HPE7-A02 Exam Questions
140 real HPE7-A02 exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1Implementing Advanced Security Features
A company assigns a different block of VLAN IDs to each of its access layer AOS-CX switches. The switches run version 10.07. The IDs are used for standard purposes, such as for emp...
VLAN naming802.1X authenticationClearPass Policy ManagerAOS-CX user roles - Question #2Designing and Planning Network Security Deployments
A company lacks visibility into the many different types of user and loT devices deployed in its internal network, making it hard for the security team to address those devices. Wh...
ClearPass Device InsightIoT visibilitydevice profilingnetwork visibility - Question #3Troubleshooting and Monitoring Network Security
A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). In the CPDI security settings, Security Analysis is On, the Data Source is Cle...
ClearPass Device Insightrisk scoreposture assessmentvulnerability detection - Question #4Troubleshooting and Monitoring Network Security
You have set up a mirroring session between an AOS-CX switch and a management station, running Wireshark. You want to capture just the traffic sent in the mirroring session, not th...
traffic mirroringWireshark capture filterAOS-CXGRE encapsulation - Question #5Implementing Advanced Security Features
A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which com...
TACACS+ command authorizationClearPass Policy ManagerShell serviceenforcement profile - Question #6Implementing Advanced Security Features
HPE Aruba Networking ClearPass Policy Manager (CPPM) uses a service to authenticate clients. You are now adding the Endpoints Repository as an authorization source for the service,...
endpoint profilingdevice categorizationClearPass service configurationEndpoints Repository - Question #7Implementing Advanced Security Features
A company has AOS-CX switches and HPE Aruba Networking APs, which run AOS-10 and bridge their SSIDs. Company security policies require 802.1X on all edge ports, some of which conne...
802.1X auth-modeAOS-CX edge portsbridged SSIDsclient auth-mode - Question #8Implementing Advanced Security Features
A company has HPE Aruba Networking Central-managed APs. The company wants to block all clients connected through the APs from using YouTube. Which steps should you take?
DPI application controlYouTube blockinggateway firewallapplication rules - Question #9Designing and Planning Network Security Deployments
What is one use case for implementing user-based tunneling (UBT) on AOS-CX switches?
user-based tunnelingUBTAOS-CXDPI wired security - Question #10Implementing Advanced Security Features
A company has HPE Aruba Networking APs running AOS-10 that connect to AOS-CX switches. The APs will: - Authenticate as 802.1X supplicants to HPE Aruba Networking ClearPass Policy M...
VLAN assignmentAP traffic modeAOS-10user roles - Question #11Implementing Advanced Security Features
Your company wants to implement Tunneled EAP (TEAP). How can you set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to enforce certificated- based authentication for clien...
TEAPEAP-TLS inner methodcertificate authenticationClearPass Policy Manager - Question #12Troubleshooting and Monitoring Network Security
Admins have recently turned on Wireless IDS/IPS infrastructure detection at the high level on HPE Aruba Networking APs. When you check WIDS events, you see several RTS rate and CTS...
Wireless IDS/IPSRTS/CTS anomalyWIDS eventsDoS detection - Question #13Troubleshooting and Monitoring Network Security
HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc us...
RAPIDSad-hoc detectionrogue APwireless security response - Question #14Designing and Planning Network Security Deployments
A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company pa...
syslog integrationClearPass Policy Managerinternal threat protectionthird-party firewall - Question #15Designing and Planning Network Security Deployments
A company wants to apply a standard configuration to all AOS-CX switch ports and have the ports dynamically adjust their configuration based on the identity of the user or device t...
downloadable user-rolesAOS-CXClearPass Policy Managerdynamic port configuration - Question #16Troubleshooting and Monitoring Network Security
A company issues user certificates to domain computers using its Windows CA and the default user certificate template. You have set up HPE Aruba Networking ClearPass Policy Manager...
EAP-TLScertificate authenticationusername mappingClearPass troubleshooting - Question #17Implementing Advanced Security Features
You need to use "Tips:Posture" conditions within an 802.1X service's enforcement policy. Which guideline should you follow?
posture complianceenforcement policyTips:PostureClearPass 802.1X - Question #18Troubleshooting and Monitoring Network Security
You have created this rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) service's enforcement policy: IF Authorization [Endpoints Repository] Conflict EQUALS true THE...
endpoint conflictprofiler parametersPXE bootClearPass Device Insight - Question #19Implementing Advanced Security Features
A company has HPE Aruba Networking APs, which authenticate users to HPE Aruba Networking ClearPass Policy Manager (CPPM). What does HPE Aruba Networking recommend as the preferred...
role assignmentAruba-User-Role attributeRADIUS enforcementClearPass Policy Manager - Question #20Troubleshooting and Monitoring Network Security
A security team needs to track a device's communication patterns and identify patterns such as how many destinations the device is accessing. Which Aruba solution can show this inf...
ClearPass Device Insightnetwork activitycommunication patternsdevice behavior analysis - Question #21Implementing Advanced Security Features
A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. You want to assign managers to groups on th...
TACACS+ClearPass enforcement profileAOS-CX authenticationadmin role assignment - Question #22Implementing Advanced Security Features
What is one use case that companies can fulfill using HPE Aruba Networking ClearPass Policy Manager's (CPPM's) Device Profiler?
ClearPass Device ProfilerIoT profilingAI classificationdevice identification - Question #23Implementing Advanced Security Features
A company needs to enforce 802.1X authentication for its Windows domain computers to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company needs the computers to authen...
802.1XTEAPmachine authenticationuser authentication - Question #24Designing and Planning Network Security Deployments
A company is implementing HPE Aruba Networking Wireless IDS/IPS (WIDS/WIPS) on its AOS- 10 APs, which are managed in HPE Aruba Networking Central. What is one requirement for enabl...
WIDS/WIPSrogue AP detectionAOS-10Aruba Central licensing - Question #25Troubleshooting and Monitoring Network Security
A company uses HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application option). In the details for a generic device cluster, you see a recommendation for "...
ClearPass Device Insightdevice clusterprofiling accuracyclassification rules - Question #26Implementing Advanced Security Features
Refer to the Exhibit. All of the switches in the exhibit are AOS-CX switches. What is the preferred configuration on Switch-2 for preventing rogue OSPF routers in this network?
OSPF authenticationMD5rogue router preventionAOS-CX routing security - Question #27Troubleshooting and Monitoring Network Security
A company has HPE Aruba Networking gateways that implement gateway IDS/IPS. Admins sometimes check the Security Dashboard, but they want a faster way to discover if a gateway start...
gateway IDS/IPSthreat alertingAruba Central notificationsemail alerts - Question #28Implementing Advanced Security Features
What is a use case for the HPE Aruba Networking ClearPass OnGuard dissolvable agent?
ClearPass OnGuarddissolvable agentposture assessmentcompliance scanning - Question #29Implementing Advanced Security Features
Which use case is fulfilled by applying a time range to a firewall rule on an AOS device?
AOS firewalltime rangepolicy enforcementACL - Question #30Implementing Advanced Security Features
A company wants HPE Aruba Networking ClearPass Policy Manager (CPPM) to respond to Syslog messages from its Palo Alto Next Generation Firewall (NGFW) by quarantining clients involv...
ClearPass syslog integrationPalo Alto NGFWcontext serverquarantine action - Question #31Designing and Planning Network Security Deployments
A company is implementing a client-to-site VPN based on tunnel-mode IPsec. Which devices are responsible for the IPsec encapsulation?
IPsec tunnel modeclient-to-site VPNencapsulationVPN architecture - Question #32Implementing Advanced Security Features
You are setting up an HPE Aruba Networking VIA solution for a company. You need to configure access control policies for applications and resources that remote clients can access w...
VIA VPNIKE authenticationrole-based access controlVPNC policy - Question #33Troubleshooting and Monitoring Network Security
A company has HPE Aruba Networking APs running AOS-10 and managed by HPE Aruba Networking Central. The company also has AOS-CX switches. The security team wants you to capture traf...
packet capturewireless traffic analysisAruba CentralPCAP - Question #34Optimizing Network Security Performance
Assume that an AOS-CX switch is already implementing DHCP snooping and ARP inspection successfully on several VLANs. What should you do to help minimize disruption time if the swit...
DHCP snoopingARP inspectionbinding persistenceAOS-CX resilience - Question #35Implementing Advanced Security Features
You need to create a rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) role mapping policy that references a ClearPass Device Insight Tag. Which Type (namespace) shou...
ClearPass role mappingDevice Insight tagsEndpoint namespacepolicy configuration - Question #36Implementing Advanced Security Features
You are using OpenSSL to obtain a certificate signed by a Certification Authority (CA). You have entered this command: openssl req -new -out file1.pem -newkey rsa:3072 -keyout file...
PKIcertificate signing requestOpenSSLCSR vs private key - Question #37Implementing Advanced Security Features
A company needs you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one task you should do to p...
ClearPass integrationDevice InsightInsight enablementCPPM configuration - Question #38Troubleshooting and Monitoring Network Security
You have installed an HPE Aruba Networking Network Analytic Engine (NAE) script on an AOS- CX switch to monitor a particular function. Which additional step must you complete to st...
NAEAOS-CX monitoringnetwork analyticsagent creation - Question #39Implementing Advanced Security Features
A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI) and has integrated the two. CPDI admins have created a...
ClearPass CoADevice Insight tagsenforcement policyreal-time profiling - Question #40Implementing Advanced Security Features
A company has HPE Aruba Networking APs and AOS-CX switches, as well as HPE Aruba Networking ClearPass. The company wants CPPM to have HTTP User- Agent strings to use in profiling d...
device profilingHTTP User-AgentIP helperClearPass data collection - Question #41Designing and Planning Network Security Deployments
Which statement describes Zero Trust Security?
Zero Trustnetwork security modelperimeter securityaccess control - Question #42Implementing Advanced Security Features
What is a use case for running periodic subnet scans on devices from HPE Aruba Networking ClearPass Policy Manager (CPPM)?
ClearPasssubnet scanningDHCP fingerprintingdevice profiling - Question #43Troubleshooting and Monitoring Network Security
A company has an HPE Aruba Networking ClearPass cluster with several servers. ClearPass Policy Manager (CPPM) is set up to: - Update client attributes based on Syslog messages from...
ClearPassCoA delaySyslog integrationreauthentication - Question #44Implementing Advanced Security Features
A company wants to turn on Wireless IDS/IPS infrastructure and client detection at the high level on HPE Aruba Networking APs. The company does not want to enable any prevention se...
Wireless IDS/IPSHPE Aruba APsdetection settingsbest practices - Question #45Implementing Advanced Security Features
Refer to Exhibit. A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). In the CPDI interface, you go to the Generic Devices page an...
ClearPass Device Insightmachine learningdevice classificationclustering - Question #46Implementing Advanced Security Features
A company has AOS-CX switches and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants switches to implement 802.1X authentication to CPPM and download user role...
802.1XRADIUScertificate trustTA profile - Question #47Designing and Planning Network Security Deployments
What is a benefit of Online Certificate Status Protocol (OCSP)?
OCSPcertificate revocationPKIcertificate status - Question #48Implementing Advanced Security Features
(Note that the HPE Aruba Networking Central interface shown here might look slightly different from what you see in your HPE Aruba Networking Central interface as versions change;...
IDPSgatewayrulesettraffic inspection - Question #49Implementing Advanced Security Features
A company has wired VolP phones, which transmit tagged traffic and connect to AOS-CX switches. The company wants to tunnel the phones' traffic to an HPE Aruba Networking gateway fo...
UBTVoIPVLAN tunnelingAOS-CX - Question #50Implementing Advanced Security Features
You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.). For which type of certificate it is recommended to install a...
ClearPass clusterHTTPS certificateCA-signed certificateSubscriber