Question 70
The HPE AOS-CX switching case is: A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed. Which TWO choices together provide the targeted remedy and independent validation? (Select TWO.)
Explanation
Correct Answers
The targeted correction for A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed is: Translate customer requirements into tested topology, configuration, compatibility and handoff criteria before writing switch commands. It reduces the risk that a switch configuration that appears operational can still violate segmentation, availability or application service requirements absent explicit acceptance criteria.
A separate operational validation for A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed is: A traceability matrix connects each requirement to an implementation decision, verification command or user-facing test. It proves intended behavior instead of accepting configuration presence alone.
Incorrect Answers
This alternative concerns out-of-band management and management vrf design; its associated risk is: A network outage may become unrecoverable when the only management path follows the same failed control or data plane. The observed case A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed requires the more specific implementation acceptance and requirements traceability control. The targeted action is: Translate customer requirements into tested topology, configuration, compatibility and handoff criteria before writing switch commands.
This alternative concerns change staging baseline rollback and maintenance window; its associated risk is: A failed change can persist or become impossible to revert if baselines, save behavior and dependencies were never recorded. The observed case A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed requires the more specific implementation acceptance and requirements traceability control. The targeted action is: Translate customer requirements into tested topology, configuration, compatibility and handoff criteria before writing switch commands.
This alternative concerns dhcp relay and ip service planning; its associated risk is: A missing relay or permissive rogue-server path can leave new VLAN users disconnected or misconfigured. The observed case A branch design has a security requirement to isolate cameras but no test proves isolation after the switches are installed requires the more specific implementation acceptance and requirements traceability control. The targeted action is: Translate customer requirements into tested topology, configuration, compatibility and handoff criteria before writing switch commands.