Free Preparation Discussions
MENU
HP Exam HPE7-A02 Topic 10 Question 7 Discussion
Topic #: 10
HPE Aruba Networking switches are implementing MAC-Auth to HPE Aruba Networking ClearPass Policy Manager (CPPM) for a company's printers. The company wants to quarantine a client that spoofs a legitimate printer's MAC address. You plan to add a rule to the MAC-Auth service enforcement policy for this purpose. What condition should you include?
MAC Spoofing Detection with Endpoint Conflict:
When two devices attempt to use the same MAC address, ClearPass identifies a Conflict state in the Endpoints Repository.
This condition can be used to detect and quarantine clients that spoof legitimate devices.
Option D: Correct. The Conflict EQUALS true condition identifies devices with duplicate MAC addresses.
Option A: Incorrect. Endpoint compliance checks posture, not MAC spoofing.
Option B: Incorrect. Device Insight Tags are used for profiling but do not identify conflicts.
Option C: Incorrect. Compromised devices relate to security incidents, not MAC address conflicts.
Currently there are no comments in this discussion, be the first to comment!