HP Aruba Certified Network Security Professional - HPE7-A02 Exam Practice Test

A. Click the Source column and then the Destination column to sort the packets into the desired order.

B. Apply a capture filter that selects for both the 10.1.70.90 and 10.1.79.11 IP addresses.

C. Apply a capture filter that selects for TCP port 5448.

D. Right-click one of the packets between those addresses and choose to follow the stream.

A. CPPM can offload policy decisions to the third-party solutions, enabling CPPM to respond to authentication requests more quickly.

B. CPPM can exchange contextual information about clients with third-party solutions, which helps make better decisions.

C. CPPM can take over filtering internal traffic so that the third-party solutions have more processing power to devote to filtering external traffic.

D. CPPM can make the third-party solutions more secure by adding signature-based threat detection capabilities.

A. Enable WMI probing in the cluster-wide parameters.

B. Enable the Data Port in the ClearPass server settings and connect that port to the network.

C. Configure SNMP in the network device settings for the switches that support the Linux devices.

D. Set up SSH accounts on CPPM and map them to the Linux devices' subnets.

A. Application

B. Endpoint

C. Tips

D. Device

A. Clients are failing to authenticate to corporate SSIDs. You should first check for misconfigured authentication settings and then investigate a possible threat.

B. Hackers are likely trying to pose as authorized APs. You should use the detecting radio information and immediately track down the device that triggered the event.

C. Admins have likely misconfigured SSID security settings on some of the company's APs. You should have them check those settings.

D. This event might be a threat but is almost always a false positive. You should wait to see the event over several days before following up on it.

A. It helps remote clients download IPsec profiles for later use.

B. It provides an alternative to IPsec that is suitable for legacy clients.

C. It helps to negotiate the IPsec SA automatically and securely.

D. It provides a more modern and secure alternative to IPsec.

A. Endpoint Compliance EQUALS false

B. Authorization: [Endpoints Repository] Conflict EQUALS true

C. Endpoint Device Insight Tag EXISTS

D. Authorization: [Endpoints Repository] Compromised EQUALS true

A. Add the Shell service and set autocmd to the group name.

B. Add the Shell service and set priv-Ivl to the group name.

C. Add the Aruba:Common service and set Aruba-Priv-Admin-User to the group name.

D. Add the Aruba:Common service and set Aruba-Admin-Role to the group name.

A. As the trunk native VLAN in the "voice" role (and not in the edge port settings)

B. As the trunk native VLAN on edge ports and the trunk native VLAN on the "voice" role

C. As the allowed trunk VLAN in the "voice" role (and not in the edge port settings)

D. As a trunk allowed VLAN on edge ports and the trunk native VLAN in the "voice" role

A. The organization currently has no way to prevent users from exfiltrating sensitive data from SaaS applications.

B. Remote workers need access to private data center applications without exposing those applications to unauthorized users.

C. Hybrid workers are exposing their computers to risky internet sites and infection by malware when they work from home.

D. The organization needs a faster way to quarantine clients that have generated threats, as detected by third-party firewalls.

A. HPE Aruba Networking Downloadable Role Enforcement type with gateway role name set to
"employees"

B. RADIUS Enforcement type with Aruba-User-Role VSA set to "employees"

C. HPE Aruba Networking Downloadable Role Enforcement type with role name set to "employees"

D. RADIUS Enforcement type with HPE-User-Role VSA set to "employees"

A. The Check Point Extension is installed through ClearPass Guest.

B. Ingress Event Dictionaries for Check Point messages are enabled.

C. The CoA delay value is set to 0 on the server.

D. ClearPass Device Insight integration is disabled.

A. Assigns the manager operator-level privileges

B. Rejects the manager with an error message

C. Assigns the manager auditor-level privileges

D. Assigns the manager administrator-level privileges

A. You can configure the role, its policy, and the classes referenced in the policy all on CPPM.

B. You can configure the role and its policy on CPPM; however, the classes referenced in the policy must be configured locally on the switch.

C. You can configure the role on CPPM; however, the CPPM role must reference a policy name that is configured on the switch.

D. You can configure the role name on CPPM; however, the role settings, including policy and classes, must be configured locally on the switch.