HPE7-A02 Practice Questions

A.  

Whether some devices are running legacy operating systems

B.  

Whether the company has rare Internet of Things (IoT) devices

C.  

Whether some devices are incapable of captive portal or 802.1X authentication

D.  

Whether the company has devices that use PXE boot

A.  

The AP assigns the client to the WLAN's default role.

B.  

The AP drops the client because authentication aborts.

C.  

The AP assigns the client to the WLAN's critical role.

D.  

The AP assigns the client to the WLAN's initial role.

A.  

Have the third-party firewall send Syslogs to CPPM, which can work with network devices to lock internal attackers out of the network.

B.  

Add ClearPass Device Insight (CPDI) to the solution, integrate it with the third-party firewall to develop more complete device profiles.

C.  

Configure CPPM to poll the third-party firewall for a broad array of information about internal clients, such as profile and posture.

D.  

Use tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal traffic directly through the third-party firewall.

A.  

The traffic is permitted.

B.  

The traffic is dropped and logged.

C.  

The traffic is dropped (without any logging or further action against the client).

D.  

The traffic is dropped, and the client is denylisted.

A.  

At the global level, create default IPsec policies for the SD-WAN Orchestrator to use.

B.  

In BGWs' groups, select the VPNCs to which to connect in a DC preference list.

C.  

In VPNCs' groups, establish VPN pools to control which branches connect to which VPNCs.

D.  

In BGWs' and VPNCs' groups, create default IKE policies for the SD-WAN Orchestrator to use.

A.  

Access the CLI for the client’s AP. Set up a mirroring session between its radio and a management station running Wireshark.

B.  

Go to the client’s AP in HPE Aruba Networking Central. Use the "Security" page to run a packet capture.

C.  

Go to that client in HPE Aruba Networking Central. Use the "Live Events" page to run a packet capture.

D.  

Access the CLI for the client’s AP's switch. Set up a mirroring session between the AP’s port and a management station running Wireshark.

A.  

Each cluster is a group of unclassified devices that CPDI's machine learning has discovered to have similar attributes.

B.  

Each cluster is a group of devices that match one of the tags configured by admins.

C.  

Each cluster is all the devices that have been assigned to the same category by one of CPDI's built-in system rules.

D.  

Each cluster is a group of devices that have been classified with user rules, but for which CPDI offers different recommendations.

A.  

The user is logged in and granted operator access.

B.  

The user is logged in and allowed to enter auditor commands only.

C.  

The user is logged in and granted administrators access.

D.  

The user is not allowed to log in.

A.  

Clients are failing to authenticate to corporate SSIDs. You should first check for misconfigured authentication settings and then investigate a possible threat.

B.  

Admins have likely misconfigured SSID security settings on some of the company's APs. You should have them check those settings.

C.  

Hackers are likely trying to pose as authorized APs. You should use the detecting radio information and immediately track down the device that triggered the event.

D.  

This event might be a threat but is almost always a false positive. You should wait to see the event over several days before following up on it.

A.  

Reboot the switch.

B.  

Enable NAE, which is disabled by default.

C.  

Edit the script to define monitor parameters.

D.  

Create an agent from the script.