Discuss HP HPE6-A78 Exam Topic 3 Question 77

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions.

The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints.

What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

ACreate a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

BCreate remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

CConfigure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

DConnect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Suggested Answer: C

ArubaOS-Switches can use sFlow technology to sample network traffic and send the samples to a collector, such as ClearPass Policy Manager (CPPM), for analysis. sFlow can be configured to capture various types of traffic, including HTTP, which typically contains User-Agent strings that can be used for device fingerprinting and classification.

To support the requirement for using HTTP User-Agent strings to classify endpoints, the switches would need to be configured to send sFlow samples containing HTTP traffic to CPPM. CPPM would then analyze these samples and use the User-Agent strings to classify the devices.

Therefore, the correct action to configure ArubaOS-Switches would involve:

Configuring CPPM as the sFlow collector on the switches.

Enabling sFlow on the edge ports that connect to endpoints.

This approach allows the network traffic to be analyzed by CPPM without requiring any additional mirroring or redirection of traffic, which would be resource-intensive and potentially disruptive to network performance.

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

34 comments · newest first

Truman 10 months ago

D might complicate things more than needed.

Devorah 10 months ago

C sounds interesting, but is it really necessary?

Michal 11 months ago

Wait, are we really using HTTP User-Agent for this? Seems a bit outdated.

Larae 11 months ago

I think B could work too, but not as efficient.

Dyan 11 months ago

A is the way to go for HTTP classification.

Lakeesha 11 months ago

Mirroring traffic to CPPM seems like a good idea, but I’m not clear on whether it’s necessary for just classifying endpoints.

Ivette 12 months ago

I feel like we discussed sFlow in relation to traffic monitoring, but I can't recall if it directly helps with HTTP User-Agent strings.

Lelia 12 months ago

I think option A sounds familiar from our practice questions, but I’m a bit confused about how to apply it to edge ports.

Sheridan 12 months ago

I remember something about device fingerprinting policies, but I'm not sure if it specifically mentioned HTTP.

Aleisha 1 year ago

I think option A is the way to go here. Creating a device fingerprinting policy that includes HTTP and applying it to the edge ports seems like the most direct way to get the necessary information to CPPM. I feel pretty confident about this one.

Rocco 1 year ago

Okay, let me see if I can break this down. The key is that we need to get the HTTP traffic from the edge ports to CPPM so that it can use the User-Agent strings for classification. Option C, which talks about configuring CPPM as the sFlow collector, seems like it could work. I'll make a note to research sFlow a bit more.

Johanna 1 year ago

Hmm, I'm a bit confused here. The question mentions that the company is only using CPPM and no other ClearPass solutions. So I'm not sure if option B, which talks about remote mirroring, would be the right approach. I'll need to think this through a bit more.

Louisa 1 year ago

This seems like a straightforward question about configuring the ArubaOS-Switches to support the CPPM's requirement to use HTTP User-Agent strings for endpoint classification. I think option A is the correct answer.

Sang 1 year ago

I wonder if any of these choices involve turning the switches into pretzel-shaped traffic collectors. That would be a fun engineering challenge!

Desmond 1 year ago

Wait, did they really ask us to mirror traffic to CPPM's IP address? That's like handing your homework to the teacher before they even ask for it!

India 1 year ago

↳ replying to Desmond

Wait, did they really ask us to mirror traffic to CPPM's IP address? That's like handing your homework to the teacher before they even ask for it!

Loreen 1 year ago

↳ replying to Desmond

A) Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

Dominga 1 year ago

Hmm, I'm not sure about these options. Wouldn't it be simpler to just enable HTTP inspection on the ArubaOS-Switches and let CPPM pull the data directly?

Amie 1 year ago

↳ replying to Dominga

Exactly. We should focus on configuring the switches to work with CPPM in this specific scenario.

France 1 year ago

↳ replying to Dominga

I see. So, we need to choose the option that aligns with using HTTP User-Agent strings for endpoint classification.

Tyisha 1 year ago

↳ replying to Dominga

But the options provided are more about how to configure the switches to support CPPM's classification requirements.

Hui 1 year ago

↳ replying to Dominga

That's a good point. Enabling HTTP inspection on the switches could be a simpler solution.

Azzie 1 year ago

I'd go with C. Configuring CPPM as the sFlow collector is a clean way to capture the necessary data without messing with port mirroring.

Olga 1 year ago

↳ replying to Azzie

Agreed, keeping it simple is usually the best approach in these situations.

Karl 1 year ago

↳ replying to Azzie

That sounds like a good idea. It's a simple solution without extra configurations.

Mariann 1 year ago

↳ replying to Azzie

C) Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

Lanie 1 year ago

I see your point, but I still think option A is the best choice for this scenario.

Mabel 1 year ago

But wouldn't option B be more effective in collecting traffic for classification?

Ernie 1 year ago

I agree with Lanie, creating a device fingerprinting policy makes sense.

Naomi 1 year ago

Option B seems the most logical. Mirroring the edge port traffic to CPPM allows it to analyze the HTTP User-Agent strings and classify the endpoints.

Sina 1 year ago

↳ replying to Naomi

That makes sense. It's important to configure the switches in a way that allows CPPM to effectively classify the endpoints.

Paris 1 year ago

↳ replying to Naomi

I agree, mirroring the traffic to CPPM will definitely help with endpoint classification based on HTTP User-Agent strings.

Von 1 year ago

↳ replying to Naomi

Option B seems the most logical. Mirroring the edge port traffic to CPPM allows it to analyze the HTTP User-Agent strings and classify the endpoints.

Lanie 1 year ago

I think we should go with option A.

HPE6-A78 Exam - Topic 3 Question 77 Discussion