ExamGecko
Question list
Search
Search

Related questions











Question 63 - HPE7-A01 discussion

Report
Export

A company deployed Dynamic Segmentation with their CX switches and Gateways After performing a security audit on their network, they discovered that the tunnels built between the CX switch and the Aruba Gateway are not encrypted. The company is concerned that bad actors could try to insert spoofed messages on the Gateway to disrupt communications or obtain information about the network.

Which action must the administrator perform to address this situation?

A.
Enable Secure Mode Enhanced
Answers
A.
Enable Secure Mode Enhanced
B.
Enable Enhanced security
Answers
B.
Enable Enhanced security
C.
Enable Enhanced PAPI security
Answers
C.
Enable Enhanced PAPI security
D.
Enable GRE security
Answers
D.
Enable GRE security
Suggested answer: C

Explanation:

PAPI is the protocol that is used to establish tunnels between the CX switch and the Aruba Gateway for Dynamic Segmentation1.By default, PAPI uses a simple checksum to verify the integrity of the messages, but it does not encrypt the payload2. This could expose the network to spoofing or replay attacks by malicious actors.To address this situation, the administrator must enable Enhanced PAPI security, which uses AES-256 encryption and HMAC-SHA1 authentication to protect the tunnel traffic2.Enhanced PAPI security can be enabled on the CX switch by using the commandsystem papi enhanced-security enable3. This will ensure that the tunnels built between the CX switch and the Aruba Gateway are encrypted and authenticated.

asked 16/09/2024
Kevin Brigitta
27 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first