nerdexam
HP

HPE7-A02 · Question #106

A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches. What…

The correct answer is A. Deploy an NAE agent on the switches to monitor control plane policing (CoPP). To support the detection of denial of service (DoS) attacks on AOS-CX switches, deploying an NAE (Network Analytics Engine) agent to monitor control plane policing (CoPP) is the best approach. NAE agents provide real-time analytics and monitoring capabilities, allowing…

Troubleshooting and Monitoring Network Security

Question

A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches. What can you do to support this use case?

Options

  • ADeploy an NAE agent on the switches to monitor control plane policing (CoPP).
  • BImplement ARP inspection on all VLANs that support end-user devices.
  • CConfigure the switches to implement RADIUS accounting to HPE Aruba Networking ClearPass
  • DEnabling debugging of security functions on the switches.

How the community answered

(28 responses)
  • A
    71% (20)
  • B
    18% (5)
  • C
    7% (2)
  • D
    4% (1)

Explanation

To support the detection of denial of service (DoS) attacks on AOS-CX switches, deploying an NAE (Network Analytics Engine) agent to monitor control plane policing (CoPP) is the best approach. NAE agents provide real-time analytics and monitoring capabilities, allowing administrators to detect anomalies and potential DoS attacks, such as ping or ARP floods, more quickly and efficiently. Control plane policing helps protect the switch's CPU from unnecessary or malicious traffic, and the NAE agent can alert administrators when thresholds are exceeded, providing a proactive measure to detect and mitigate DoS attacks.

Topics

#NAE agent#control plane policing#DoS detection#AOS-CX monitoring

Community Discussion

No community discussion yet for this question.

Full HPE7-A02 Practice