HPE Network Security Associate (HPE6-A78)Demo

By HP · Question Mode

QuestionQ11

Investigate

A company has HPE Aruba Networking Mobility Controllers (MCs), campus APs, and AOS-CX switches. It plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The HPE Aruba Networking ClearPass administrators want to run Network scans as part of the solution.

What should you configure in the infrastructure to support the scans?

  • A Create remote mirrors on the AOS-CX switches that collect traffic on edge ports, and mirror it to CPPM’s IP address.
  • B Create device fingerprinting profiles on the AOS-CX switches that include SNMP, and apply the profiles to edge ports.
  • C Create SNMPv3 users on the AOS-CX switches, and make sure that the credentials match those configured on CPPM.
  • D Create a TA profile on the AOS-CX switches with the root CA certificate for HPE Aruba Networking ClearPass’s HTTPS certificate.
Explanation

ClearPass Policy Manager Network Scan discovers and profiles endpoints and network devices by querying seed and discovered devices through SNMP. Configuring SNMPv3 users on the AOS-CX switches with credentials that match the SNMPv3 credentials configured in ClearPass allows ClearPass to authenticate to the switches and retrieve the required discovery information.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!