HPE7-A02 practice question 18 of 25

A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one aspect of the integration that you should explain?

Full set: 156 questions
Answer options
A: CPPM no longer supports any Device Profiler features and relies on CPDI for this profile information.
B: CPDI must be configured as an audit server on CPPM for the integration to be successful.
C: CPDI must have security analysis disabled on it for the integration to be successful.
D: CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI takes precedence. Correct answer
Correct Answer:
D. CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI takes precedence.
Explanation

When HPE Aruba Networking ClearPass Policy Manager (CPPM) is integrated with HPE Aruba Networking ClearPass Device Insight (CPDI), CPPM sends its collected endpoint attributes (e.g., from RADIUS, DHCP) to CPDI. CPDI uses this data, along with its own advanced analysis from network traffic, to classify the device. If there is a discrepancy between CPPM's initial profile and CPDI's final classification, CPDI is considered the authoritative source. The refined and more accurate classification from CPDI is then synchronized back to the CPPM Endpoint Repository, overwriting any previous classification.

Why Incorrect

A. CPPM's native profiler features are not disabled; they work in conjunction with CPDI by providing the initial set of endpoint attributes for analysis.
B. The integration is configured using APIs and service parameters within CPPM, not by designating CPDI as an audit server, which serves a different function.
C. Disabling security analysis is not a requirement for integration; this analysis is a core, value-added feature of the ClearPass Device Insight platform.

References

1. HPE Aruba Networking. (2020). ClearPass Device Insight Integration with ClearPass Policy Manager TechNote. Page 4, "Integration Overview" states, "ClearPass Policy Manager is the source of truth for all endpoint context. ClearPass Device Insight is the source of truth for device classification."

2. HPE Aruba Networking. (2020). ClearPass Device Insight Integration with ClearPass Policy Manager TechNote. Page 5, "Data Flow" section and diagram illustrate that CPPM sends endpoint context to CPDI, and CPDI sends the final classification back to update the CPPM Endpoint Repository.

3. HPE Aruba Networking. (2020). ClearPass Device Insight Integration with ClearPass Policy Manager TechNote. Page 11, "How Device Insight Classifies Devices" explains that CPDI uses attributes from CPPM plus its own collected data to perform classification, which is then updated in the CPPM Endpoint Repository.

Scroll to Top