HPE6-A78 · Question #126
You have an HPE Aruba Networking Mobility Controller (MC) that is locked in a closet. What is another step that HPE Aruba Networking recommends to protect the MC from unauthorized access?
The correct answer is A. Set the local admin password to a long random value that is unknown or locked up securely. The scenario involves an HPE Aruba Networking Mobility Controller (MC) that is physically secured in a locked closet, which provides protection against physical tampering. However, additional steps are needed to protect the MC from unauthorized access, particularly through…
Question
You have an HPE Aruba Networking Mobility Controller (MC) that is locked in a closet. What is another step that HPE Aruba Networking recommends to protect the MC from unauthorized access?
Options
- ASet the local admin password to a long random value that is unknown or locked up securely.
- BDisable local authentication of administrators entirely.
- CChange the password recovery password.
- DUse local authentication rather than external authentication to authenticate admins.
How the community answered
(56 responses)- A93% (52)
- B2% (1)
- C2% (1)
- D4% (2)
Explanation
The scenario involves an HPE Aruba Networking Mobility Controller (MC) that is physically secured in a locked closet, which provides protection against physical tampering. However, additional steps are needed to protect the MC from unauthorized access, particularly through administrative interfaces (e.g., SSH, web UI, console). Option A, "Set the local admin password to a long random value that is unknown or locked up securely," is correct. HPE Aruba Networking recommends securing administrative access to the MC by setting a strong, random password for the local admin account (e.g., the default "admin" user). The password should be long (e.g., 16+ characters), random, and stored securely (e.g., in a password manager or safe). This ensures that even if an attacker gains physical access to the MC (e.g., by bypassing the locked closet) or attempts remote access, they cannot easily guess or brute-force the password.
Topics
Community Discussion
No community discussion yet for this question.