[2026] HP Aruba Certified Network Security Expert Written

문제1

You are working with a developer to design a custom NAE script for a customer. The NAE agent should trigger an alert when ARP inspection drops packets on a VLAN. The customer wants the admins to be able to select the correct VLAN ID for the agent to monitor when they create the agent.
What should you tell the developer to do?

A. Use a callback action to collect the ID of the VLAN on which admins have enabled NAE monitoring.

B. Create multiple monitors within the script from which admins can select when they create the agent.

C. Define a VLAN ID parameter; reference that parameter when defining the monitor URI.

D. Use this variable, %{vlan-id} when defining the monitor URI in the NAE agent script.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

The customer needs a way for users to enroll new wired clients in Intune. The clients should have limited access that only lets them enroll and receive certificates. You plan to set up these rights in an AOS-CX role named "provision." The customer's security team dictates that you must limit these clients' Internet access to only the necessary sites. Your switch software supports IPv4 and IPv6 addresses for the rules applied in the "provision" role.
What should you recommend?

A. Enabling tunneling to the MCs on the "provision" role and then setting up the privileges on the MCs

B. Configuring the rules for the "provision" role with IPv6 addresses, which tend to be more stable

C. Configuring the "provision" role as a downloadable user role (DUR) in CPPM

D. Assigning the "provision" role to a VLAN and then setting up the rules within a Layer 2 access control list (ACL)

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제3

You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates.
As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?

A. Add a custom attribute for userAccountControl to the filters in the AD authentication source.

B. Install a Microsoft Active Directory extension in Aruba ClearPass Guest and set up an HTTP authentication source that points to that extension.

C. Enable OCSP in the EAP-TLS authentication method settings and configure an OCSP override to the domain controller FQDN.

D. Add an Endpoint Context Server to the domain controller with actions for querying the domain controller for account status.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제4

When would you implement BPDU protection on an AOS-CX switch port versus BPDU filtering?

A. Use BPDU protection on inter-switch ports to ensure that they are selected as root; use BPDU filtering on edge ports to prevent rogue devices from connecting.

B. Use BPDU protection on edge ports to permanently lock out rogue devices; use BPDU filtering on edge ports to temporarily lock out rogue devices.

C. Use BPDU protection on edge ports to prevent rogue devices from connecting; use BPDU filtering on inter-switch ports for specialized use cases.

D. Use BPDU protection on edge ports to protect against rogue devices when the switch implements MSTP; use BPDU filtering to protect against rogue devices when the switch implements PVSTP+.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

You are reviewing an endpoint entry in ClearPass Policy Manager (CPPM) Endpoints Repository.
What is a good sign that someone has been trying to gain unauthorized access to the network?

A. The entry shows multiple DHCP options under the fingerprints.

B. The entry shows an Unknown status.

C. The entry shows a profile conflict of having a new profile of Computer for a profiled Printer.

D. The entry lacks a hostname or includes a hostname with long seemingly random characters.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

Refer to the scenario.
A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster.
In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as
"Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also.
You want a relatively easy way to communicate the information that an IoT client has used SSH to Aruba CPPM.
What is one prerequisite?

A. In CPPM's CA trust list, add the Aruba Infrastructure usage to the DigiCert certificate.

B. Create an API application and token within the REST API settings.

C. Obtain a data collector token from Central's platform integration settings.

D. Enable event processing on subscribers in the ClearPass cluster.

정답: C

HP Aruba Certified Network Security Expert Written - HPE6-A84무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트