Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HPE7-A02 Exam - Topic 10 Question 35 Discussion

You have created this rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) service's enforcement policy:IF Authorization [Endpoints Repository] Conflict EQUALS trueTHEN apply "quarantine_profile"What information can help you determine whether you need to configure cluster-wide profiler parameters to ignore some conflicts?
D) Whether the company has devices that use PXE boot
A) Whether some devices are running legacy operating systems
B) Whether the company has rare Internet of Things (IoT) devices
C) Whether some devices are incapable of captive portal or 802.1X authentication

HPE7-A02 Exam - Topic 10 Question 35 Discussion

Actual exam question for HP's HPE7-A02 exam
Question #: 35
Topic #: 10
[All HPE7-A02 Questions]

You have created this rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) service's enforcement policy:

IF Authorization [Endpoints Repository] Conflict EQUALS true

THEN apply "quarantine_profile"

What information can help you determine whether you need to configure cluster-wide profiler parameters to ignore some conflicts?

Show Suggested Answer Hide Answer
Suggested Answer: D

A conflict in the Endpoints Repository usually indicates that ClearPass has seen different profiling data for the same MAC, which might mean a spoofing attempt---or simply normal behavior for certain device types.

Devices that use PXE boot often:

Boot initially from the network with one set of characteristics (e.g., a minimal OS, different DHCP fingerprint),

Then chain-load into a different OS with a different fingerprint and sometimes even a different network profile.

Aruba exam and design material specifically point out PXE boot as a common, benign cause of profiler conflicts and recommend tuning cluster-wide profiler parameters to ignore or relax some conflicts for these devices.

Therefore, you look at whether the company has devices that use PXE boot when deciding whether to tune profiler conflict behavior Option D.


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel