Online Access Free HPE7-A02 Practice Test

You have configured an AOS-CX switch to use UBT with a UBT reserved VLAN. Some wired clients will be assigned to a role with this configuration:
port-access role contractors
gateway zone myzone gateway-role contractors-gw
You want to assign these clients to VLAN 42.
Where do you configure that VLAN assignment?

• A.In the contractors-gw role on the gateway
• B.In the contractors role on the switches
• C.On the switch ports to which the clients connect
• D.On the links in the pathway between the switches and the gateway

The following firewall role is configured on HPE Aruba Networking Central-managed APs:
wlan access-rule employees
index 3
rule any any match 17 67 67 permit
rule any any match any 53 53 permit
rule 10 5 5.0 255.255 255.0 match any any any deny
rule 10.5 0.0 255.255 0.0 match 6 80 80 permit
rule 10.5 0.0 255.255.0.0 match 6 443 443 permit
rule 10.5.0.0 255.255.0.0 match any any any deny
rule any any match any any any permit
A client has authenticated and been assigned to the employees role. The client has IP address
10.2.2.2. Which correctly describes behavior in this policy?

• A.Traffic from 198.51.100.12 in an active HTTP session between 10.2.2.2 and 198.51.100.12 is denied.
• B.Traffic from 10.5.3.3 in an active HTTPS session between 10.2.2.2 and 10.5.3.3 is permitted.
• C.HTTPS traffic from 10.2.2.2 to 203.0.113.12 is denied.
• D.HTTPS traffic from 10.2.2.2 to 10.5.5.5 is denied.

A company has AOS-CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches.
What can you do to support this use case?

• A.Implement ARP inspection on all VLANs that support end-user devices.
• B.Deploy an NAE agent on the switches to monitor control plane policing (CoPP).
• C.Configure the switches to implement RADIUS accounting to HPE Aruba Networking ClearPass and enable HPE Aruba Networking ClearPass Insight.
• D.Enabling debugging of security functions on the switches.

You are using Wireshark to view packets captured from HPE Aruba Networking infrastructure, but you're not sure that the packets are displaying correctly. In which circumstance does it make sense to configure Wireshark to ignore protection bits with the IV for the 802.11 protocol?

• A.When the traffic was captured from an AP with HPE Aruba Networking Central.
• B.When the traffic was mirrored from an AOS-CX switch port connected to an AP.
• C.When the traffic was captured on the control plane of an HPE Aruba Networking MC and sent to a remote IP.
• D.When the traffic was captured on the data plane of an HPE Aruba Networking gateway and sent to a remote IP.

A company uses HPE Aruba Networking ClearPass Device Insight (CPDI) as the standalone application.
How does CPDI handle devices that it cannot classify with user rules, system rules, or MAC range classifiers?

• A.It uses API calls to query integrated applications for more information about the devices.
• B.It marks the devices as unknown and submits them to HPE Aruba Networking experts for classification.
• C.It uses a machine learning method to cluster similar devices together.
• D.It marks the devices as generic and leaves them for admins to classify individually.