Discuss HP HPE7-A01 Exam Topic 5 Question 7

Your manufacturing client is deploying two hundred wireless IP cameras and fifty headless scanners in their warehouse. These new devices do not support 802.1X authentication.

How can HPE Aruba enhance security for these new IP cameras in this environment?

AUse MPSK Local to automatically provide unique pre-shared Keys for devices.

BAruba ClearPass performs the 802.1X authentication and installs a certificate.

CMPSK provides for each device in the WLAN to have its own unique pre-shared Key.

DMPSK Local will allow the cameras to share a rey and the scanners to share a different

Suggested Answer: C

The best option to enhance security for the new IP cameras and scanners in this environment is C. MPSK provides for each device in the WLAN to have its own unique pre-shared key.

MPSK stands for Multi Pre-Shared Key, and it is a feature that allows different devices to connect to the same SSID with different pre-shared keys. This improves the security and scalability of the network, as each device can have its own key and role without requiring 802.1X authentication or an external policy engine. MPSK can be configured either locally on the AP or centrally on Aruba Central12.

The other options are incorrect because:

A) MPSK Local is a feature that allows the user to configure 24 PSKs per SSID locally on the device. These local PSKs would serve as an extension of the base MPSK functionality. However, MPSK Local is not suitable for this scenario, as it can only support up to 24 devices per SSID, while the client has 250 devices1.

B) Aruba ClearPass is a network access control solution that can perform 802.1X authentication and install certificates for devices. However, this option is not feasible for this scenario, as the new IP cameras and scanners do not support 802.1X authentication3.

D) MPSK Local will not allow the cameras to share a key and the scanners to share a different key. MPSK Local will assign a different key to each device, regardless of their type. Moreover, MPSK Local can only support up to 24 devices per SSID, while the client has 250 devices1.

Get Premium HPE7-A01 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Jovita 10 months ago

Totally agree, unique keys are the way to go!

Kami 10 months ago

Wait, can MPSK really handle all those devices?

Brande 10 months ago

MPSK Local is a solid choice for unique keys!

Stanford 11 months ago

I think ClearPass is overkill for this setup.

Nana 11 months ago

MPSK provides great security for each device.

Corrie 11 months ago

This is a good test of our understanding of Aruba's security features. I'm confident I can work through this step-by-step.

Vincent 11 months ago

Okay, I think I understand the options. I'll need to carefully consider the tradeoffs between the MPSK and ClearPass approaches.

Delmy 12 months ago

MPSK seems like the way to go here. Unique pre-shared keys for each device should provide good security without 802.1X.

Gladys 12 months ago

Hmm, I'm a bit confused about the 802.1X requirement. I'll need to review that part of the material again.

Glory 12 months ago

This looks like a pretty straightforward security question. I think I know the right approach here.

Heidy 1 year ago

I think option D sounds familiar, but I’m not confident that sharing keys between different device types is secure enough.

Weldon 1 year ago

I feel like MPSK is the right approach, but I can't recall if it allows for unique keys per device or just per group.

Omer 1 year ago

I think I saw a practice question about ClearPass and 802.1X, but since these devices don’t support it, I’m not sure how that applies here.

Ezekiel 1 year ago

I remember studying MPSK and how it can enhance security by providing unique keys, but I'm not sure if "Local" means it can do that for all devices.

Elmer 1 year ago

Hmm, I'm a bit unsure about this one. I know the Scrum Team is involved in the PI planning process, but I can't recall exactly who decides the Business Value scoring. I'll have to think this through carefully.

Lettie 1 year ago

Okay, let's see. I think the Instance Hostname and Version are definitely going to be required. And we'll probably need some kind of authentication, so the Keystore Password or Business Manager credentials could be it.

HPE7-A01 Exam - Topic 5 Question 7 Discussion