A network administrator needs to create a secure environment for multiple departments using HPE Aruba Networking Fabric Composer. The requirement is to allow each department's devices to communicate…

Question

Options

• ACreate VLANs for each department
• BApply ACLs to block traffic between departments
• CImplement microsegmentation using stateful firewall policies
• DEnable SNMP traps for network monitoring

• A
  24% (7)
• B
  7% (2)
• C
  55% (16)
• D
  14% (4)

Explanation

Microsegmentation using stateful firewall policies (C) is correct because HPE Aruba Fabric Composer is designed to enforce granular, identity-based security policies that control traffic flows at a per-workload or per-device level - precisely the kind of "communicate only with authorized resources" requirement described. Stateful firewalls track connection state, so policies apply bidirectionally and dynamically, making this far more robust than simple filtering.

Why the distractors fall short:

• A (VLANs): VLANs provide Layer 2 segmentation but don't enforce traffic authorization rules within or between segments - a device in one VLAN can still reach another if routing is permitted.
• B (ACLs): ACLs are stateless and rule-based, requiring manual, complex rule sets for every flow. They don't scale well across many departments and lack the dynamic context-awareness of stateful policies.
• D (SNMP traps): SNMP is a monitoring/alerting protocol - it observes network events but enforces nothing. It's completely unrelated to traffic isolation.

Memory tip: Think of microsegmentation as a "bouncer at every door" - stateful firewalls know who's already inside and actively decide who gets in next, whereas VLANs are just separate rooms with no locks, and ACLs are a static guest list that doesn't update itself.

No community discussion yet for this question.