HPE7-A02 Practice Test

HPE7-A02 Practice Test practice questions, page 3 of 5, with answer review and explanations.

Question 11

Refer to the exhibit. All of the switches in the exhibit are AOS-CX switches. What is the preferred configuration on Switch-2 for preventing rogue OSPF routers in this network?

Configure OSPF authentication on VLANs 10-19 is password mode.
Configure OSPF authentication on Lag 1 in MD5 mode.
Disable OSPF entirely on VLANs 10-19.
Configure passive-interface as the OSPF default and disable OSPF passive on Lag 1.

Question 12

The organization needs a faster way to quarantine clients that have generated threats, as detected by third-party firewalls.
Hybrid workers are exposing their computers to risky internet sites and infection by malware when they work from home.
Remote workers need access to private data center applications without exposing those applications to unauthorized users.
The organization currently has no way to prevent users from exfiltrating sensitive data from SaaS applications.

Question 13

Each switch model has a maximum number of supported monitors, and one agent might have multiple monitors.
You can install multiple scripts on a switch, but you can deploy only one agent per script.
The switch will permit you to deploy as many NAE agents as you want, but they might degrade the switch functionality.
When you use custom scripts, you can create as many agents from each script as you want.

Question 14

Disable traffic inspection and reboot before re-enabling traffic inspection with the new mode.
Change the mode on one gateway at a time to establish a smoother transition period.
Consider applying a stricter IPS policy to minimize issues during the transition period.
Check for legitimate traffic that has been flagged as a threat and allow list the associated rules.

Question 15