[2026] HP Aruba Certified Network Security Professional

문제1

Refer to the exhibits.

HPE Aruba Networking ClearPass Policy Manager (CPPM) is authenticating 802.1X clients using Active Directory as the source. CPPM has a custom attribute for AD that uses AccountStatus as userAccountControl.
Which enforcement profile does CPPM apply to a client that:
Succeeds in authenticating to an active AD user account:
userAccountControl = 512
Does not succeed at authenticating as a computer

A. profile1

B. profile2

C. profile3

D. Deny Access Profile

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

You are configuring the HPE Aruba Networking ClearPass Device Insight Integration settings on ClearPass Policy Manager (CPPM). For which use case should you set the 'Tag Updates Action" to "apply for all tag updates"?

A. When CPPM is gathering posture information for CPDI, and you want CPDI to always have access to the most up-to-date information.

B. When Device Insight tags are only used to identify dangerous devices, and you want to disconnect those devices without having to set up new rules in enforcement policies.

C. When you plan to have CPPM issue CoAs for clients with new tags, but do not want to have to list those specific tags in the Device Integration settings in advance.

D. When the Device Insight integration poll interval is set to a relatively long interval but you still want CPPM to be informed quickly about devices' new tags.

정답: C

문제3

A company is using HPE Aruba Networking ClearPass Policy Manager (CPPM) and HPE Aruba Networking ClearPass Device Insight (CPDI). CPDI and CPPM are integrated. The security staff wants you to show them a list of all devices that are contacting a specific known command-and- control center.
What should you do?

A. Use ClearPass Insight to run an Active Endpoint Security report.

B. In CPPM's Access Tracker, filter for that destination.

C. In CPDI, filter for that destination and save the filter as a tag.

D. In CPDI, look in Generic Device clusters based on that destination.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제4

A company has AOS-CX switches managed by HPE Aruba Networking Central. The network infrastructure devices authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM), which is integrated with HPE Aruba Networking ClearPass Device Insight (CPDI). You have seen suspicious activity on a client connected to one of the switches. To investigate the client's activity further, you need to know all of the IP addresses that it has used in the past two weeks.
Where can you find this information collected together?

A. In CPPM's Device Profiler dashboard

B. In HPE Aruba Networking Central's Audit Trail for the client's switch

C. In the logs stored on the client's switch

D. In CPDI's History tab for the client

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제5

You are setting up an HPE Aruba Networking VIA solution for a company. You need to configure access control policies for applications and resources that remote clients can access when connected to the VPN.
Where on the VPNC should you configure these policies?

A. In the roles to which VIA clients are assigned after IKE authentication

B. In the tunneled network settings within the VIA Connection Profile

C. In the roles to which VIA clients are assigned after VIA Web authentication

D. In the cloud security settings using IPsec maps

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제6

You have run an Active Endpoint Security Report on HPE Aruba Networking ClearPass. The report indicates that hundreds of endpoints have MAC addresses but no known IP addresses.
What is one step for addressing this issue?

A. Set up switches to implement ARP inspection on client VLANs.

B. Add CPPM's IP address to the IP helper list on routing switches.

C. Configure CPPM as a Syslog destination on network devices.

D. Set up network devices to implement RADIUS accounting to CPPM.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which endpoint classification method requires direct device interrogation for identification?

A. DHCP lease duration

B. Passive profiling

C. Static VLAN tagging

D. Active profiling

정답: D

문제8

An AOS-CX switch has been configured to implement UBT to two HPE Aruba Networking gateways that implement VRRP on the users' VLAN. What correctly describes how the switch tunnels UBT users' traffic to those gateways?

A. The switch always sends all users' traffic to the primary gateway configured in the UBT zone.

B. The switch always sends the users' traffic to the VRRP master.

C. The switch always load shares the users' traffic across both gateways.

D. The switch always sends all users' traffic to the gateway assigned as the active device designed gateway.

정답: A

문제9

A remote worker needs secure access to the corporate network from an untrusted public Wi-Fi connection. Which Aruba solution should be used?

A. Aruba VLAN Trunking

B. Aruba NetEdit

C. Aruba Smart Rate

D. Aruba VIA (Virtual Intranet Access)

정답: D

문제10

A company is using HPE Aruba Networking ClearPass Device Insight (CPDI) (the standalone application). You have identified a device, which is currently classified as one type, but you want to classify it as a custom type. You also want to classify all devices with similar attributes as this type, both already-discovered devices and new devices discovered later.
What should you do?

A. Create a user rule from the Generic Devices page, select the desired attributes for the rule, and choose "Save."

B. In the device details, select reclassify, create a user rule based on its attributes, and choose
"Save & Reclassify."

C. In the device details, select filter, create a user tag based on the device attributes, and save the tag.

D. Create a user tag from the Generic Devices page, select the desired attributes for the tag, and save the tag.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

HP Aruba Certified Network Security Professional - HPE7-A02무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트