How can HPE Aruba reduce the IT administration overhead associated with this deployment while maintaining a secure environment using MPSK?

Your manufacturing client is having installers deploy seventy headless scanners and fifty IP cameras in their warehouse These new devices do not support 802 1X authentication.

How can HPE Aruba reduce the IT administration overhead associated with this deployment while maintaining a secure environment using MPSK?

A. Have the installers generate keys with ClearPass Self Service Registration.

B. Have the MPSK gateway derive the unique pre-shared keys based on the MAC OUI.

C. Use MPSK Local to automatically provide unique pre-shared keys for devices.

D. MPSK Local will allow the cameras to share a key and the scanners to share a different key

View Answer

Answer: D

Explanation:

A. Have the installers generate keys with ClearPass Self Service Registration. – While this could theoretically work, it would require each installer to manually register each device. This can be cumbersome and time-consuming, especially given the number of devices in this scenario.

B. Have the MPSK gateway derive the unique pre-shared keys based on the MAC OUI. – This is not a typical feature of MPSK. MPSK can assign unique keys based on full MAC addresses, not just the MAC OUI (which only identifies the manufacturer and not individual devices).

C. Use MPSK Local to automatically provide unique pre-shared keys for devices. – MPSK Local can be set up to assign unique pre-shared keys based on MAC addresses, which would reduce administrative overhead. However, the "automatic" provision is somewhat misleading, as the keys and MAC addresses would still need to be predefined in the MPSK Local configuration.

D. MPSK Local will allow the cameras to share a key and the scanners to share a different key. – This is a valid use of MPSK. It would be less secure than giving each device its unique key (since all cameras would share one key and all scanners another), but it would reduce the administrative overhead considerably. This approach balances security and simplicity.

Given the primary goal of reducing IT administration overhead while still maintaining a relatively secure environment, the best answer would be:

D. MPSK Local will allow the cameras to share a key and the scanners to share a different key.