You manage AOS-10 APs with HPE Aruba Networking Central. A role is configured on these APs with the following rules: Allow UDP on port 67 to any destination Allow any to network 10.1.6.0/23 Deny any…

Question

Options

• AThe traffic is permitted.
• BThe traffic is dropped and logged.
• CThe traffic is dropped (without any logging or further action against the client).
• DThe traffic is dropped, and the client is denylisted.

• A
  60% (12)
• B
  5% (1)
• C
  10% (2)
• D
  25% (5)

Explanation

Traffic Match Evaluation Order: The rules are processed in sequential order, and the first rule that matches is applied. The added rule only denies SSH traffic to 10.1.4.0/23. Since 10.1.11.42 is not within the 10.1.4.0/23 subnet, this rule does not apply. Next Matching Rule: Rule 2 permits traffic to the 10.1.6.0/23 network, but this does not include 10.1.11.42. Rule 3 denies traffic to the broader 10.1.0.0/16 network and logs it. Since 10.1.11.42 falls under this range, this rule applies, and the traffic would be logged and dropped. Logging and Denylist Actions: The denylist action in the new rule only applies to SSH traffic to 10.1.4.0/23. Since the destination is outside that range, the denylist is not triggered.

No community discussion yet for this question.