HPE7-A02 · Question #132
Which Aruba solution allows security teams to analyze network conversations for forensic investigations?
The correct answer is D. ClearPass Device Insight (CPDI). ClearPass Device Insight (CPDI) is Aruba's AI-driven visibility and analytics platform that collects and analyzes network traffic flows (including deep packet inspection) to profile devices and detect anomalies. This traffic analysis capability allows security teams to…
Question
Which Aruba solution allows security teams to analyze network conversations for forensic investigations?
Options
- ALLDP Neighbor Discovery
- BAruba Smart Rate
- CVLAN Trunking
- DClearPass Device Insight (CPDI)
How the community answered
(22 responses)- B5% (1)
- D95% (21)
Explanation
ClearPass Device Insight (CPDI) is Aruba's AI-driven visibility and analytics platform that collects and analyzes network traffic flows (including deep packet inspection) to profile devices and detect anomalies. This traffic analysis capability allows security teams to reconstruct and investigate network conversations - making it the right tool for forensic investigations.
Why the distractors are wrong:
- A. LLDP Neighbor Discovery is a Layer 2 protocol used to map network topology by discovering adjacent devices - it has no forensic or traffic analysis capability.
- B. Aruba Smart Rate refers to multi-gigabit port technology (2.5G/5G/10G) on switches - it's about physical link speeds, not security analysis.
- C. VLAN Trunking is a network segmentation technique (IEEE 802.1Q) for carrying multiple VLANs over one link - useful for traffic isolation, not investigation.
Memory tip: Think of CPDI as "Catching Perpetrators via Deep Inspection" - it watches and records what's happening on the network so security teams can go back and piece together what happened during an incident.
Topics
Community Discussion
No community discussion yet for this question.