HPE7-A02 · Question #106
A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches. What…
The correct answer is A. Deploy an NAE agent on the switches to monitor control plane policing (CoPP). To support the detection of denial of service (DoS) attacks on AOS-CX switches, deploying an NAE (Network Analytics Engine) agent to monitor control plane policing (CoPP) is the best approach. NAE agents provide real-time analytics and monitoring capabilities, allowing…
Question
A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches. What can you do to support this use case?
Options
- ADeploy an NAE agent on the switches to monitor control plane policing (CoPP).
- BImplement ARP inspection on all VLANs that support end-user devices.
- CConfigure the switches to implement RADIUS accounting to HPE Aruba Networking ClearPass
- DEnabling debugging of security functions on the switches.
How the community answered
(28 responses)- A71% (20)
- B18% (5)
- C7% (2)
- D4% (1)
Explanation
To support the detection of denial of service (DoS) attacks on AOS-CX switches, deploying an NAE (Network Analytics Engine) agent to monitor control plane policing (CoPP) is the best approach. NAE agents provide real-time analytics and monitoring capabilities, allowing administrators to detect anomalies and potential DoS attacks, such as ping or ARP floods, more quickly and efficiently. Control plane policing helps protect the switch's CPU from unnecessary or malicious traffic, and the NAE agent can alert administrators when thresholds are exceeded, providing a proactive measure to detect and mitigate DoS attacks.
Topics
Community Discussion
No community discussion yet for this question.