You have been instructed to look in the ArubaOS Security Dashboard's client list. Your goal is to find clients that belong to the company and have connected to devices that might belong to hackers…

Question

Options

• AMAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Rogue
• BMAC address: d8:50:e6:f3:6e:c5; Client Classification: Interfering; AP Classification: Neighbor
• CMAC address: d8:50:e6:f3:6e:60; Client Classification: Interfering; AP Classification: Authorized
• DMAC address: d8:50:e6:f3:6d:a4; Client Classification: Authorized; AP Classification: Rogue

• A
  15% (4)
• B
  4% (1)
• C
  8% (2)
• D
  73% (19)

Explanation

The ArubaOS Security Dashboard, part of the AOS-8 architecture (Mobility Controllers or Mobility Master), provides visibility into wireless clients and access points (APs) through its Wireless Intrusion Prevention (WIP) system. The goal is to identify clients that belong to the company (i.e., authorized clients) and have connected to devices that might belong to hackers (i.e., rogue APs). Client Classification: Authorized: A client that has successfully authenticated to an authorized AP and is recognized as part of the company's network (e.g., an employee device). Interfering: A client that is not authenticated to the company's network and is considered external or potentially malicious. AP Classification: Authorized: An AP that is part of the company's network and managed by the MC/MM. Rogue: An AP that is not authorized and is suspected of being malicious (e.g., connected to the company's wired network without permission). Neighbor: An AP that is not part of the company's network but is not connected to the wired network (e.g., a nearby AP from another organization). The requirement is to find a client that is authorized (belongs to the company) and connected to a rogue AP (might belong to hackers).

No community discussion yet for this question.