HP Exam HPE7-A02 Topic 10 Question 7 Discussion

Actual exam question for HP's HPE7-A02 exam

Question #: 7
Topic #: 10

HPE Aruba Networking switches are implementing MAC-Auth to HPE Aruba Networking ClearPass Policy Manager (CPPM) for a company's printers. The company wants to quarantine a client that spoofs a legitimate printer's MAC address. You plan to add a rule to the MAC-Auth service enforcement policy for this purpose. What condition should you include?

AEndpoint Compliance EQUALS false

BEndpoint Device Insight Tag EXISTS

CAuthorization: [Endpoints Repository] Compromised EQUALS true

DAuthorization: [Endpoints Repository] Conflict EQUALS true

Show Suggested Answer

Suggested Answer: D

MAC Spoofing Detection with Endpoint Conflict:

When two devices attempt to use the same MAC address, ClearPass identifies a Conflict state in the Endpoints Repository.

This condition can be used to detect and quarantine clients that spoof legitimate devices.

Option D: Correct. The Conflict EQUALS true condition identifies devices with duplicate MAC addresses.

Option A: Incorrect. Endpoint compliance checks posture, not MAC spoofing.

Option B: Incorrect. Device Insight Tags are used for profiling but do not identify conflicts.

Option C: Incorrect. Compromised devices relate to security incidents, not MAC address conflicts.

by Jeanice at Mar 07, 2025, 11:10 AM

Limited Time Offer

25%

Off

Get Premium HPE7-A02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Casie

2 days ago

Hmm, I'm not sure about that. Wouldn't 'Authorization: [Endpoints Repository] Conflict EQUALS true' be a better choice? If there's a MAC address conflict, that's a clear sign of a spoofed device.

upvoted 0 times

...

Viola

12 days ago

I'd go with 'Authorization: [Endpoints Repository] Compromised EQUALS true'. Detecting a compromised device is key to quarantining it.

upvoted 0 times

...

Roxane

17 days ago

The 'Endpoint Compliance EQUALS false' option seems like the way to go. If a client is spoofing a printer's MAC, it's probably not compliant with the network policies.

upvoted 0 times

Dylan

3 days ago

I agree, 'Endpoint Compliance EQUALS false' would be the best condition to include.

upvoted 0 times

...