HPE7-A02 Practice Test

HPE7-A02 Practice Test practice questions, page 4 of 5, with answer review and explanations.

Question 16

A company has HPE Aruba Networking APs managed by HPE Aruba Networking Central. You have set up a WLAN to enforce WPA3 with 802.1X authentication. What happens if the client fails authentication?

  1. The AP assigns the client to the WLAN’s default role.
  2. The AP drops the client because authentication aborts.
  3. The AP assigns the client to the WLAN’s critical role.
  4. The AP assigns the client to the WLAN’s initial role.

Question 17

A company wants you to integrate HPE Aruba Networking ClearPass Policy Manager (CPPM) with HPE Aruba Networking ClearPass Device Insight (CPDI). What is one aspect of the integration that you should explain?

  1. CPPM no longer supports any Device Profiler features and relies on CPDI for this profile information.
  2. CPDI must be configured as an audit server on CPPM for the integration to be successful.
  3. CPDI must have security analysis disabled on it for the integration to be successful.
  4. CPPM can submit profile information to CPDI, but if CPDI derives a different classification, CPDI takes precedence.

Question 18

Refer to the exhibit. (Note that the HPE Aruba Networking Central interface shown here might look slightly different from what you see in your HPE Aruba Networking Central interface as versions change; however, similar concepts continue to apply.) An HPE Aruba Networking 9x00 gateway is part of an HPE Aruba Networking Central group that has the settings shown in the exhibit. What would cause the gateway to drop traffic as part of its IDPS settings?

  1. Its site-to-site VPN connections failing
  2. Traffic matching a rule in the active ruleset
  3. Its IDPS engine failing
  4. Traffic showing anomalous behavior

Question 19

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9). For which type of certificate it is recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?

  1. HTTPS
  2. Database
  3. RADIUS/EAP
  4. RadSec

Question 20

A company has HPE Aruba Networking gateways that implement gateway IDS/IPS. Admins sometimes check the Security Dashboard, but they want a faster way to discover if a gateway starts detecting threats in traffic. What should they do?

  1. Set up Webhooks that are attached to the HPE Aruba Networking Central Threat Dashboard.
  2. Use Syslog to integrate the gateways with HPE Aruba Networking ClearPass Policy manager (CPPM) event processing.
  3. Set up email notifications using HPE Aruba Networking Central’s global alert settings.
  4. Integrate HPE Aruba Networking ClearPass Device Insight (CPDI) with Central and schedule hourly reports.