HPE6-A78 · Question #98

What is an example of passive endpoint classification?

The correct answer is A. TCP fingerprinting. Endpoint classification in HPE Aruba Networking ClearPass Policy Manager (CPPM) involves identifying and categorizing devices on the network to enforce access policies. CPPM supports two types of profiling methods: passive and active. Passive Profiling: Involves observing…

Network Security Fundamentals

Question

Options

ATCP fingerprinting
BSSH scans
CWMI scans
DSNMP scans

How the community answered

(24 responses)

A
92% (22)
C
4% (1)
D
4% (1)

Explanation

Endpoint classification in HPE Aruba Networking ClearPass Policy Manager (CPPM) involves identifying and categorizing devices on the network to enforce access policies. CPPM supports two types of profiling methods: passive and active. Passive Profiling: Involves observing network traffic that devices send as part of their normal operation, without CPPM sending any requests to the device. Examples include DHCP fingerprinting, HTTP User-Agent analysis, and TCP fingerprinting. Active Profiling: Involves CPPM sending requests to the device to gather information, such as SNMP scans, WMI scans, or SSH probes.

Topics

#passive classification#TCP fingerprinting#endpoint profiling#device fingerprinting

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice