Free Aruba Certified Network Security Professional Exam HPE7-A02 Exam Practice Test

You have installed an HPE Aruba Networking Network Analytic Engine (NAE) script on an AOS-CX switch to monitor a particular function.Which additional step must you complete to start the monitoring?

• Reboot the switch.
• Enable NAE, which is disabled by default.
• Edit the script to define monitor parameters.
• Create an agent from the script.

Which statement describes Zero Trust Security?

• Companies should focus on protecting their resources rather than on protecting the boundaries of their internal network.
• Companies must apply the same access controls to all users, regardless of identity.
• Companies that support remote workers cannot achieve zero trust security and must determine if the benefits outweigh the cost.
• Companies can achieve zero trust security by strengthening their perimeter security to detect a wider range of threats.

A company has HPE Aruba Networking gateways that implement gateway IDS/IPS. Admins sometimes check the Security Dashboard, but they want a faster way to discover if a gateway starts detecting threats in traffic.What should they do?

• Set up Webhooks that are attached to the HPE Aruba Networking Central Threat Dashboard.
• Use Syslog to integrate the gateways with HPE Aruba Networking ClearPass Policy Manager (CPPM) event processing.
• Set up email notifications using HPE Aruba Networking Central's global alert settings.
• Integrate HPE Aruba Networking ClearPass Device Insight (CPDI) with Central and schedule hourly reports.

A company has HPE Aruba Networking APs running AOS-10 that connect to AOS-CX switches. The APs will:Authenticate as 802.1X supplicants to HPE Aruba Networking ClearPass Policy Manager (CPPM) Be assigned to the "APs" role on the switchesHave their traffic forwarded locallyWhat information do you need to help you determine the VLAN settings for the "APs" role?

• Whether the switches are using local user-roles (LURs) or downloadable user-roles (DURs).
• Whether the APs bridge or tunnel traffic on their SSIDs.
• Whether the switches have established tunnels with an HPE Aruba Networking gateway.
• Whether the APs have static or DHCP-assigned IP addresses.

You are setting up HPE Aruba Networking SSE to prohibit users from uploading and downloading files from Dropbox. What is part of the process?

• Adding a web category that includes Dropbox
• Installing the HPE Aruba Networking SSE root certificate on clients
• Deploying a connector that can reach the remote users
• Deploying a connector that can reach Dropbox

A company uses both HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI).What is one way integrating the two solutions can help the company implement Zero Trust Security?

• CPPM can provide CPDI with custom device fingerprint definitions in order to enhance the company's total visibility.
• CPDI can provide CPPM with extra information about users' identity; CPPM can then use that information to apply the correct identity-based enforcement.
• CPPM can inform CPDI that it has assigned a particular Aruba-User-Role to a client; CPDI can then use that information to reclassify the client.
• CPDI can use tags to inform CPPM that clients are using prohibited applications; CPPM can then tell the network infrastructure to quarantine those clients.

You manage AOS-10 APs with HPE Aruba Networking Central. A role is configured on these APs with the following rules:Allow UDP on port 67 to any destination Allow any to network 10.1.6.0/23Deny any to network 10.1.0.0/16 + log Deny any to network 10.0.0.0/8Allow any to any destinationYou add this new rule immediately before rule 2:Deny SSH to network 10.1.4.0/23 + denylistWhat happens when a client assigned to this role sends SSH traffic to 10.1.11.42?

• The traffic is permitted.
• The traffic is dropped and logged.
• The traffic is dropped (without any logging or further action against the client).
• The traffic is dropped, and the client is denylisted.

A company already uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as the RADIUS server for authenticating wireless clients with 802.1X. Now you are setting up 802.1X on AOS-CX switches to authenticate many of those same clients on wired connections. You decide to copy CPPM's wireless 802.1X service and then edit it with a new name and enforcement policy. What else must you change for authentication to work properly?

• Role mapping policy
• Authentication methods
• Authentication source
• Service rules

A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands managers are allowed to enter.Which service must you add to the managers' TACACS+ enforcement profile?

• Cpass:HTTP
• Shell
• ARAP
• Aruba:Common

A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass PolicyManager (CPPM). The company passes traffic from the corporate LAN destined to the data center through a third-party SRX firewall. The company would like tofurther protect itself from internal threats. What is one solution that you can recommend?

• Have the third-party firewall send Syslogs to CPPM, which can work with network devices to lock internal attackers out of the network.
• Use tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal traffic directly through the third-party firewall.
• Add ClearPass Device Insight (CPDI) to the solution; integrate it with the third-party firewall to develop more complete device profiles.
• Configure CPPM to poll the third-party firewall for a broad array of information about internal clients, such as profile and posture.