The CX 6100 switches in Building B must be replaced with CX 6200 Series switches to implement the required wired Dynamic Segmentation architecture using User-Based Tunneling (UBT) .

HPE Aruba Networking defines Dynamic Segmentation as role-based client segmentation in which authenticated wired users can have their traffic forwarded through UBT to an Aruba Mobility Gateway for centralized policy enforcement. Importantly, the official AOS-CX platform support matrix identifies UBT support on the 4100i, 6200, 6300, and 6400 Series ; the CX 6100 is not included among the supported UBT platforms. Aruba Networks

This is a hardware/platform capability distinction, so applying a Premium license to a CX 6100 does not make it a UBT-capable access switch. The correct access-layer replacement in this design is therefore the CX 6200 .

Options B and C also misrepresent the tunneling architecture. Aruba UBT uses GRE-based tunneling from the access switch to an Aruba Gateway , where centralized user-role and firewall policy can be enforced. HPE Aruba ' s Dynamic Segmentation documentation explicitly describes UBT as GRE tunneling toward an Aruba Gateway. Aruba Networks Therefore, the CX 8325 is not the UBT termination point, and UBT does not use a VXLAN tunnel to the 9240.

Study Guide References: Dynamic Segmentation; User-Based Tunneling; UBT Platform Support; GRE Tunneling; Mobility Gateway Policy Enforcement; CX 6200 Access Architecture.