A company has HPE Aruba Networking infrastructure devices. The devices authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). You want CPPM to track information about clients, such as their IP addresses and their network bandwidth utilization. What should you set up on the network infrastructure devices to help that happen?

RADIUS accounting to CPPM, including interim updates.

Logging with CPPM configured as a Syslog server.

Dynamic authorization enabled in the RADIUS settings for CPPM.

RADIUS accounting to CPPM, including interim updates.

An IF-MAP interface with CPPM as the destination.

HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was 'Detect adhoc using Valid SSID.' What is one possible next step?

Use HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general area for the threat.

Make sure that you have tuned the threshold for that check as false positives are common for it.

Make sure that clients have updated drivers, as faulty drivers are a common explanation for this attack type.

Use HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general area for the threat.

Look for the IP address associated with the offender and then check for that IP address among HPE Aruba Networking Central clients.

A company is using HPE Aruba Networking Central SD-WAN Orchestrator to establish a hub-spoke VPN between branch gateways (BGWs) at 1164 site and VPNCs at multiple data centers. What is part of the configuration that admins need to complete?

In BGWs' groups, select the VPNCs to which to connect in a DC preference list.

In VPNCs' groups, establish VPN pools to control which branches connect to which VPNCs.

In BGWs' and VPNCs' groups, create default IKE policies for the SD-WAN Orchestrator to use.

In BGWs' groups, select the VPNCs to which to connect in a DC preference list.

At the global level, create default IPsec policies for the SD-WAN Orchestrator to use.

A company has HPE Aruba Networking APs running AOS-10 that connect to AOS-CX switches. The APs will:Authenticate as 802.1X supplicants to HPE Aruba Networking ClearPass Policy Manager (CPPM)Be assigned to the 'APs' role on the switchesHave their traffic forwarded locallyWhat information do you need to help you determine the VLAN settings for the 'APs' role?

Whether the APs bridge or tunnel traffic on their SSIDs.

Whether the switches are using local user-roles (LURs) or downloadable user-roles (DURs).

Whether the APs bridge or tunnel traffic on their SSIDs.

Whether the switches have established tunnels with an HPE Aruba Networking gateway.

Whether the APs have static or DHCP-assigned IP addresses.

A company has AOS-CX switches, which authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is set up to receive a variety of information about clients' profile and posture. New information can mean that CPPM should change a client's enforcement profile. What should you set up on the switches to help the solution function correctly?

Enable dynamic authorization, and specify CPPM as a dynamic authorization client.

Enable RADIUS accounting to CPPM, including interim RADIUS accounting.

Configure a RADIUS track that references CPPM's FQDN or IP address.

Enable dynamic authorization, and specify CPPM as a dynamic authorization client.

Re-configure the authentication server on the switch specifying CPPM as a TACACS server.

An AOS-CX switch has been configured to implement UBT to two HPE Aruba Networking gateways that implement VRRP on the users' VLAN. What correctly describes how the switch tunnels UBT users' traffic to those gateways?

The switch always sends all users' traffic to the primary gateway configured in the UBT zone.

The switch always sends the users' traffic to the VRRP master.

The switch always sends all users' traffic to the primary gateway configured in the UBT zone.

The switch always load shares the users' traffic across both gateways.

The switch always sends all users' traffic to the gateway assigned as the active device designed gateway.

A company has HPE Aruba Networking APs running AOS-10 and managed by HPE Aruba Networking Central. The company also has AOS-CX switches. The security team wants you to capture traffic from a particular wireless client. You should capture this client's traffic over a 15-minute time period and then send the traffic to them in a PCAP file. What should you do?

Go to the client's AP in HPE Aruba Networking Central. Use the 'Security' page to run a packet capture.

Access the CLI for the client's AP. Set up a mirroring session between its radio and a management station running Wireshark.

Go to the client's AP in HPE Aruba Networking Central. Use the 'Security' page to run a packet capture.

Go to that client in HPE Aruba Networking Central. Use the 'Live Events' page to run a packet capture.

Access the CLI for the client's AP's switch. Set up a mirroring session between the AP's port and a management station running Wireshark.

A company needs you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one task you should do to prepare?

Enable Insight in the CPPM server configuration settings.

Install the root CA for CPPM's HTTPS certificate as trusted in the CPDI application.

Enable Insight in the CPPM server configuration settings.

Configure WMI, SSH, and SNMP external accounts for device scanning on CPPM.

Collect a Data Collector token from HPE Aruba Networking Central.

A company wants you to create a custom device fingerprint on CPPM with rules for profiling a group of specialized devices. What is one requirement?

Connecting a known device of this type and getting it discovered in CPPM's Endpoints Repository.

Enabling HPE Aruba Networking ClearPass Device Insight integration with the correct Data Collector token.

Pre-defining the desired attributes and rules in an XML format file.

Disabling the 'Automatically download Endpoint Profiler Fingerprints' feature in cluster-wide parameters.

HP HPE7-A02 Practice Test 4 - Free Online Exam Prep & Questions

A company uses both HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI). What is one way integrating the two solutions can help the company implement Zero Trust Security?

Become a Premium Member for full access

Unlock Premium Member

HP HPE7-A02 Practice Test 4

Question

HP HPE7-A02 Practice Tests

Practice Tests