ExamGecko
Question list
Search
Search

Related questions











Question 30 - HPE6-A68 discussion

Report
Export

Refer to the exhibit.

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad? (Select two.)

A.
HTTP User-Agent
Answers
A.
HTTP User-Agent
B.
SNMP
Answers
B.
SNMP
C.
DHCP fingerprinting
Answers
C.
DHCP fingerprinting
D.
SmartDevice
Answers
D.
SmartDevice
E.
Onguard Agent
Answers
E.
Onguard Agent
Suggested answer: A, C

Explanation:

HTTP User-Agent

In some cases, DHCP fingerprints alone cannot fully classify a device. A common example is the Apple family of smart devices; DHCP fingerprints cannot distinguish between an Apple iPad and an iPhone. In these scenarios, User-Agent strings sent by browsers in the HTTP protocol are useful to further refine classification results.

User-Agent strings are collected from:

* ClearPass Guest

* ClearPass Onboard

* Aruba controller through IF-MAP interface

Note: Collectors are network elements that provide data to profile endpoints.

The following collectors send endpoint attributes to Profile:

* DHCP

DHCP snooping

Span ports

* ClearPass Onboard

* HTTP User-Agent

*MAC OUI – Acquired via various auth mechanisms such as 802.1X, MAC auth, etc.

* ActiveSync plugin

* CPPM OnGuard

*SNMP

* Subnet Scanner

* IF-MAP

* Cisco Device Sensor (Radius Accounting)

* MDM

Reference: Tech Note: ClearPass Profiling (2014), page 11

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

asked 16/09/2024
Franjo Tomurad
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first