Câu 13: HPE7-A10: HPE Network Security Expert

A hospital has an AOS-10 architecture that is managed by HPE Aruba Networking Central. The customer has deployed a pair of HPE Aruba Networking 9000 Series gateways with Security licenses at each clinic. The gateways implement IDS/IPS in IDS mode. The Security Dashboard shows these several recent events with the same signature, as shown below: Refer to the scenario. You have learned that the source of the events is nurse call stations. What can you conclude?

1. A. These devices are unlikely to use TOR legitimately, but malware often does. You and the security team should investigate these stations. — đáp án hiện tại
2. B. This event is a common false positive for clients using video streaming, but you should still investigate it further to comply with best practices.
3. C. The nurses are making their devices vulnerable by contacting unsafe websites. You should educate them about safe browsing practices.
4. D. The threat destination has an internal IP address, and it is likely a DNS server. You should verify that this server is patched and uncompromised.