HPE6-A78 Exam - Topic 2 Question 79 Discussion

Actual exam question for HP's HPE6-A78 exam

Question #: 79
Topic #: 2

A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution

What should you do to configure the infrastructure to support the scans?

ACreate a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

BCreate device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

CCreate remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.

DCreate SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

Show Suggested Answer

Suggested Answer: D

To configure the infrastructure to support network scans as part of the ClearPass Policy Manager (CPPM) solution, creating SNMPv3 users on ArubaOS-CX switches is necessary. Ensuring that the credentials for these SNMPv3 users match those configured on CPPM is crucial for enabling CPPM to perform network scans effectively. SNMPv3 provides a secure method for network management by offering authentication and encryption, which are essential for safely conducting scans that classify endpoints by type. This configuration allows CPPM to communicate securely with the switches and gather necessary data without compromising network security.

ArubaOS-CX configuration manuals that discuss SNMP settings.

Network management and security guidelines that emphasize the importance of secure SNMP configurations for network scanning and monitoring.

by Rashida at Jul 09, 2025, 12:47 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alpha

2 months ago

Totally agree with B, it's the most efficient method!

upvoted 0 times

...

Lonna

2 months ago

Wait, can we really use remote mirrors for this? Sounds complicated!

upvoted 0 times

...

Glenn

2 months ago

Option B sounds right, device fingerprinting is key for endpoint classification.

upvoted 0 times

...

Carla

3 months ago

C seems a bit overkill for just scans, right?

upvoted 0 times

...

Alline

3 months ago

I think D is the way to go, SNMPv3 adds better security.

upvoted 0 times

...

Melissa

3 months ago

I feel like option A is more about certificate management, which might not directly relate to the scans. I’m leaning towards B or D for the actual scanning setup.

upvoted 0 times

...

Delmy

3 months ago

I practiced a similar question where we had to set up traffic mirroring for monitoring. Option C seems like it could be relevant here, but I’m not confident if it’s the best choice.

upvoted 0 times

...

Noemi

4 months ago

I think option D could be important too, especially since we need to ensure ClearPass can communicate securely with the switches.

upvoted 0 times

...

Elsa

4 months ago

I remember something about needing SNMP for device classification, so option B sounds familiar, but I'm not entirely sure if that's the only thing we need.

upvoted 0 times

...

Charlene

4 months ago

I've got this one! The answer is clearly option B - we need to create the device fingerprinting profiles on the switches so CPPM can identify the endpoint types. That's the core of what they're asking for here.

upvoted 0 times

...

Mi

4 months ago

This is a tricky one. I'm not super familiar with Aruba's ClearPass, so I'll need to do a bit of research on the specific requirements there. But I think the key is making sure the network devices are properly configured to support the scanning.

upvoted 0 times

...

Vivan

4 months ago

Okay, I've got a strategy in mind. I think the answer is to create the HTTPS certificate trust on the switches, and also set up SNMP access so CPPM can query the devices. That should give CPPM the access it needs to perform the scans.

upvoted 0 times

...

Patti

4 months ago

Hmm, I'm a bit confused on the best approach here. Should we be configuring the switches, the APs, or both? I want to make sure I understand the full scope of what needs to be done.

upvoted 0 times

...

Ariel

5 months ago

This seems like a pretty straightforward question. I think the key is to enable the right protocols and access on the network devices to allow CPPM to perform the network scans.

upvoted 0 times

...

Ming

6 months ago

Hmm, I'm not sure. B seems like it could work, but I'm worried about the overhead of fingerprinting on the switches. C might be the cleanest solution.

upvoted 0 times

...

Aja

7 months ago

D looks good to me. Configuring SNMPv3 users on the ArubaOS-CX switches and matching the credentials in CPPM is the way to go.

upvoted 0 times

Yolande

5 months ago

User 2: I disagree, I believe option D) Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM is the best choice

upvoted 0 times

...

Gerald

5 months ago

User 2: I disagree, I believe option D is the best choice. Configuring SNMPv3 users on the ArubaOS-CX switches is more secure.

upvoted 0 times

...

Rosina

5 months ago

User 1: I think we should go with option A, creating a TA profile on the ArubaOS-Switches.

upvoted 0 times

...

Yuki

5 months ago

User 1: I think we should go with option A) Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

upvoted 0 times

...

Viva

7 months ago

Hmm, I see your point. Maybe option A is the better choice after all

upvoted 0 times

...

Brynn

7 months ago

I agree with Gerardo, security should be a top priority in this configuration

upvoted 0 times

...

Gerardo

7 months ago

But option A involves creating a TA profile with the root CA certificate, which seems more secure

upvoted 0 times

...

Viva

8 months ago

I disagree, I believe option B is the way to go

upvoted 0 times

...

Gerardo

8 months ago

I think we should go with option A

upvoted 0 times

...

Loreen

8 months ago

I think the correct answer is C. Creating remote mirrors on the ArubaOS-Switches to send the traffic to CPPM seems like the best way to support the network scans.

upvoted 0 times

Glory

7 months ago

I agree, creating device fingerprinting profiles on the ArubaOS-Switches with SNMP included could also be a valid choice for supporting the network scans.

upvoted 0 times

...

Elena

7 months ago

I'm not sure, but I think creating SNMPv3 users on ArubaOS-CX switches could also be a good option to configure the infrastructure for the scans.

upvoted 0 times

...

Alisha

8 months ago

I think the correct answer is C. Creating remote mirrors on the ArubaOS-Switches to send the traffic to CPPM seems like the best way to support the network scans.

upvoted 0 times

...