HPE7-A02試験無料問題集（161題）「HP Aruba Certified Network Security Professional 認定」

出題：1

A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands managers are allowed to enter.
Which service must you add to the managers' TACACS+ enforcement profile?

A. Aruba:Common

B. ARAP

C. Cpass:HTTP

D. Shell

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.).
For which type of certificate is it recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?

A. RadSec

B. RADIUS/EAP

C. Database

D. HTTPS

正解：D 解答を投票する

出題：3

Refer to Exhibit. A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). In the CPDI interface, you go to the Generic Devices page and see the view shown in the exhibit.

What correctly describes what you see?

A. Each cluster is all the devices that have been assigned to the same category by one of CPDI's built- in system rules.

B. Each cluster is a group of devices that match one of the tags configured by admins.

C. Each cluster is a group of devices that have been classified with user rules, but for which CPDI offers different recommendations.

D. Each cluster is a group of unclassified devices that CPDI's machine learning has discovered to have similar attributes.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which statement describes Zero Trust Security?

A. Companies can achieve zero trust security by strengthening their perimeter security to detect a wider range of threats.

B. Companies that support remote workers cannot achieve zero trust security and must determine if the benefits outweigh the cost.

C. Companies must apply the same access controls to all users, regardless of identity.

D. Companies should focus on protecting their resources rather than on protecting the boundaries of their internal network.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A company has HPE Aruba Networking APs running AOS-10 that connect to AOS-CX switches.
The APs will:
- Authenticate as 802.1X supplicants to HPE Aruba Networking ClearPass Policy Manager (CPPM)
- Be assigned to the "APs" role on the switches
- Have their traffic forwarded locally
What information do you need to help you determine the VLAN settings for the "APs" role?

A. Whether the APs bridge or tunnel traffic on their SSIDs

B. Whether the switches have established tunnels with an HPE Aruba Networking gateway

C. Whether the switches are using local user-roles (LURs) or downloadable user-roles (DURs)

D. Whether the APs have static or DHCP-assigned IP addresses

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

HPE Aruba Networking Central displays a Gateway Threat Count alert in the alert list. How can you gather more information about what caused the alert to trigger?

A. Use Live Monitoring on the gateway to download a packet capture of recent traffic flowing through the gateway.

B. Use HPE Aruba Networking Central tools to run a Network Check on the gateway with which the alert is associated.

C. Check the threat list for the gateway associated with the alert. Access threat details and download packet info.

D. Check the gateway's Audit Trail in HPE Aruba Networking Central for more details about the threats that triggered the alert.

正解：C 解答を投票する

出題：7

A company needs to enforce 802.1X authentication for its Windows domain computers to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company needs the computers to authenticate as both machines and users in the same session.
Which authentication method should you set up on CPPM?

A. EAP-TTLS

B. PEAP MSCHAPv2

C. EAP-TLS

D. TEAP

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which endpoint classification method requires direct device interrogation for identification?

A. Active profiling

B. Passive profiling

C. Static VLAN tagging

D. DHCP lease duration

正解：A 解答を投票する

出題：9

You need to use "Tips:Posture" conditions within an 802.1X service's enforcement policy.
Which guideline should you follow?

A. Enable profiling in the service's general settings.

B. Enable caching roles and posture attributes from previous sessions in the service's enforcement settings.

C. Select the Posture Policy type for the service's enforcement policy.

D. Create rules that assign postures in the service's role mapping policy.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You are helping an organization deploy HPE Aruba Networking SSE. What is one reason to recommend that the company install agents on remote users' devices?

A. To run posture checks and apply different permissions based on those checks.

B. To run threat inspection on clients in a local sandbox rather than in the cloud.

C. To permit users to access private servers using SSH.

D. To permit admins to manage the HPE Aruba Networking SSE policy rules.

正解：A 解答を投票する

HPE7-A02試験無料問題集「HP Aruba Certified Network Security Professional 認定」