Discuss HP HPE6-A78 Exam Topic 2 Question 79

A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution

What should you do to configure the infrastructure to support the scans?

ACreate a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

BCreate device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

CCreate remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.

DCreate SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

Suggested Answer: D

To configure the infrastructure to support network scans as part of the ClearPass Policy Manager (CPPM) solution, creating SNMPv3 users on ArubaOS-CX switches is necessary. Ensuring that the credentials for these SNMPv3 users match those configured on CPPM is crucial for enabling CPPM to perform network scans effectively. SNMPv3 provides a secure method for network management by offering authentication and encryption, which are essential for safely conducting scans that classify endpoints by type. This configuration allows CPPM to communicate securely with the switches and gather necessary data without compromising network security.

ArubaOS-CX configuration manuals that discuss SNMP settings.

Network management and security guidelines that emphasize the importance of secure SNMP configurations for network scanning and monitoring.

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Alpha 10 months ago

Totally agree with B, it's the most efficient method!

Lonna 10 months ago

Wait, can we really use remote mirrors for this? Sounds complicated!

Glenn 10 months ago

Option B sounds right, device fingerprinting is key for endpoint classification.

Carla 11 months ago

C seems a bit overkill for just scans, right?

Alline 11 months ago

I think D is the way to go, SNMPv3 adds better security.

Melissa 11 months ago

I feel like option A is more about certificate management, which might not directly relate to the scans. I’m leaning towards B or D for the actual scanning setup.

Delmy 11 months ago

I practiced a similar question where we had to set up traffic mirroring for monitoring. Option C seems like it could be relevant here, but I’m not confident if it’s the best choice.

Noemi 12 months ago

I think option D could be important too, especially since we need to ensure ClearPass can communicate securely with the switches.

Elsa 12 months ago

I remember something about needing SNMP for device classification, so option B sounds familiar, but I'm not entirely sure if that's the only thing we need.

Charlene 12 months ago

I've got this one! The answer is clearly option B - we need to create the device fingerprinting profiles on the switches so CPPM can identify the endpoint types. That's the core of what they're asking for here.

Mi 1 year ago

This is a tricky one. I'm not super familiar with Aruba's ClearPass, so I'll need to do a bit of research on the specific requirements there. But I think the key is making sure the network devices are properly configured to support the scanning.

Vivan 1 year ago

Okay, I've got a strategy in mind. I think the answer is to create the HTTPS certificate trust on the switches, and also set up SNMP access so CPPM can query the devices. That should give CPPM the access it needs to perform the scans.

Patti 1 year ago

Hmm, I'm a bit confused on the best approach here. Should we be configuring the switches, the APs, or both? I want to make sure I understand the full scope of what needs to be done.

Ariel 1 year ago

This seems like a pretty straightforward question. I think the key is to enable the right protocols and access on the network devices to allow CPPM to perform the network scans.

Ming 1 year ago

Hmm, I'm not sure. B seems like it could work, but I'm worried about the overhead of fingerprinting on the switches. C might be the cleanest solution.

Aja 1 year ago

D looks good to me. Configuring SNMPv3 users on the ArubaOS-CX switches and matching the credentials in CPPM is the way to go.

Yolande 1 year ago

↳ replying to Aja

User 2: I disagree, I believe option D) Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM is the best choice

Gerald 1 year ago

↳ replying to Aja

User 2: I disagree, I believe option D is the best choice. Configuring SNMPv3 users on the ArubaOS-CX switches is more secure.

Rosina 1 year ago

↳ replying to Aja

User 1: I think we should go with option A, creating a TA profile on the ArubaOS-Switches.

Yuki 1 year ago

↳ replying to Aja

User 1: I think we should go with option A) Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

Viva 1 year ago

Hmm, I see your point. Maybe option A is the better choice after all

Brynn 1 year ago

I agree with Gerardo, security should be a top priority in this configuration

Gerardo 1 year ago

But option A involves creating a TA profile with the root CA certificate, which seems more secure

Viva 1 year ago

I disagree, I believe option B is the way to go

Gerardo 1 year ago

I think we should go with option A

Loreen 1 year ago

I think the correct answer is C. Creating remote mirrors on the ArubaOS-Switches to send the traffic to CPPM seems like the best way to support the network scans.

Glory 1 year ago

↳ replying to Loreen

I agree, creating device fingerprinting profiles on the ArubaOS-Switches with SNMP included could also be a valid choice for supporting the network scans.

Elena 1 year ago

↳ replying to Loreen

I'm not sure, but I think creating SNMPv3 users on ArubaOS-CX switches could also be a good option to configure the infrastructure for the scans.

Alisha 1 year ago

↳ replying to Loreen

I think the correct answer is C. Creating remote mirrors on the ArubaOS-Switches to send the traffic to CPPM seems like the best way to support the network scans.

HPE6-A78 Exam - Topic 2 Question 79 Discussion