HPE7-A10: HPE Network Security Expert Written ExamDemo

Question

A customer has an AOS-10 architecture that includes HPE Aruba Networking APs. The customer recently enabled WIDS at the high level on the APs. Administrators see several "ad hoc using valid SSID" events.

What should you explain?

A A hacker could be trying to launch a man-in-the-middle or DoS attack. You will start tracking down the source of the events immediately.
B Domain GPOs have likely misconfigured clients. You will meet with the domain admins to work out the issue.
C The WIDS solution is likely malfunctioning, causing APs to detect each other as threats. You will check the configuration immediately.
D Faulty client drivers often cause this event. You will look out for other events, but the customer should not worry.

Explanation

An unauthorized ad hoc network using the same SSID as an authorized WLAN can trick valid clients into connecting to the wrong network, creating the potential for security breaches, including man-in-the-middle attacks. These events therefore warrant investigation as possible malicious activity.

Learn more

Infrastructure event detection levels and signature descriptions

HPE7-A10: HPE Network Security Expert Written ExamDemo

AstroTutor

Notes

Readiness

QuestionQ74

Community Discussion