ExamGecko
Home / HP / HPE7-A02 / List of questions
Ask Question

HP HPE7-A02 Practice Test - Questions Answers, Page 10

Add to Whishlist

List of questions

Question 91

Report Export Collapse

A ClearPass Policy Manager (CPPM) service includes these settings:

Role Mapping Policy:

Evaluate: Select first

Rule 1 conditions:

Authorization:AD:Groups EQUALS Managers

Authentication:TEAP-Method-1-Status EQUALS Success

Rule 1 role: manager

Rule 2 conditions:

Authentication:TEAP-Method-1-Status EQUALS Success

Rule 2 role: domain-comp

Default role: [Other]

Enforcement Policy:

Evaluate: Select first

Rule 1 conditions:

Tips Role EQUALS manager AND Tips Role EQUALS domain-comp

Rule 1 profile list: domain-manager

Rule 2 conditions:

Tips Role EQUALS manager

Rule 2 profile list: manager-only

Rule 3 conditions:

Tips Role EQUALS domain-comp

Rule 3 profile list: domain-only

Default profile: [Deny access]

A client is authenticated by the service. CPPM collects attributes indicating that the user is in the Contractors group, and the client passed both TEAP methods.

Which enforcement policy will be applied?

Become a Premium Member for full access
  Unlock Premium Member

Question 92

Report Export Collapse

A company has HPE Aruba Networking APs managed by HPE Aruba Networking Central. You have set up a WLAN to enforce WPA3 with 802.1X authentication.

What happens if the client fails authentication?

Become a Premium Member for full access
  Unlock Premium Member

Question 93

Report Export Collapse

A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI).

What is one aspect of the integration that you should explain?

Become a Premium Member for full access
  Unlock Premium Member

Question 94

Report Export Collapse

Refer to Exhibit:

HP HPE7-A02 image Question 94 63875089348030604788026

An HPE Aruba Networking 9x00 gateway is part of an HPE Aruba Networking Central group that has the settings shown in the exhibit. What would cause the gateway to drop traffic as part of its IDPS settings?

Become a Premium Member for full access
  Unlock Premium Member

Question 95

Report Export Collapse

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.).

For which type of certificate is it recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?

Become a Premium Member for full access
  Unlock Premium Member

Question 96

Report Export Collapse

A company has HPE Aruba Networking gateways that implement gateway IDS/IPS. Admins sometimes check the Security Dashboard, but they want a faster way to discover if a gateway starts detecting threats in traffic.

What should they do?

Become a Premium Member for full access
  Unlock Premium Member

Question 97

Report Export Collapse

A company has Aruba APs that are controlled by Central and that implement WIDS. When you check WIDS events, you see a 'detect valid SSID misuse' event. What can you interpret from this event, and what steps should you take?

Become a Premium Member for full access
  Unlock Premium Member

Question 98

Report Export Collapse

A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). In the CPDI security settings, Security Analysis is On, the Data Source is ClearPass Device Insight, and Enable Posture Assessment is On. You see that a device has a Risk Score of 90.

What can you know from this information?

Become a Premium Member for full access
  Unlock Premium Member

Question 99

Report Export Collapse

A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company passes traffic from the corporate LAN destined to the data center through a third-party SRX firewall. The company would like to further protect itself from internal threats. What is one solution that you can recommend?

Become a Premium Member for full access
  Unlock Premium Member

Question 100

Report Export Collapse

Refer to the exhibit.

HP HPE7-A02 image Question 100 63875089348124352098824

The exhibit shows a saved packet capture, which you have opened in Wireshark. You want to focus on the complete conversation between 10.1.70.90 and 10.1.79.11 that uses source port 5448.

What is a simple way to do this in Wireshark?

Become a Premium Member for full access
  Unlock Premium Member
Total 130 questions
Go to page: of 13
Search

Related questions