HPE6-A78 Exam - Topic 7 Question 18 Discussion

Actual exam question for HP's HPE6-A78 exam

Question #: 18
Topic #: 7

Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP

SSID = PubllcWiFI

BSSID = a8M27 12 34:56

Match method = Exact match

Match type = Eth-GW-wired-Mac-Table

The security team asks you to explain why this AP is classified as a rogue. What should you explain?

AThe AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue

BThe ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue

CThe AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

DThe AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

Show Suggested Answer

Suggested Answer: D

by Herman at May 26, 2022, 04:51 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valene

3 months ago

Sounds like a serious threat, better contain it ASAP!

upvoted 0 times

...

Brett

3 months ago

Spoofing MAC addresses is a classic rogue move. No doubt about it!

upvoted 0 times

...

Brianne

3 months ago

Wait, how do we know it's not just a misconfigured device?

upvoted 0 times

...

Irma

4 months ago

I agree, it's a clear sign of unauthorized access!

upvoted 0 times

...

Cruz

4 months ago

That AP is definitely a rogue since it's using the default gateway's MAC.

upvoted 0 times

...

Stefan

4 months ago

I have a vague memory of MAC spoofing being a key indicator for rogue APs. Option D sounds familiar, but I’m not confident if it’s the best explanation for this scenario.

upvoted 0 times

...

Ernie

4 months ago

I practiced a similar question where the rogue AP was identified by its behavior. I think option C is a bit extreme, though. DoS attacks seem serious, but I don't recall that being a typical classification reason.

upvoted 0 times

...

Leota

4 months ago

I'm not entirely sure, but I feel like option B could be relevant too. It talks about spoofing MAC addresses, which seems like a common tactic for rogue devices.

upvoted 0 times

...

Lilli

5 months ago

I remember something about rogue APs being classified based on their MAC addresses. I think option A might be the right choice since it mentions the default gateway's MAC.

upvoted 0 times

...

Keneth

5 months ago

Alright, I've got a strategy here. I'll start by identifying the true statements, then see if I can eliminate the false ones. Gotta love multiple choice!

upvoted 0 times

...