HPE6-A84 · Question #48
Refer to the scenario. A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster. In Aruba Central, you…
The correct answer is A. On CPPM create an Endpoint Context Server that points to the Central API. This is because an Endpoint Context Server (ECS) is a feature that allows ClearPass to receive contextual information from external sources, such as Aruba Central, and use it for policy enforcement and reporting. An ECS can be configured to point to the Aruba Central API and…
Question
Refer to the scenario. A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster. In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as "Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also. You want an easy way to communicate the information that an IoT client has used SSH to Aruba ClearPass Policy Manager (CPPM). What step should you take?
Options
- AOn CPPM create an Endpoint Context Server that points to the Central API.
- BOn CPPM enable Device Insight integration.
- COn Central configure APs and gateways to use CPPM as the RADIUS accounting server.
- DOn Central set up CPPM as a Webhook application.
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C12% (3)
- D4% (1)
Explanation
This is because an Endpoint Context Server (ECS) is a feature that allows ClearPass to receive contextual information from external sources, such as Aruba Central, and use it for policy enforcement and reporting. An ECS can be configured to point to the Aruba Central API and fetch data such as device type, category, OS, applications, traffic flows, etc. An ECS can be used to communicate the information that an IoT client has used SSH to Aruba ClearPass Policy Manager (CPPM). The ECS can query the Aruba Central API and retrieve the network traffic flows of the wireless IoT devices that are categorized as "Raspberry Pi" clients. The ECS can then filter the traffic flows by the SSH protocol and send the relevant information to CPPM. CPPM can then use this information for policy decisions, such as allowing or denying SSH access, or triggering alerts or actions.
Topics
Community Discussion
No community discussion yet for this question.