HPE7-A02 Exam Questions
140 real HPE7-A02 exam questions with expert-verified answers and explanations. Page 3 of 3.
- Question #101Designing and Planning Network Security Deployments
Which endpoint classification method requires direct device interrogation for identification?
active profilingpassive profilingendpoint identificationdevice interrogation - Question #102Designing and Planning Network Security Deployments
A remote worker needs secure access to the corporate network from an untrusted public Wi-Fi connection. Which Aruba solution should be used?
Aruba VIAremote access VPNuntrusted networksecure connectivity - Question #103Implementing Advanced Security Features
An organization has many IoT devices that need different access policies based on their security risk level. Which feature of Aruba ClearPass allows for automatic enforcement of se...
ClearPass Policy ManagerIoT securityAI-driven policyautomated enforcement - Question #104Implementing Advanced Security Features
You have configured an AOS-CX switch to implement 802.1X on edge ports. Assume ports operate in the default auth-mode. VolP phones are assigned to the "voice" role and need to send...
802.1XAOS-CXVoIP VLANrole-based access - Question #105Implementing Advanced Security Features
You need to set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to provide certificate- based authentication of 802.1X supplicants. How should you upload the root CA certif...
ClearPass Policy Managercertificate-based authentication802.1XTrusted CA - Question #106Troubleshooting and Monitoring Network Security
A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against th...
NAE agentcontrol plane policingDoS detectionAOS-CX monitoring - Question #107Troubleshooting and Monitoring Network Security
You have run an Active Endpoint Security Report on HPE Aruba Networking ClearPass. The report indicates that hundreds of endpoints have MAC addresses but no known IP addresses. Wha...
ClearPass endpoint profilerDHCP IP discoveryIP helperendpoint visibility - Question #108Implementing Advanced Security Features
An admin has configured an AOS-CX switch with these settings: port-access role employees vlan access name employees This switch is also configured with CPPM as its RADIUS server. W...
RADIUS enforcementAruba VSAAOS-CX rolesClearPass enforcement profile - Question #109Troubleshooting and Monitoring Network Security
The security team needs you to show them information about MAC spoofing attempts detected by HPE Aruba Networking ClearPass Policy Manager (CPPM). What should you do?
ClearPass InsightMAC spoofingendpoint security reportthreat detection - Question #110Implementing Advanced Security Features
You need to set up an HPE Aruba Networking VIA solution for a customer who needs to support 2100 remote employees. The customer wants employees to download their VIA connection pro...
Aruba VIAVPNCVIA Authentication ProfileClearPass RADIUS integration - Question #111Implementing Advanced Security Features
A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). You have identified a device, which is currently classified as one type, but y...
ClearPass Device Insightdevice reclassificationuser rulesendpoint classification - Question #112Implementing Advanced Security Features
You are deploying a virtual Data Collector for use with HPE Aruba Networking ClearPass Device Insight (CPDI). You have identified VLAN 101 in the data center as the VLAN to which t...
ClearPass Device Insightvirtual Data Collectorport assignmentVLAN connectivity - Question #113Troubleshooting and Monitoring Network Security
A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against th...
NAE agentcontrol plane policingDoS detectionAOS-CX monitoring - Question #114Troubleshooting and Monitoring Network Security
A company has AOS-CX switches at the access layer, managed by HPE Aruba Networking Central. You have identified suspicious activity on a wired client. You want to analyze the clien...
packet capturemirror sessionWiresharktraffic analysis - Question #115Troubleshooting and Monitoring Network Security
HPE Aruba Networking Central displays a Gateway Threat Count alert in the alert list. How can you gather more information about what caused the alert to trigger?
gateway threat detectionAruba Central alertsthreat forensicssecurity investigation - Question #116Troubleshooting and Monitoring Network Security
The following firewall role is configured on HPE Aruba Networking Central-managed APs: wlan access-rule employees index 3 rule any any match 17 67 67 permit rule any any match any...
firewall policy analysisrole-based ACLstateful traffic rulespolicy evaluation - Question #117Implementing Advanced Security Features
You need to set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to provide certificate- based authentication of 802.1X supplicants. How should you upload the root CA certif...
ClearPass Policy Managercertificate-based authentication802.1XTrusted CA - Question #118Implementing Advanced Security Features
You are setting up policy rules in HPE Aruba Networking SSE. You want to create a single rule that permits users in a particular user group to access multiple applications. What is...
Aruba SSEZTNA policy rulesapplication tagsuser group access - Question #119Implementing Advanced Security Features
A company is using HPE Aruba Networking Central SD-WAN Orchestrator to establish a hub- spoke VPN between branch gateways (BGWs) at 1444 site and VPNCs at multiple data centers. Wh...
SD-WAN Orchestratorhub-spoke VPNBGWVPNC DC preference - Question #120Implementing Advanced Security Features
A company has HPE Aruba Networking APs (AOS-10), which authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is set up to receive a variety of informat...
Dynamic AuthorizationRADIUS CoAClearPass enforcementAOS-10 WLAN - Question #121Troubleshooting and Monitoring Network Security
A company wants HPE Aruba Networking ClearPass Policy Manager (CPPM) to respond to Syslog messages from its Check Point firewall. You have added the firewall as an event source and...
ClearPass Policy ManagerSyslog integrationevent dictionariesCheck Point firewall - Question #122Implementing Advanced Security Features
An AOS-CX switch has been configured to implement UBT to a cluster of three HPE Aruba Networking gateways. How does the switch determine to which gateways to tunnel UBT users' traf...
UBTAOS-CXgateway clusteringtraffic tunneling - Question #123Implementing Advanced Security Features
What correctly describes an HPE Aruba Networking AP's Device (TPM) certificate?
TPM certificateAP certificatesHPE Aruba CAPKI - Question #124Troubleshooting and Monitoring Network Security
Refer to the Exhibit. You have downloaded a packet capture that you generated on HPE Aruba Networking Central. When you open the capture in Wireshark, you see the output shown in t...
packet captureWiresharkAruba ERMERSPAN - Question #125Implementing Advanced Security Features
A company wants to implement Virtual Network based Tunneling (VNBT) on a particular group of users and assign those users to an overlay network with VNI 3000. Assume that an AOS-CX...
VNBTEVPN VXLANAOS-CX rolesoverlay networking - Question #126Designing and Planning Network Security Deployments
A company uses both HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI). What is one way integrating the two solutions can...
Zero Trust SecurityClearPass Device InsightCPPM integrationapplication tagging - Question #127Implementing Advanced Security Features
A company has AOS-CX switches and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants switches to implement 802.1X authentication to CPPM and download user role...
802.1XRADIUS enforcementuser rolesHPE VSA - Question #128Designing and Planning Network Security Deployments
A company uses both HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI). What is one way integrating the two solutions can...
Zero Trust SecurityClearPass Device Insightprohibited applicationspolicy enforcement - Question #129Implementing Advanced Security Features
A company has HPE Aruba Networking infrastructure devices. The devices authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). You want CPPM to track informat...
RADIUS accountinginterim updatesclient trackingCPPM - Question #130Troubleshooting and Monitoring Network Security
HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc us...
RAPIDSrogue detectionad hoc SSIDwireless threat location - Question #131Implementing Advanced Security Features
An AOS-CX switch has been configured to implement UBT to two HPE Aruba Networking gateways that implement VRRP on the users' VLAN. What correctly describes how the switch tunnels U...
UBTVRRPgateway redundancyAOS-CX - Question #132Troubleshooting and Monitoring Network Security
Which Aruba solution allows security teams to analyze network conversations for forensic investigations?
ClearPass Device Insightforensic analysisnetwork visibilitysecurity investigation - Question #133Designing and Planning Network Security Deployments
Which issue can an HPE Aruba Networking Secure Web Gateway (SWG) solution help customers address?
Secure Web Gatewayhybrid workersmalware protectioninternet security - Question #134Optimizing Network Security Performance
A company has several use cases for using its AOS-CX switches' HPE Aruba Networking Network Analytics Engine (NAE). What is one guideline to keep in mind as you plan?
Network Analytics EngineNAE agentsswitch capacityperformance planning - Question #135Implementing Advanced Security Features
A company has been running Gateway IDS/IPS on its gateways in IDS mode for several weeks. The company wants to transition to IPS mode. What is one step you should recommend?
IDS/IPSIPS mode transitionrule allowlistinggateway security - Question #136Implementing Advanced Security Features
A ClearPass Policy Manager (CPPM) service includes these settings: Role Mapping Policy: Evaluate: Select first Rule 1 conditions: Authorization:AD:Groups EQUALS Managers Authentica...
CPPM policy evaluationTEAProle mappingenforcement policy - Question #137Implementing Advanced Security Features
A company has HPE Aruba Networking APs managed by HPE Aruba Networking Central. You have set up a WLAN to enforce WPA3 with 802.1X authentication. What happens if the client fails...
WPA3802.1Xauthentication failurewireless security - Question #138Implementing Advanced Security Features
A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one aspect of the integrati...
ClearPass Device InsightCPPM integrationdevice profilingclassification override - Question #139Implementing Advanced Security Features
Refer to Exhibit. An HPE Aruba Networking 9x00 gateway is part of an HPE Aruba Networking Central group that has the settings shown in the exhibit. What would cause the gateway to...
IDPSgateway securitytraffic inspectionruleset matching - Question #140Implementing Advanced Security Features
You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.). For which type of certificate is it recommended to install a...
ClearPass clusterHTTPS certificateCA-signed certificatePKI