HPE7-A02 Practice Questions

A.  

You should use a third-party tool to encrypt file2.pem before sending it and file1.pem to the C

A.  

B.  

You should concatenate file1.pem and file2.pem into a single file, and submit that to the desired CA to sign.

C.  

You should submit file1.pem, but not file2.pem, to the desired CA to sign.

D.  

You should submit file2.pem, but not file1.pem, to the desired CA to sign.

A.  

In VPNCs’ groups, establish VPN pools to control which branches connect to which VPNCs.

B.  

In BGWs’ and VPNCs’ groups, create default IKE policies for the SD-WAN Orchestrator to use.

C.  

In BGWs’ groups, select the VPNCs to which to connect in a DC preference list.

D.  

At the global level, create default IPsec policies for the SD-WAN Orchestrator to use.

A.  

It lets a device query whether a single certificate is revoked or not.

B.  

It lets a device dynamically renew its certificate before the certificate expires.

C.  

It lets a device download all the serial numbers for certificates revoked by a CA at once.

D.  

It lets a device determine whether to trust a certificate without needing any root certificates installed.

A.  

Creating a non-default file security profile

B.  

Integrating HPE Aruba Networking SSE with a supported third-party antivirus provider

C.  

Deploying a connector that can reach the remote users

D.  

Creating an external web profile that enables SSL inspection

A.  

Specify at least two server names under the "Connect to these servers" field.

B.  

Select the desired Trusted Root Certificate Authority and select the check box next to "Don't prompt users."

C.  

Under the "Connect to these servers" field, use a wildcard in the server name.

D.  

Clear the check box for using simple certificate selection and select the desired certificate manually.

A.  

In the iot-wired role and on no physical interfaces

B.  

In the iot role and the iot-wired role and on no physical interfaces

C.  

In the iot-wired role and the access switch uplinks

D.  

In the iot role and the access switch uplinks

A.  

The posture is unknown, and CPDI has detected exactly four vulnerabilities on the device.

B.  

The posture is healthy, but CPDI has detected multiple vulnerabilities on the device.

C.  

The posture is unhealthy, and CPDI has also detected at least one vulnerability on the device.

D.  

The posture is unhealthy, but CPDI has not detected any vulnerabilities on the device.

A.  

Configure the switch to act as an ARP proxy.

B.  

Create static IP-to-MAC bindings for the DHCP and DNS servers.

C.  

Save the IP-to-MAC bindings to external storage.

D.  

Configure the IP helper address on this switch, rather than a core routing switch.

A.  

Associate the applications directly with the IdP used to authenticate the users; choose any for the destination in the policy rule.

B.  

Apply the same tag to the applications; select the tag as a destination in the policy rule.

C.  

Place all the applications in the same connector zone; select that zone as a destination in the policy rule.

D.  

Select the applications within a non-default web profile; select that profile in the policy rule.

A.  

Apply a capture filter that selects for both the 10.1.70.90 and 10.1.79.11 IP addresses.

B.  

Click the Source column and then the Destination column to sort the packets into the desired order.

C.  

Apply a capture filter that selects for TCP port 5448.

D.  

Right-click one of the packets between those addresses and choose to follow the stream.