Free Aruba Certified Network Security Professional Exam HPE7-A02 Exam Practice Test

A port-access role for AOS-CX switches has this policy applied to it: plaintextCopy codeport-access policy mypolicy 10 class ip zoneC action drop 20 class ip zoneA action drop 100 class ip zoneBThe classes have this configuration: plaintextCopy code class ip zoneC10 match tcp 10.2.0.0/16 eq https class ip zoneA10 match ip any 10.1.0.0/16 class ip zoneB10 match ip any 10.0.0.0/8The company wants to permit clients in this role to access 10.2.12.0/24 with HTTPS. What should you do?

• Add this rule to zoneC: 5 match any 10.2.12.0/24 eq https
• Add this rule to zoneA: 5 ignore tcp any 10.2.12.0/24 eq https
• Add this rule to zoneB: 5 match tcp any 10.2.12.0/24 eq https
• Add this rule to zoneC: 5 ignore tcp any 10.2.12.0/24 eq https

A company has a third-party security appliance deployed in its data center. The company wants to pass all traffic for certain clients through that device before forwarding that traffic toward its ultimate destination.Which AOS-CX switch technology fulfills this use case?

• Virtual Network Based Tunneling (VNBT)
• MC-LAG
• Network Analytics Engine (NAE)
• Device profiles

HPE Aruba Networking ClearPass Policy Manager (CPPM) uses a service to authenticate clients. You are now adding the Endpoints Repository as anauthorization source for the service, and you want to add rules to the service's policies that apply different access levels based, in part, on a client's devicecategory. You need to ensure that CPPM can apply the new correct access level after discovering new clients' categories.What should you enable on the service?

• The Posture Compliance option in the Service tab
• The Profile Endpoints option in the Service tab
• The Use cached Roles and Posture attributes from previous sessions option in the Enforcement tab
• The Audit End-host option in the Service tab

The following firewall role is configured on HPE Aruba Networking Central-managed APs: wlan access-rule employeesindex 3rule any any match 17 67 67 permit rule any any match any 53 53 permitrule 10 5 5.0 255.255 255.0 match any any any denyrule 10.5 0.0 255.255 0.0 match 6 80 80 permitrule 10.5 0.0 255.255.0.0 match 6 443 443 permit rule 10.5.0.0 255.255.0.0 match any any any deny rule any any match any any any permitA client has authenticated and been assigned to the employees role. The client has IP address10.2.2.2. Which correctly describes behavior in this policy?

• HTTPS traffic from 10.2.2.2 to 10.5.5.5 is denied.
• HTTPS traffic from 10.2.2.2 to 203.0.113.12 is denied.
• Traffic from 10.5.3.3 in an active HTTPS session between 10.2.2.2 and 10.5.3.3 is permitted.
• Traffic from 198.51.100.12 in an active HTTP session between 10.2.2.2 and 198.51.100.12 is denied.

A company needs you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI).What is one task you should do to prepare?

• Install the root CA for CPPM's HTTPS certificate as trusted in the CPDI application.
• Configure WMI, SSH, and SNMP external accounts for device scanning on CPPM.
• Enable Insight in the CPPM server configuration settings.
• Collect a Data Collector token from HPE Aruba Networking Central.

A company needs you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one task you should do to prepare?

• Install the root CA for CPPM’s HTTPS certificate as trusted in the CPDI application.
• Enable Insight in the CPPM server configuration settings.
• Configure WMI, SSH, and SNMP external accounts for device scanning on CPPM.
• Collect a Data Collector token from HPE Aruba Networking Central.

A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass PolicyManager (CPPM). The company passes traffic from the corporate LAN destined to the data center through a third-party SRX firewall. The company would like tofurther protect itself from internal threats. What is one solution that you can recommend?

• Have the third-party firewall send Syslogs to CPPM, which can work with network devices to lock internal attackers out of the network.
• Use tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal traffic directly through the third-party firewall.
• Add ClearPass Device Insight (CPDI) to the solution; integrate it with the third-party firewall to develop more complete device profiles.
• Configure CPPM to poll the third-party firewall for a broad array of information about internal clients, such as profile and posture.

A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company passes traffic from the corporate LAN destined to the data center through a third-party SRX firewall. The company would like to further protect itself from internal threats. What is one solution that you can recommend?

• Have the third-party firewall send Syslogs to CPPM, which can work with network devices to lock internal attackers out of the network.
• Add ClearPass Device Insight (CPDI) to the solution, integrate it with the third-party firewall to develop more complete device profiles.
• Configure CPPM to poll the third-party firewall for a broad array of information about internal clients, such as profile and posture.
• Use tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal traffic directly through the third-party firewall.

An AOS-CX switch has been configured to implement UBT to a cluster of three HPE Aruba Networking gateways.How does the switch determine to which gateways to tunnel UBT users' traffic?

• The switch tunnels all users' traffic to the gateway configured as the primary gateway in the UBT zone, unless that gateway fails.
• The switch tunnels each user's traffic to the particular gateway assigned as that user's active user designed gateway.
• The switch load balances client traffic across the primary and standby gateway configured in the UBT zone.
• The switch tunnels all users' traffic to the gateway assigned as the switch's active device designated gateway.

What is a use case for the HPE Aruba Networking ClearPass OnGuard dissolvable agent?

• Continuously monitoring Windows domain clients for compliance
• Implementing a one-time compliance scan
• Auto-remediating posture issues on clients
• Periodically scanning Linux clients for security issues