HP Aruba-ACNSA HPE6-A78 Question # 45 Topic 5 Discussion
HPE6-A78 Exam Topic 5 Question 45 Discussion:
Question #: 45
Topic #: 5
You have been authorized to use containment to respond to rogue APs detected by ArubaOS Wireless Intrusion Prevention (WIP). What is a consideration for using tarpit containment versus traditional wireless containment?
A.
Rather than function wirelessly, tarpit containment sends ARP frames over the wired network to poison rogue APs ARP tables and prevent them from transmitting on the wired network.
B.
Rather than target all clients connected to rogue APs, tarpit containment targets only authorized clients that are connected to a rogue AP, reducing the chance of negative effects on neighbors.
C.
Tarpit containment does not require an RF Protect license to function, while traditional wireless containment does.
D.
Tarpit containment forms associations with clients to enable more effective containment with fewer disassociation frames than traditional wireless containment.
Tarpit containment is a method used in ArubaOS Wireless Intrusion Prevention (WIP) to contain rogue APs. It differs from traditional wireless containment in several ways, particularly in how it interacts with clients and manages network resources.
Tarpit containment works by spoofing frames from an AP to confuse a client about its association. It forces the client to associate with a fake channel or BSSID, which is more efficient than rogue containment via repeated de-authorization requests. This method is designed to be less disruptive and more resource-efficient1.
Here’s why the other options are not correct:
Option A is incorrect because tarpit containment does not involve sending ARP frames over the wired network. It operates wirelessly by creating a fake channel or BSSID.
Option B is incorrect because tarpit containment does not selectively target authorized clients; it affects all clients connected to the rogue AP.
Option C is incorrect because tarpit containment does require an RF Protect license to function2.
Therefore, Option D is the correct answer. Tarpit containment is more effective at keeping clients off the network with fewer disassociation frames than traditional wireless containment. It achieves this by forming associations with clients, which leads to a more efficient use of airtime and reduces the chance of negative effects on legitimate network users12.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit