HPE7-A11: HPE Aruba Networking Certified Professional - Campus Access ArchitectDemo

By HP · Question Mode

QuestionQ12

Propose the solution

You are creating a wireless intrusion detection and prevention strategy (WIDS/WIPS) for a client’s enterprise network with HPE Aruba Networking and AOS-10. As part of the design, you intend to deploy dedicated Air Monitors (AMs).

Which two statements are consistent with HPE Aruba Networking best practices for deploying AMs in an AOS-10 environment?

Choose two
  • A It is recommended to deploy four or five AMs per 10,000 sq ft (930 sq m) as a starting point.
  • B Detection of infrastructure threats is enabled by default at the "Low" setting. Raise it after confirming there are no false positive matches.
  • C Deauthenticate containment is disabled by default, which is recommended only after consulting with security and legal stakeholders.
  • D AOS-10 APs operating in "radio mode" act as Hybrid AMs and scan the 4.9 GHz public safety band for local security alerts.
  • E There is no HPE Aruba Networking advised legal risk to recommending enabling "40MHz Intolerance" in the radio profile settings.
Explanation

HPE Aruba Networking recommends using the Low detection setting initially because it enables the most critical detection mechanisms; Medium and High settings can generate false positives or excessive alerts. Rogue containment using deauthentication is disabled by default because containment can have regulatory and legal consequences, so Security and Legal approval is required before enabling it. Dedicated AMs are particularly appropriate when wireless containment is enabled because they can adjust scanning to revisit the containment channel while continuing to scan for other threats.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!