nerdexam
HP

HPE6-A78 · Question #59

Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP: SSID = PublicWiFi BSSID =…

The correct answer is B. The AP is probably connected to your LAN because it has a BSSID that is close to a MAC address. The Match method 'Eth-Wired-Mac-Table' suggests that the BSSID of the rogue AP has been found in the Ethernet (wired) MAC address table of the network infrastructure. This means the AP is physically connected to the LAN. If the BSSID does not match the company's authorized APs…

Monitoring and Troubleshooting Aruba Network Security

Question

Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP:

SSID = PublicWiFi BSSID = a8:bd:27:12:34:56 Match method = Plus one Match method = Eth-Wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

Options

  • AThe AP has a BSSID that is close to your authorized APs' BSSIDs. This indicates that the AP
  • BThe AP is probably connected to your LAN because it has a BSSID that is close to a MAC address
  • CThe AP has been detected using multiple MAC addresses. This indicates that the AP is spoofing
  • DThe AP is an AP that belongs to your solution. However, the ArubaOS has detected that it is

How the community answered

(34 responses)
  • A
    21% (7)
  • B
    65% (22)
  • C
    9% (3)
  • D
    6% (2)

Explanation

The Match method 'Eth-Wired-Mac-Table' suggests that the BSSID of the rogue AP has been found in the Ethernet (wired) MAC address table of the network infrastructure. This means the AP is physically connected to the LAN. If the BSSID does not match the company's authorized APs, it implies the AP is unauthorized and hence classified as a rogue.

Topics

#rogue AP detection#WIP#BSSID matching#Eth-Wired-Mac-Table

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice