I think the answer is D. we talk about UBT in this question where user connect to switch will go to MC by use Tunnel

A is incorrect because Radius dynamic authorization has not goal to guaranty same security & firewall policy for wired & wireless traffic B is incorrect because downloadable user role are only compatible with Aruba Clearpass and not with third party AAA. C is incorrect because switch do not use IPSec D is correct : ACSP Learning book Dynamic segmentation : "when to use UBT ? Wired and wireless traffic should have the same (or similar) policies applied to them

Correct answer should be A. As it says customer wants to leverage the existing AAA and firewall third party policy it could be CISCO Server as well. If he wants to use UBT he still can do it with LUR but it is new AAA setup for both wired and wireless.

Page 748 Study Guide: The bottom line is this: Use the tunneled- node feature whenever you want to apply Aruba controller- based security/control mechanisms to both wireless and wired traffic. You get unified access control – same policies regardless of whether they have a wired or wireless connection. [Aruba Networks]

A: Aruba ClearPass supports RADIUS dynamic authorization. RADIUS (Remote Authentication Dial-In User Service) is a protocol widely used for network access control, authentication, and accounting. It allows for the centralized management of user authentication and authorization for network devices.

should be D, LUR is used with CPPM and also with third party AAA servers

Answer is D. User based tunneling with LUR

Agree with demanmetdehamer, its A. UBT ist only Supported with Clearpass and not with a third-party AAA solution.

Mark key words, 'Aruba APs and MC', '3rd Party AAA', 'FW for both Wired and wireless means same user can be either', so need to be Aruba tunneling using LUR

Answer is D. User based tunneling with LUR

correct answer is D

Answer A is correct. UBT is only supported with Clearpass as radius server. The question clearly states that the company has a third party solution.

Answer is D, see pages 789 791

the Correct answer is D