Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HPE6-A78 Exam - Topic 1 Question 96 Discussion

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.What is a consideration for using those capabilities?
B) You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.
A) ClearPass admins will need to provide the credentials of an API admin account to configure on Aruba devices.
C) ArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.
D) TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

HPE6-A78 Exam - Topic 1 Question 96 Discussion

Actual exam question for HP's HPE6-A78 exam
Question #: 96
Topic #: 1
[All HPE6-A78 Questions]

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.

What is a consideration for using those capabilities?

Show Suggested Answer Hide Answer
Suggested Answer: B

ClearPass Policy Manager (CPPM) uses various methods to classify endpoints, and one of them is TCP fingerprinting, which involves analyzing TCP/IP packets to identify the type of device or operating system sending them. To utilize TCP fingerprinting capabilities, network traffic needs to be accessible to the CPPM. This can be done by mirroring traffic to CPPM's span port from a device that can see the traffic, like a core routing switch. This approach allows CPPM to observe the TCP characteristics of devices as they communicate over the network, enabling it to make more accurate decisions for device classification.


Contribute your Thoughts:

0/2000 characters
Eugene
3 days ago
I’m not sure about B, isn’t there another way to gather that data?
upvoted 0 times
...
Jerry
8 days ago
Wait, D sounds odd, why would MDM be needed for wireless?
upvoted 0 times
...
Leslie
13 days ago
A is a good point, API credentials are crucial for setup.
upvoted 0 times
...
Alyce
19 days ago
I disagree with C, ArubaOS-CX should support it.
upvoted 0 times
...
Noelia
24 days ago
B is definitely a must, traffic mirroring is key for accurate data.
upvoted 0 times
...
Bobbye
29 days ago
I vaguely remember something about needing a third-party MDM for wireless TCP fingerprinting, but I can't remember if that's a strict requirement or just a recommendation.
upvoted 0 times
...
Lorrine
1 month ago
I feel like we covered the limitations of ArubaOS-CX switches, but I'm uncertain if they really can't support TCP fingerprinting for wired endpoints.
upvoted 0 times
...
Nelida
1 month ago
I think we practiced a question about traffic mirroring for ClearPass, so option B sounds familiar, but I can't recall the specifics.
upvoted 0 times
...
Alpha
1 month ago
I remember discussing how ClearPass interacts with Aruba devices, but I'm not sure if we need to provide API credentials for TCP fingerprinting.
upvoted 0 times
...

Save Cancel