hpe6-a78 question 38 discussion

View all Aruba Certified Network Security Associate Exam here
back to hp forum

Question 38

Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the
ArubaOS Detected Radios page lists this Information for the AP
SSID = PubllcWiFI
BSSID = a8M27 12 34:56
Match method = Exact match
Match type = Eth-GW-wired-Mac-Table
The security team asks you to explain why this AP is classified as a rogue. What should you explain?

  • A. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue
  • B. The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue
  • C. The AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately
  • D. The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.
Answer:

D


User Votes:
A 1 votes
50%
B
50%
C
50%
D 1 votes
50%
Discussions
0 / 1000
felipe.mafra
6 months, 2 weeks ago

GW-Wired-MAC: The collection of Gateway MACs of all APs across Mobility Conductor and managed devices.

Source: https://www.arubanetworks.com/techdocs/ArubaOS_8.12.0_Web_Help/Content/arubaos-solutions/wireless-intrus-prev/dete-rogu-aps.htm?Highlight=wip

0
Pyrokar
4 months, 4 weeks ago

Match type: Wired-Mac-Table -> AP is bridging frames with wired devices MAC address as source -> connected to LAN
ETH-GW-Wired-Mac-Table -> even more specific, the source MAC is the mac of a default GW
The Answer is A

0