QuestionQ24

Forensics

A customer has an AOS-10 architecture managed by HPE Aruba Networking Central. HPE Aruba Networking infrastructure devices authenticate clients to an HPE Aruba Networking ClearPass cluster.

In HPE Aruba Networking Central, you are reviewing network traffic flows for a wireless IoT device categorized as a “Raspberry Pi” client. You observe SSH traffic. You then review several additional wireless IoT clients and find that they are also sending SSH.

Which element helps establish a foundation for robust network-security forensics?

  • A Enabling debug-level information for network infrastructure device logs
  • B Enable BPDU protection and loop protection on edge switch ports
  • C Implementing 802.1X authentication on switch ports that connect to APs
  • D Ensuring that all network devices use a correct, consistent clock
Explanation

Correct, synchronized clocks let security teams correlate timestamps and establish the sequence of traffic, authentication, and log events across devices. Aruba documentation states that secure protocols and auditing functions rely on synchronized system times from a reliable source, such as NTP.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!