Online Access Free HPE7-A02 Practice Test

A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches.
What can you do to support this use case?

• A.Enabling debugging of security functions on the switches.
• B.Deploy an NAE agent on the switches to monitor control plane policing (CoPP).
• C.Implement ARP inspection on all VLANs that support end-user devices.
• D.Configure the switches to implement RADIUS accounting to HPE Aruba Networking ClearPass and enable HPE Aruba Networking ClearPass Insight.

An AOS-CX switch has this admin user account configured on it:
netadmin in the operators group.
You have configured these commands on an AOS-CX switch:
tacacs-server host cp.example.com key plaintext &12xl,powmay7855
aaa authentication login ssh group tacacs local
aaa authentication allow-fail-through
A user accesses the switch with SSH and logs in as netadmin with the correct password. When the switch sends a TACACS+ request to the ClearPass server at cp.example.com, the server does not send a response.
Authentication times out.
What happens?

• A.The user is logged in and granted operator access.
• B.The user is not allowed to log in.
• C.The user is logged in and granted administrators access.
• D.The user is logged in and allowed to enter auditor commands only.

You need to set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to provide certificate- based authentication of 802.1X supplicants. How should you upload the root CA certificate for the supplicants' certificates?

• A.As a ClearPass Server certificate with the RADIUS/EAP usage.
• B.As a Trusted CA with the EAP usage.
• C.As a ClearPass Server certificate with the Database usage.
• D.As a Trusted CA with the AD/LDAP usage.

You have configured an AOS-CX switch to implement 802.1X on edge ports. Assume ports operate in the default auth-mode. VoIP phones are assigned to the "voice" role and need to send traffic that is tagged for VLAN 12. Where should you configure VLAN 12?

• A.As the allowed trunk VLAN in the "voice" role (and not in the edge port settings).
• B.As the trunk native VLAN on edge ports and the trunk native VLAN on the "voice" role.
• C.As a trunk allowed VLAN on edge ports and the trunk native VLAN in the "voice" role.
• D.As the trunk native VLAN in the "voice" role (and not in the edge port settings).

You are setting up HPE Aruba Networking SSE to prohibit users from uploading and downloading files from Dropbox. What is part of the process?

• A.Deploying a connector that can reach Dropbox
• B.Deploying a connector that can reach the remote users
• C.Adding a web category that includes Dropbox
• D.Installing the HPE Aruba Networking SSE root certificate on clients