nerdexam
HP

HPE6-A78 · Question #70

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is…

The correct answer is B. You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing. ClearPass Policy Manager (CPPM) uses various methods to classify endpoints, and one of them is TCP fingerprinting, which involves analyzing TCP/IP packets to identify the type of device or operating system sending them. To utilize TCP fingerprinting capabilities, network…

Aruba Security Solutions and Architectures

Question

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities. What is a consideration for using those capabilities?

Options

  • AClearPass admins will need to provide the credentials of an API admin account to configure on
  • BYou will need to mirror traffic to one of CPPM's span ports from a device such as a core routing
  • CArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on
  • DTCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM)

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    76% (26)
  • C
    12% (4)
  • D
    6% (2)

Explanation

ClearPass Policy Manager (CPPM) uses various methods to classify endpoints, and one of them is TCP fingerprinting, which involves analyzing TCP/IP packets to identify the type of device or operating system sending them. To utilize TCP fingerprinting capabilities, network traffic needs to be accessible to the CPPM. This can be done by mirroring traffic to CPPM's span port from a device that can see the traffic, like a core routing switch. This approach allows CPPM to observe the TCP characteristics of devices as they communicate over the network, enabling it to make more accurate decisions for device classification.

Topics

#TCP fingerprinting#ClearPass#endpoint profiling#traffic mirroring

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice