HPE7-A02 · Question #13
HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc using Valid SSID."…
The correct answer is A. Use HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general. When HPE Aruba Networking Central detects an Infrastructure Attack, such as "Detect adhoc using Valid SSID," the next step is to locate the general area of the threat. You can use HPE Aruba Networking Central floorplans or the identities of the detecting APs to pinpoint the…
Question
HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc using Valid SSID." What is one possible next step?
Options
- AUse HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general
- BLook for the IP address associated with the offender and then check for that IP address among
- CMake sure that you have tuned the threshold for that check, as false positives are common for it.
- DMake sure that clients have updated drivers, as faulty drivers are a common explanation for this
How the community answered
(32 responses)- A72% (23)
- B6% (2)
- C3% (1)
- D19% (6)
Explanation
When HPE Aruba Networking Central detects an Infrastructure Attack, such as "Detect adhoc using Valid SSID," the next step is to locate the general area of the threat. You can use HPE Aruba Networking Central floorplans or the identities of the detecting APs to pinpoint the approximate location of the adhoc network. This allows you to physically investigate and address the source of the threat, ensuring that unauthorized or rogue networks are quickly identified and
Topics
Community Discussion
No community discussion yet for this question.