nerdexam
HP

HPE6-A78 · Question #71

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from…

The correct answer is A. Assigning clients to their device categories. HPE Aruba Networking ClearPass Policy Manager (CPPM) is a network access control (NAC) solution that provides device profiling, authentication, and policy enforcement. In this scenario, the company wants to profile clients to determine their device type and use that information…

Aruba Security Solutions and Architectures

Question

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from ClearPass Onboard. The infrastructure devices authenticate clients to ClearPass Policy Manager (CPPM). The company wants to start profiling clients to take their device type into account in their access rights. What is a role that CPPM should play in this plan?

Options

  • AAssigning clients to their device categories
  • BHelping to forward profiling information to the component responsible for profiling
  • CAccepting and enforcing CoA messages
  • DEnforcing access control decisions

How the community answered

(65 responses)
  • A
    92% (60)
  • C
    3% (2)
  • D
    5% (3)

Explanation

HPE Aruba Networking ClearPass Policy Manager (CPPM) is a network access control (NAC) solution that provides device profiling, authentication, and policy enforcement. In this scenario, the company wants to profile clients to determine their device type and use that information to define access rights. Device profiling in ClearPass involves identifying and categorizing devices based on various attributes, such as DHCP fingerprints, HTTP User-Agent strings, or TCP fingerprinting, to assign them to specific device categories (e.g., Windows, macOS, IoT devices, etc.). These categories can then be used in policy decisions to grant or restrict access. Option A, "Assigning clients to their device categories," directly aligns with ClearPass's role in device profiling. ClearPass collects profiling data from network devices (like APs, MCs, or switches) and uses its profiling engine to categorize devices. This categorization is a core function of ClearPass Device Insight, which is integrated into CPPM, and is used to build policies based on device type.

Topics

#endpoint profiling#ClearPass#device classification#policy enforcement

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice