A security administrator at a company detects unauthorized devices attempting to connect to the network. The company uses Aruba ClearPass for authentication. Which solution should the administrator…

Question

Options

• AEnable static VLAN assignment
• BUse LLDP Discovery
• CEnable CPDI Profiling
• DIncrease DHCP lease expiration time

• A
  7% (1)
• C
  86% (12)
• D
  7% (1)

Explanation

CPDI (ClearPass Device Insight) uses AI-driven fingerprinting to automatically discover, classify, and profile every device attempting to join the network, then integrates with ClearPass Policy Manager to trigger enforcement actions - such as blocking or quarantining - against devices that don't match authorized profiles. This makes it the only option that addresses both detection and automatic blocking of unauthorized devices.

Why the distractors fail:

• A (Static VLAN assignment) pre-assigns devices to VLANs based on fixed rules - it's a placement mechanism, not a detection or blocking one.
• B (LLDP Discovery) is a Layer 2 neighbor-discovery protocol for mapping network topology; it has no authentication or enforcement capability.
• D (Increase DHCP lease time) only controls how long IP addresses are held - longer leases actually make it harder to reclaim addresses from unwanted devices.

Memory tip: Think of CPDI as the network's "bouncer with a face-scanner" - it doesn't just check a guest list (static rules), it profiles every device and automatically removes anyone who doesn't belong.

No community discussion yet for this question.