HPE7-A02試験無料問題集（72題）「HP Aruba Certified Network Security Professional 認定」

出題：1

A company wants HPE Aruba Networking ClearPass Policy Manager (CPPM) to respond to Syslog messages from its Check Point firewall. You have added the firewall as an event source and set up an event service. However, test Syslog messages are not triggering the expected actions.
What is one CPPM setting that you should check?

A. The CoA delay value is set to 0 on the server.

B. The Check Point Extension is installed through ClearPass Guest.

C. ClearPass Device Insight integration is disabled.

D. Ingress Event Dictionaries for Check Point messages are enabled.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A company issues user certificates to domain computers using its Windows CA and the default user certificate template. You have set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to authenticate 802.1X clients with those certificates. However, during tests, you receive an error that authorization has failed because the usernames do not exist in the authentication source.
What is one way to fix this issue and enable clients to successfully authenticate with certificates?

A. Change the authentication method list to include both PEAP MSCHAPv2 and EAP-TLS.

B. Remove EAP-TLS from the authentication method list and add TEAP there instead.

C. Add the ClearPass Onboard local repository to the authentication source list.

D. Configure rules to strip the domain name from the username.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

A company assigns a different block of VLAN IDs to each of its access layer AOS-CX switches. The switches run version 10.07. The IDs are used for standard purposes, such as for employees, VolP phones, and cameras. The company wants to apply 802.1X authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM) and then steer clients to the correct VLANs for local forwarding.
What can you do to simplify setting up this solution?

A. Change the VLAN IDs across the AOS-CX switches so that they are consistent.

B. Use the trunk allowed VLAN setting to assign multiple VLAN IDs to the same role.

C. Avoid configuring the VLAN in the role; use trunk VLANs to assign multiple VLANs to the port instead.

D. Assign consistent names to VLANs of the same type across the AOS-CX switches and have user-roles reference names.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc using Valid SSID." What is one possible next step?

A. Look for the IP address associated with the offender and then check for that IP address among HPE Aruba Networking Central clients.

B. Make sure that you have tuned the threshold for that check, as false positives are common for it.

C. Make sure that clients have updated drivers, as faulty drivers are a common explanation for this attack type.

D. Use HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general area for the threat.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A company has HPE Aruba Networking APs running AOS-10 and managed by HPE Aruba Networking Central. The company also has AOS-CX switches. The security team wants you to capture traffic from a particular wireless client. You should capture this client's traffic over a 15 minute time period and then send the traffic to them in a PCAP file.
What should you do?

A. Access the CLI for the client's AP's switch. Set up a mirroring session between the AP's port and a management station running Wireshark.

B. Go to that client in HPE Aruba Networking Central. Use the "Live Events" page to run a packet capture.

C. Go to the client's AP in HPE Aruba Networking Central. Use the "Security" page to run a packet capture.

D. Access the CLI for the client's AP. Set up a mirroring session between its radio and a management station running Wireshark.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

A company has HPE Aruba Networking Central-managed APs. The company wants to block all clients connected through the APs from using YouTube.
Which steps should you take?

A. Deploy gateways and have the APs tunnel traffic to the gateways. Then, enable the gateway IDS/IPS engine.

B. Enable WebCC on all client firewall roles. Then, create WebCC category rules that deny suspicious URLs.

C. Enable Client IPS at the "custom" level, and then specify the check for YouTube.

D. Enable DPI. Then, create application rules to deny YouTube on the firewall roles.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Assume that an AOS-CX switch is already implementing DHCP snooping and ARP inspection successfully on several VLANs.
What should you do to help minimize disruption time if the switch reboots?

A. Configure the switch to act as an ARP proxy.

B. Save the IP-to-MAC bindings to external storage.

C. Create static IP-to-MAC bindings for the DHCP and DNS servers.

D. Configure the IP helper address on this switch, rather than a core routing switch.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

HPE7-A02試験無料問題集「HP Aruba Certified Network Security Professional 認定」