HP Aruba Certified Network Security Professional - HPE7-A02 Exam Practice Test

Which Aruba solution allows security teams to analyze network conversations for forensic investigations?

You are helping an organization deploy HPE Aruba Networking SSE. What is one reason to recommend that the company install agents on remote users' devices?

A company has HPE Aruba Networking Central-managed APs. The APs enforce 802.1X authentication for clients connected to the MyCompany SSID. Some clients are assigned to the
"contractors" role. You have created a firewall rule for the "contractors" role that uses this extended action: denylist, or blacklist in older software versions.
Which additional step must you take to ensure that the action is applied?

You are using Wireshark to view packets captured from HPE Aruba Networking infrastructure, but you're not sure that the packets are displaying correctly. In which circumstance does it make sense to configure Wireshark to ignore protection bits with the IV for the 802.11 protocol?

A security team needs to track a device's communication patterns and identify patterns such as how many destinations the device is accessing.
Which Aruba solution can show this information at a glance?

A company uses HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application option). In the details for a generic device cluster, you see a recommendation for
"Windows 8/10" with 70% accuracy.
What does this mean?

A company needs to enforce 802.1X authentication for its Windows domain computers to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company needs the computers to authenticate as both machines and users in the same session.
Which authentication method should you set up on CPPM?

You have configured an AOS-CX switch to use UBT with a UBT reserved VLAN. Some wired clients will be assigned to a role with this configuration:
port-access role contractors
gateway zone myzone gateway-role contractors-gw
You want to assign these clients to VLAN 42.
Where do you configure that VLAN assignment?

Which log level is the most critical for analyzing security threats?

A company has HPE Aruba Networking APs running AOS-10 and managed by HPE Aruba Networking Central. The company also has AOS-CX switches. The security team wants you to capture traffic from a particular wireless client. You should capture this client's traffic over a 15 minute time period and then send the traffic to them in a PCAP file.
What should you do?

The following firewall role is configured on HPE Aruba Networking Central-managed APs:
wlan access-rule employees
index 3
rule any any match 17 67 67 permit
rule any any match any 53 53 permit
rule 10 5 5.0 255.255 255.0 match any any any deny
rule 10.5 0.0 255.255 0.0 match 6 80 80 permit
rule 10.5 0.0 255.255.0.0 match 6 443 443 permit
rule 10.5.0.0 255.255.0.0 match any any any deny
rule any any match any any any permit
A client has authenticated and been assigned to the employees role. The client has IP address
10.2.2.2. Which correctly describes behavior in this policy?

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.).
For which type of certificate is it recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?