A company deployed Dynamic Segmentation with their CX switches and Gateways After performing a security audit on their network, they discovered that the tunnels built between the CX switch and the Aruba Gateway are not encrypted. The company is concerned that bad actors could try to insert spoofed messages on the Gateway to disrupt communications or obtain information about the network.
Which action must the administrator perform to address this situation?
39 comments · newest first
JA
Jacquline
11 months ago
I heard Enhanced PAPI security is the best choice for this!
RE
Regenia
11 months ago
Enhanced security sounds like a solid option too.
ST
Stephaine
11 months ago
Wait, are we sure GRE security is enough?
ME
Mendy
12 months ago
Totally agree, those tunnels need encryption!
BR
Brianne
12 months ago
I think enabling GRE security is the way to go.
CO
Corrie
12 months ago
I vaguely remember that GRE security was mentioned in our study materials, but I’m not confident if it applies to this scenario.
DE
Deandrea
1 year ago
I’m a bit confused. I thought enabling Secure Mode Enhanced was the way to go, but I can't recall the details.
CA
Cassie
1 year ago
I think we practiced a similar question where we had to choose between different security modes. I feel like Enhanced PAPI security might be the right choice here.
SA
Salley
1 year ago
I remember something about securing tunnels, but I’m not entirely sure which option specifically addresses encryption.
TY
Ty
1 year ago
I'm feeling pretty confident about this one. The key is to identify the specific security vulnerability (unencrypted tunnels) and then select the option that addresses that, which looks like "Enable Secure Mode Enhanced".
RO
Rosio
1 year ago
Hmm, I'm a little unsure about this one. The question mentions "Dynamic Segmentation" and "CX switches and Gateways" which I'm not super familiar with. I'll need to think through the networking concepts here carefully.
YO
Yolande
1 year ago
This seems like a straightforward security issue. I think the answer is probably to enable some kind of enhanced security feature to encrypt the tunnels and prevent spoofing.
DO
Doyle
1 year ago
Okay, I've got a plan. Based on the details provided, I think the best approach is to enable the "Enhanced PAPI security" option. That should help secure the communication between the CX switch and Aruba Gateway.
NI
Nina
1 year ago
I'm pretty sure the answer is A. I remember reading about the "run bash-shell" command for enabling Bash on Cisco NX-OS.
TE
Terina
1 year ago
Hmm, I'm not sure if the number of email accounts is limited to one or if it's unlimited. I'll need to double-check the documentation to make sure I select the right answer.
QU
Quentin
1 year ago
Okay, let's think this through. The question says the tunnels aren't encrypted, so I'd say C is the way to go. Can't be too safe when it comes to security, am I right?
MA
Margret
1 year ago
Definitely, it's better to be safe than sorry when it comes to network security.
DA
Daron
1 year ago
I think so too, enabling Enhanced PAPI security should help prevent any unauthorized access.
TH
Thersa
1 year ago
I agree, C seems like the best option to ensure the security of the network.
JO
Jordan
1 year ago
Ha, I wonder if the answer is 'D) Enable GRE security' and the bad actors are actually just goats trying to crash the network. Gotta love these certification exam questions!
RE
Rex
1 year ago
User 3: Maybe it's D) Enable GRE security to address the situation.
AL
Albina
1 year ago
User 2: No, I believe the correct action is C) Enable Enhanced PAPI security.
YU
Yuki
1 year ago
User 1: I think the answer is A) Enable Secure Mode Enhanced.
NO
Noel
2 years ago
Whoa, we definitely don't want those bad actors getting their hands on any sensitive network info. I'd go with C as well - can't be too careful when it comes to security!
JO
Johana
1 year ago
Let's go ahead and enable Enhanced PAPI security to protect our network from any potential attacks.
RO
Ronna
1 year ago
I've heard that enabling Enhanced PAPI security can help prevent unauthorized access to our network.
JA
Janessa
1 year ago
Agreed, we need to make sure our network is secure from any potential threats.
KE
Kenda
1 year ago
I think we should definitely enable Enhanced PAPI security to address this issue.
BU
Buck
2 years ago
I'm not sure, maybe enabling GRE security could also address the issue.
DA
Dannette
2 years ago
I agree with Hollis, enabling Secure Mode Enhanced would help encrypt the tunnels.
HO
Hollis
2 years ago
I think the administrator should enable Secure Mode Enhanced.
FR
Franchesca
2 years ago
I'm not sure, but maybe enabling GRE security could also address the issue.
TA
Tamie
2 years ago
Hmm, this seems like a tricky one. I'm leaning towards option C since it mentions 'Enhanced PAPI security' which sounds like it would address the encryption issue.
AL
Aleisha
1 year ago
User 4: Sounds like a plan, let's make sure those tunnels are encrypted.
MI
Mindy
1 year ago
User 3: I agree, let's go with option C and enable Enhanced PAPI security.
ZO
Zoila
1 year ago
User 2: Yeah, 'Enhanced PAPI security' does sound like it could address the encryption problem.
AA
Aaron
2 years ago
User 1: I think option C is the way to go.
RE
Refugia
2 years ago
I agree with Amber, enabling Secure Mode Enhanced would help encrypt the tunnels.
AM
Amber
2 years ago
I think the administrator should enable Secure Mode Enhanced.