Question 1

You have run an Active Endpoint Security Report on HPE Aruba Networking ClearPass. The report indicates that hundreds of endpoints have MAC addresses but no known IP addresses.

What is one step for addressing this issue?

Answer: B

Explanation:

When the Active Endpoint Security Report on HPE Aruba Networking ClearPass indicates that endpoints have MAC addresses but no known IP addresses, one effective step to address this issue is to add CPPM’s (ClearPass Policy Manager) IP address to the IP helper list on routing switches. This configuration ensures that DHCP requests are forwarded to the ClearPass server, allowing it to track and report the IP addresses assigned to the endpoints. This helps ClearPass maintain an accurate mapping of MAC addresses to IP addresses, improving endpoint visibility and security management.

Reference: ClearPass configuration guides and best practices documentation outline the importance of integrating ClearPass with network infrastructure using IP helper addresses to ensure comprehensive endpoint visibility and management.

Question 2

An admin has configured an AOS-CX switch with these settings:

This switch is also configured with CPPM as its RADIUS server.

Which enforcement profile should you configure on CPPM to work with this configuration?

Answer: D

Explanation:

To ensure that the AOS-CX switch properly assigns the “employees” role when using CPPM (ClearPass Policy Manager) as the RADIUS server, you should configure a RADIUS Enforcement profile on CPPM with the Aruba-User-Role VSA (Vendor-Specific Attribute) set to “employees”. This configuration ensures that when an endpoint authenticates, CPPM sends the appropriate role assignment to the AOS-CX switch, which then applies the corresponding policies and VLAN settings defined for the “employees” role.

Reference: Aruba’s ClearPass documentation and AOS-CX configuration guides detail the integration and configuration of RADIUS enforcement profiles using Aruba-User-Role VSAs for role-based access control.

Question 3

The security team needs you to show them information about MAC spoofing attempts detected by HPE Aruba Networking ClearPass Policy Manager (CPPM).

What should you do?

Answer: B

Explanation:

To show the security team information about MAC spoofing attempts detected by HPE Aruba Networking ClearPass Policy Manager (CPPM), you should use ClearPass Insight to run an Active Endpoint Security report. ClearPass Insight provides comprehensive reporting capabilities that include detailed information on security incidents, such as MAC spoofing attempts. By generating this report, you can provide the security team with a clear overview of the detected spoofing activities, including the endpoints involved and the context of the events.