A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). In the CPDI security settings, Security Analysis is On, the Data Source is ClearPass Device…

Question

Options

• AThe posture is unknown, and CPDI has detected exactly four vulnerabilities on the device.
• BThe posture is healthy, but CPDI has detected multiple vulnerabilities on the device.
• CThe posture is unhealthy, and CPDI has also detected at least one vulnerability on the device.
• DThe posture is unhealthy, but CPDI has not detected any vulnerabilities on the device.

• A
  5% (1)
• B
  9% (2)
• C
  82% (18)
• D
  5% (1)

Explanation

Option C is correct because a Risk Score of 90 in CPDI indicates a high-risk device, which maps to an unhealthy posture - and with Security Analysis enabled using CPDI itself as the data source, that elevated score also reflects that at least one vulnerability has been actively detected on the device. The two conditions (unhealthy posture + vulnerabilities) compound to produce such a high score.

Why the distractors fail:

• A is wrong on two counts: posture cannot be "unknown" when Enable Posture Assessment is explicitly On (it will be evaluated as healthy or unhealthy), and "exactly four" vulnerabilities is an arbitrary claim the score does not support.
• B is wrong because a healthy posture would keep the risk score much lower; a score of 90 rules out a healthy posture state.
• D is wrong because with Security Analysis On and CPDI as the data source, a score this high implies vulnerabilities were found - zero detected vulnerabilities would not drive the risk to 90.

Memory tip: Think "90 = double trouble." A near-maximum risk score means both dimensions are bad - posture is unhealthy and vulnerabilities are present. If either were clean, the score would be noticeably lower.

No community discussion yet for this question.