Discuss HP HPE6-A78 Exam Topic 1 Question 96

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.

What is a consideration for using those capabilities?

AClearPass admins will need to provide the credentials of an API admin account to configure on Aruba devices.

BYou will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.

CArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

DTCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Suggested Answer: B

ClearPass Policy Manager (CPPM) uses various methods to classify endpoints, and one of them is TCP fingerprinting, which involves analyzing TCP/IP packets to identify the type of device or operating system sending them. To utilize TCP fingerprinting capabilities, network traffic needs to be accessible to the CPPM. This can be done by mirroring traffic to CPPM's span port from a device that can see the traffic, like a core routing switch. This approach allows CPPM to observe the TCP characteristics of devices as they communicate over the network, enabling it to make more accurate decisions for device classification.

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Luisa 2 months ago

Option A seems right. API credentials are often needed for configuration.

Leonardo 2 months ago

I feel like option C is misleading. ArubaOS-CX should support it.

Andra 2 months ago

I think option B makes sense. Mirroring traffic is crucial for accurate data.

Eugene 2 months ago

I’m not sure about B, isn’t there another way to gather that data?

Jerry 2 months ago

Wait, D sounds odd, why would MDM be needed for wireless?

Leslie 2 months ago

A is a good point, API credentials are crucial for setup.

Alyce 3 months ago

I disagree with C, ArubaOS-CX should support it.

Noelia 3 months ago

B is definitely a must, traffic mirroring is key for accurate data.

Bobbye 3 months ago

I vaguely remember something about needing a third-party MDM for wireless TCP fingerprinting, but I can't remember if that's a strict requirement or just a recommendation.

Lorrine 3 months ago

I feel like we covered the limitations of ArubaOS-CX switches, but I'm uncertain if they really can't support TCP fingerprinting for wired endpoints.

Nelida 3 months ago

I think we practiced a question about traffic mirroring for ClearPass, so option B sounds familiar, but I can't recall the specifics.

Alpha 3 months ago

I remember discussing how ClearPass interacts with Aruba devices, but I'm not sure if we need to provide API credentials for TCP fingerprinting.

HPE6-A78 Exam - Topic 1 Question 96 Discussion