You need to deploy an Aruba instant AP where users can physically reach It. What are two recommended options for enhancing security for management access to the AP? (Select two )

When deploying Aruba Instant APs in physically accessible locations, securing management access is critical. Disabling console ports prevents unauthorized local configuration access through serial connections. Applying Tamper Evident Labels (TELs) provides visual indication of physical tampering attempts on console ports. These measures specifically address the physical security vulnerabilities inherent in accessible deployment scenarios, preventing attackers from gaining management access through direct physical connections.

C. Disabling Web UI removes a legitimate remote management method without addressing physical access concerns.
D. WPA3-Enterprise secures wireless client connections, not management access to the AP itself.
E. CA-signed certificates enhance HTTPS security but don't prevent physical console access exploitation.

1. Aruba Instant 8.6.x User Guide, "Physical Security Best Practices," Section 12.3, Pages 287-289

2. HPE Aruba Networking Security Design Guide, "Access Point Deployment Security," Chapter 7.2, Document ID: a00047334enw

3. Aruba Networks Security Hardening Guide, "Console Port Security," Section 4.1.2, Version 8.6, Pages 45-46

4. HPE6-A78 Official Study Guide, "Instant AP Security Configuration," Module 9, Pages 178-180

5. Aruba Central Configuration Guide, "Physical Security Recommendations," Section 15.4, Document: ArubaOS 8.6.0.x