Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HP Exam HPE6-A78 Topic 3 Question 77 Discussion

Actual exam question for HP's HPE6-A78 exam
Question #: 77
Topic #: 3
[All HPE6-A78 Questions]

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions.

The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints.

What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

Show Suggested Answer Hide Answer
Suggested Answer: C

ArubaOS-Switches can use sFlow technology to sample network traffic and send the samples to a collector, such as ClearPass Policy Manager (CPPM), for analysis. sFlow can be configured to capture various types of traffic, including HTTP, which typically contains User-Agent strings that can be used for device fingerprinting and classification.

To support the requirement for using HTTP User-Agent strings to classify endpoints, the switches would need to be configured to send sFlow samples containing HTTP traffic to CPPM. CPPM would then analyze these samples and use the User-Agent strings to classify the devices.

Therefore, the correct action to configure ArubaOS-Switches would involve:

Configuring CPPM as the sFlow collector on the switches.

Enabling sFlow on the edge ports that connect to endpoints.

This approach allows the network traffic to be analyzed by CPPM without requiring any additional mirroring or redirection of traffic, which would be resource-intensive and potentially disruptive to network performance.


Contribute your Thoughts:

Mabel
7 days ago
But wouldn't option B be more effective in collecting traffic for classification?
upvoted 0 times
...
Ernie
13 days ago
I agree with Lanie, creating a device fingerprinting policy makes sense.
upvoted 0 times
...
Naomi
20 days ago
Option B seems the most logical. Mirroring the edge port traffic to CPPM allows it to analyze the HTTP User-Agent strings and classify the endpoints.
upvoted 0 times
...
Lanie
23 days ago
I think we should go with option A.
upvoted 0 times
...

Save Cancel