You are proposing an Aruba wired and wireless solution to a customer. After a discussion about Aruba ClearPass and IntroSpect, a member of the security team asks about security measures that go…

Question

Options

• ASilicon root of trust creates a digital fingerprint in the silicon of ArubaOS switches to ensure they
• BConnectivity Health collects and compiles information about switch configuration, protocol, and
• CAn Aruba infrastructure reduces the likelihood traffic can be intercepted with centralized encryption
• DAruba controlled APs maintain a distributed policy engine that defines who and what devices can

• A
  13% (7)
• B
  4% (2)
• C
  75% (39)
• D
  8% (4)

Explanation

Option C is correct because Aruba Secure Infrastructure addresses a physical threat vector - traffic interception - by centralizing encryption across the wired and wireless fabric at the hardware/infrastructure level. When traffic is encrypted end-to-end within the Aruba infrastructure itself (not just at an application layer), an attacker who physically taps a cable or intercepts wireless signals still cannot read the data. This directly answers the security team's concern about protections beyond software like ClearPass or IntroSpect.

Why the distractors are wrong:

• A (Silicon root of trust) is actually a hardware security concept, but the truncated answer choice describes a device integrity/boot verification feature - it protects the switch itself from tampering, not network traffic from interception, so it doesn't best answer the question as asked.
• B (Connectivity Health) is a monitoring/diagnostics tool for switch configuration and protocol health - a visibility feature, not a security control that goes beyond software.
• D (Distributed policy engine on APs) describes an access control and policy enforcement function - this is software-defined policy logic, not an infrastructure-level hardware security measure.

Memory tip: Think "C = Centralized Crypto." The question emphasizes going beyond software - that points to the network infrastructure encrypting traffic in hardware tunnels, making interception useless even if an attacker gets physical access to the wire.

No community discussion yet for this question.