HPE Network Security Associate (HPE6-A78)Demo

By HP · Question Mode

QuestionQ45

Analyze

What is one method by which HPE Aruba Networking ClearPass Policy Manager (CPPM) combines multiple classification techniques to profile endpoints?

  • A Because DHCP fingerprints can be easily spoofed, CPPM examines MAC OUIs, which have a higher reliability, to verify that the DHCP fingerprint is valid.
  • B Because analyzing DHCP fingerprints can be resource intensive, CPPM can also use Windows DHCP to analyze DHCP fingerprints.
  • C Because different types of devices with similar OS might have the same DHCP fingerprint, CPPM can examine HTTP User-Agent strings to find the precise device type.
  • D Because implementing DHCP fingerprinting requires the company to remove its current DHCP servers, CPPM can collect device traffic on a Span port as a less-intrusive option.
Explanation

DHCP fingerprints can be shared by different device types or operating-system variants. ClearPass can use HTTP User-Agent strings to refine a DHCP-based classification and identify the more precise device type; Aruba specifically notes that DHCP alone may not distinguish an iPad from an iPhone.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!