HPE7-A10

HPE7-A10 practice questions, page 3 of 3, with answer review and explanations.

Question 11

# Introduction to the customerYou are helping a company add HPE Aruba Networking ClearPass to their network, which uses HPE Aruba Networking network infrastructure devices.The company currently has a Windows domain and Windows CA. The Window CA issues certificates to domain computers, domain users, and servers such as domain controllers. An example of a certificate issued by the Windows CA is shown here.# ClearPass cluster IP addressing and hostnamesA customer's ClearPass cluster has these IP addresses:• Publisher = 10.47.47.5• Subscriber 1 = 10.47.47.6• Subscriber 2 = 10.47.47.7• Virtual IP with Subscriber 1 and Subscriber 2 = 10.47.47.8The customer's DNS server has these entries• cp.acnsxtest.com = 10.47.47.5• cps1.acnsxtest.com = 10.47.47.6• cps2.acnsxtest.com = 10.47.47.7• radius.acnsxtest.com = 10.47.47.8• onboard.acnsxtest.com = 10.47.47.8Refer to the scenario.You need to configure HPE Aruba Networking ClearPass Onboard to issue client certificates for Azure AD joined devices.Which step is required to achieve this objective?

  1. Create an HTTP authentication source that references an Intune extension.
  2. Recreate the CA as a registration authority under Azure AD.
  3. Create a CPPM policy that authenticates guest users to Azure AD.
  4. Install the Intune SCEP extension on the ClearPass subscribers.

Question 12

# Introduction to the customerYou are helping a company add HPE Aruba Networking ClearPass to their network, which uses HPE Aruba Networking network infrastructure devices.The company currently has a Windows domain and Windows CA. The Window CA issues certificates to domain computers, domain users, and servers such as domain controllers. An example of a certificate issued by the Windows CA is shown here.# ClearPass cluster IP addressing and hostnamesA customer's ClearPass cluster has these IP addresses:• Publisher = 10.47.47.5• Subscriber 1 = 10.47.47.6• Subscriber 2 = 10.47.47.7• Virtual IP with Subscriber 1 and Subscriber 2 = 10.47.47.8The customer's DNS server has these entries• cp.acnsxtest.com = 10.47.47.5• cps1.acnsxtest.com = 10.47.47.6• cps2.acnsxtest.com = 10.47.47.7• radius.acnsxtest.com = 10.47.47.8• onboard.acnsxtest.com = 10.47.47.8Refer to the scenario.The Onboard CA is using the settings shown in the exhibits below.Microsoft Entra ID (Azure AD) admins need help setting up the app registration for integrating with ClearPass Onboard.Which URL should you tell them to use?

  1. https://clearpass.acnsxtest.com/.well-known/est/ca:2
  2. https://onboard.acnsxtest.com/onboard/mdps_scep.php/2
  3. https://cps1.acnsxtest.com/.well-known/est/ca:2
  4. https://localhost.acnsxtest.com/onboard/mdps_scep.php/2

Question 13

A hospital has an AOS-10 architecture that is managed by HPE Aruba Networking Central. The customer has deployed a pair of HPE Aruba Networking 9000 Series gateways with Security licenses at each clinic. The gateways implement IDS/IPS in IDS mode.The Security Dashboard shows these several recent events with the same signature, as shown below:Refer to the scenario.You have learned that the source of the events is nurse call stations.What can you conclude?

  1. These devices are unlikely to use TOR legitimately, but malware often does. You and the security team should investigate these stations.
  2. This event is a common false positive for clients using video streaming, but you should still investigate it further to comply with best practices.
  3. The nurses are making their devices vulnerable by contacting unsafe websites. You should educate them about safe browsing practices.
  4. The threat destination has an internal IP address, and it is likely a DNS server. You should verify that this server is patched and uncompromised.

Question 14

A hospital has an AOS-10 architecture that is managed by HPE Aruba Networking Central. The customer has deployed a pair of HPE Aruba Networking 9000 Series gateways with Security licenses at each clinic. The gateways implement IDS/IPS in IDS mode.The Security Dashboard shows these several recent events with the same signature, as shown below:Refer to the scenario.Which step could give you valuable context about the incident?

  1. View firewall sessions on the APs and record the threat sources' type and OS.
  2. View the RAPIDS Security Dashboard and see if the threat sources are listed as rogues.
  3. Find the HPE Aruba Networking Central client profile for the threat sources and note their category and family.
  4. View the user-table on APs and record the threat sources' 802.11 settings.