無料HP HPE7-A02テスト練習問題試験問題集 [Q57-Q71]

Rate this post

無料HP HPE7-A02テスト練習問題試験問題集

試験準備には欠かさない！トップクラスのHP HPE7-A02試験最新版アプリ学習ガイドで練習

「HP HPE7-A02試験」、または「Aruba Certified Network Security Professional試験」としても知られている試験は、セキュアなワイヤレスネットワークを設計、実装、管理するITプロフェッショナルのスキルと専門知識を検証する認定プログラムです。この試験は、個人が必要な知識とスキルを持ち、ワイヤレスネットワークを保護し、サイバー攻撃を防止し、機密データを保護することを保証するように設計されています。

HPE7-A02 試験は、Aruba製品を使用したネットワークセキュリティに関する幅広いトピックをカバーする包括的なテストです。この試験は、セキュリティの基礎、認証および暗号化技術、セキュリティプロトコル、ファイアウォール技術、VPN技術、ネットワークアクセス制御などに対する候補者の理解力を評価します。この試験に合格することは、候補者がAruba製品を使用して安全なネットワークを設計、実装、管理するために必要な知識とスキルを持っていることを示します。

57、A company issues user certificates to domain computers using its Windows CA and the default user certificate template. You have set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to authenticate 802.1X clients with those certificates. However, during tests, you receive an error that authorization has failed because the usernames do not exist in the authentication source.
What is one way to fix this issue and enable clients to successfully authenticate with certificates?

Configure rules to strip the domain name from the username.

Change the authentication method list to include both PEAP MSCHAPv2 and EAP-TLS.

Add the ClearPass Onboard local repository to the authentication source list.

Remove EAP-TLS from the authentication method list and add TEAP there instead.

58、What correctly describes an HPE Aruba Networking AP’s Device (TPM) certificate?

It is signed by an HPE Aruba Networking CA and is trusted by many HPE Aruba Networking solutions.

It works well as a captive portal certificate for guest SSIDs.

It is a self-signed certificate that should not be used in production.

It is installed on APs after they connect to and are provisioned by HPE Aruba Networking Central.

59、HPE Aruba Networking switches are implementing MAC-Auth to HPE Aruba Networking ClearPass Policy Manager (CPPM) for a company’s printers. The company wants to quarantine a client that spoofs a legitimate printer’s MAC address. You plan to add a rule to the MAC-Auth service enforcement policy for this purpose.
What condition should you include?

Endpoint Compliance EQUALS false

Endpoint Device Insight Tag EXISTS

Authorization: [Endpoints Repository] Compromised EQUALS true

Authorization: [Endpoints Repository] Conflict EQUALS true

60、A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI) and has integrated the two. CPDI admins have created a tag. CPPM admins have created rules that use that tag in the wired 802.1X and wireless 802.1X services’ enforcement policies.
The company requires CPPM to apply the tag-based rules to a client directly after it learns that the client has that tag.
What is one of the settings that you should verify on CPPM?

The “Device Sync” setting is set to 1 in the ClearPass Device Insight Integration settings.

Both 802.1X services have the “Profile Endpoints” option enabled and an appropriate CoA profile selected in the Profiler tab.

Both 802.1X services have the “Use cached Role and Posture attributes from the previous sessions” setting.

The “Polling Interval” is set to 1 in the ClearPass Device Insight Integration settings.

61、A company has a third-party security appliance deployed in its data center. The company wants to pass all traffic for certain clients through that device before forwarding that traffic toward its ultimate destination.
Which AOS-CX switch technology fulfills this use case?

Virtual Network Based Tunneling (VNBT)

MC-LAG

Network Analytics Engine (NAE)

Device profiles

62、You have run an Active Endpoint Security Report on HPE Aruba Networking ClearPass. The report indicates that hundreds of endpoints have MAC addresses but no known IP addresses.
What is one step for addressing this issue?

Set up network devices to implement RADIUS accounting to CPPM.

Add CPPM’s IP address to the IP helper list on routing switches.

Set up switches to implement ARP inspection on client VLANs.

Configure CPPM as a Syslog destination on network devices.

63、You need to set up an HPE Aruba Networking VIA solution for a customer who needs to support 2100 remote employees. The customer wants employees to download their VIA connection profile from the VPNC. Only employees who authenticate with their domain credentials to HPE Aruba Networking ClearPass Policy Manager (CPPM) should be able to download the profile. (A RADIUS server group for CPPM is already set up on the VPNC.) How do you configure the VPNC to enforce that requirement?

Set up a VIA Authentication Profile that uses CPPM’s server group; reference that profile in the VIA Web Authentication Profile.

Reference CPPM’s server group in an AAA profile; then, apply that profile to the VPNC’s Internet- facing ports.

Create a new VPN Authentication Profile and then reference CPPM’s default server group in that profile.

Set up a VIA Authentication Profile that uses CPPM’s server group; reference that profile in the VIA Connection Profile.

64、You want to examine the applications that a device is using and look for any changes in application usage over several different ranges. In which HPE Aruba Networking solution can you view this information in an easy-to-view format?

HPE Aruba Networking ClearPass OnGuard agent installed on the device

HPE Aruba Networking Central within a device’s Live Monitoring page

HPE Aruba Networking ClearPass Insight using an Active Endpoint Security report

HPE Aruba Networking ClearPass Device Insight (CPDI) in the device’s network activity

65、Admins have recently turned on Wireless IDS/IPS infrastructure detection at the high level on HPE Aruba Networking APs. When you check WIDS events, you see several RTS rate and CTS rate anomalies, which were triggered by neighboring APs.
What can you interpret from this event?

These neighboring APs are likely to be wireless clients that are inappropriately bridging their wired and wireless NICs; you should track down and remove them.

These neighboring APs might be hackers trying to launch a DoS, but are more likely operating normally; you should start by tuning the event thresholds.

These neighboring APs are actually rogue APs, and you should enable wireless tarpit containment on them.

These neighboring APs are actually rogue APs, and you should enable wireless de-authentication containment on them.

66、You have installed an HPE Aruba Networking Network Analytic Engine (NAE) script on an AOS-CX switch to monitor a particular function.
Which additional step must you complete to start the monitoring?

Reboot the switch.

Enable NAE, which is disabled by default.

Edit the script to define monitor parameters.

Create an agent from the script.

67、A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI) and has integrated the two. CPDI admins have created a tag. CPPM admins have created rules that use that tag in the wired 802.1X and wireless 802.1X services’ enforcement policies.
The company requires CPPM to apply the tag-based rules to a client directly after it learns that the client has that tag.
What is one of the settings that you should verify on CPPM?

The “Device Sync” setting is set to 1 in the ClearPass Device Insight Integration settings.

Both 802.1X services have the “Profile Endpoints” option enabled and an appropriate CoA profile selected in the Profiler tab.

Both 802.1X services have the “Use cached Role and Posture attributes from the previous sessions” setting.

The “Polling Interval” is set to 1 in the ClearPass Device Insight Integration settings.

68、A company has HPE Aruba Networking APs running AOS-10 and managed by HPE Aruba Networking Central. The company also has AOS-CX switches. The security team wants you to capture traffic from a particular wireless client. You should capture this client’s traffic over a 15-minute time period and then send the traffic to them in a PCAP file. What should you do?

Access the CLI for the client’s AP. Set up a mirroring session between its radio and a management station running Wireshark.

Go to the client’s AP in HPE Aruba Networking Central. Use the “Security” page to run a packet capture.

Go to that client in HPE Aruba Networking Central. Use the “Live Events” page to run a packet capture.

Access the CLI for the client’s AP’s switch. Set up a mirroring session between the AP’s port and a management station running Wireshark.

69、A ClearPass Policy Manager (CPPM) service includes these settings:
* Role Mapping Policy:
* Evaluate: Select first
* Rule 1 conditions:
* Authorization:AD:Groups EQUALS Managers
* Authentication:TEAP-Method-1-Status EQUALS Success
* Rule 1 role: manager
Rule 2 conditions:
* Authentication:TEAP-Method-1-Status EQUALS Success
* Rule 2 role: domain-comp
Default role: [Other]
Enforcement Policy:
* Evaluate: Select first
* Rule 1 conditions:
* Tips Role EQUALS manager AND Tips Role EQUALS domain-comp
* Rule 1 profile list: domain-manager
Rule 2 conditions:
* Tips Role EQUALS manager
* Rule 2 profile list: manager-only
Rule 3 conditions:
* Tips Role EQUALS domain-comp
* Rule 3 profile list: domain-only
Default profile: [Deny access]
A client is authenticated by the service. CPPM collects attributes indicating that the user is in the Contractors group, and the client passed both TEAP methods.
Which enforcement policy will be applied?

[Deny Access Profile]

manager-only

domain-manager

domain-only

70、A company has HPE Aruba Networking APs, which authenticate users to HPE Aruba Networking ClearPass Policy Manager (CPPM).
What does HPE Aruba Networking recommend as the preferred method for assigning clients to a role on the AOS firewall?

Configure CPPM to assign the role using a RADIUS enforcement profile with a RADIUS:IETF Username attribute.

Configure CPPM to assign the role using a RADIUS enforcement profile with an Aruba-User-Role VSA.

OCreate server rules on the APs to assign clients to roles based on RADIUS IETF attributes returned by CPPM.

Create user rules on the APs to assign clients to roles based on a variety of criteria.

71、A company wants you to create a custom device fingerprint on CPPM with rules for profiling a group of specialized devices. What is one requirement?

Pre-defining the desired attributes and rules in an XML format file.

Connecting a known device of this type and getting it discovered in CPPM’s Endpoints Repository.

Disabling the “Automatically download Endpoint Profiler Fingerprints” feature in cluster-wide parameters.

Enabling HPE Aruba Networking ClearPass Device Insight integration with the correct Data Collector token.