HPE6-A84 Question #24: Real Exam Question with Answer & Explanation

Question

Options

• AThe entry shows multiple DHCP options under the fingerprints.
• BThe entry shows an Unknown status.
• CThe entry shows a profile conflict of having a new profile of Computer for a profiled Printer.
• DThe entry lacks a hostname or includes a hostname with long seemingly random characters.

Explanation

A profile conflict occurs when ClearPass Policy Manager (CPPM) detects a change in the device category or OS family of an endpoint that has been previously profiled. This could indicate that someone has spoofed the MAC address of a legitimate device and is trying to gain unauthorized access to the network. For example, if an endpoint that was previously profiled as a Printer suddenly shows a new profile of Computer, this could be a sign of an attack. You can find more information about profile conflicts and how to resolve them in the ClearPass Policy Manager User Guide. The other options are not necessarily signs of unauthorized access, as they could have other explanations. For example, multiple DHCP options under the fingerprints could indicate that the device has connected to different networks or subnets, an Unknown status could indicate that the device has not been authenticated yet, and a lack of hostname or a random hostname could indicate that the device has not been configured properly or has been reset to factory settings.

No community discussion yet for this question.