Internet connection will provide a 99.8% uptime, which is needed to ensure the paid guest Wi-Fi is always operational. With this new internet connection, the CIO of the cruise line wants to base the design on the ESP architecture from Aruba because Internet connection is guaranteed.
Based on the best practices and customer requirements, which switch series should you recommend for the core?

• A. 8360 Series
• B. 8320 Series
• C. 8325 Series
• D. 8400 Series

A global furniture retail company called 'No-Stair Inc.' requests you design their new WLAN infrastructure for a global footprint. Each location of 'No-Stair Inc." has a similar layout: three small manager offices, a warehouse, and a 'retail' area. The 'retail' area and the warehouse together amount to 95% of the location. The IT department of the company is minimally engaged in their LAN refresh so the CTO of the company has shared the information below.
Current WLAN Infrastructure is based on the 802.11n "WIFI4Less" access-points series (both model 2013-INT (2.4 only internal antenna) and model 2019-EXT (dual-band external antenna only). These AP models are standalone without any centralized management. Last year 'No-Stair Inc.' ran a project called 'secure-it' ensuring that all needed network security was implemented to be fully compliant with their security standards. During this project, they also upgraded the AAA.
Infrastructure to handle the increased AAA requests. No additional Wi-Fi or security requirements are listed for this WLAN refresh, which means that 'No-Stair Inc.' will continue to use bridged SSIDs, with local breakout into different VLANs.
The CTO of 'No-Stair Inc.' understands the need for you to ask additional questions to deliver the design. The questions may be sent in written form and will be answered within two weeks.
What is a possible constraint?

• A. Does the existing core switch support an upgraded Wi-Fi Network?
• B. Does the existing AAA infrastructure support an upgraded Wi-Fi Network?
• C. Does the existing wired network support enough drops for an upgraded Wi-Fi Network?
• D. Does the existing WAN infrastructure support an upgraded Wi-Fi Network?