Question 1

A company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control which commands managers are allowed to enter. Which service must you add to the managers' TACACS+ enforcement profile?

Options :

A : Cpass:HTTP

B : Shell

C : ARAP

D : Aruba:Common

Answer: B

Question 2

A company has HPE Aruba Networking APs (AOS-10), which authenticate clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is set up to receive a variety of information about clients' profile and posture. New information can mean that CPPM should change a client's enforcement profile. What should you set up on the APs to help the solution function correctly?

Options :

A : In the security settings, configure dynamic denylisting.

B : In the RADIUS server settings for CPPM, enable Dynamic Authorization.

C : In the WLAN profiles, enable interim RADIUS accounting.

D : In the RADIUS server settings for CPPM, enable querying the authentication status.

Answer: B

Question 3

How can endpoint classification help improve network security?

Options :

A : By blocking all incoming traffic

B : By slowing down network performance

C : By identifying and securing vulnerable devices

D : By increasing network bandwidth

Answer: C

Question 4

How does Rogue AP detection and mitigation contribute to WLAN security?

Options :

A : It optimizes network performance

B : It improves data encryption

C : It prevents unauthorized devices from connecting to the network

D : It enhances user authentication

Answer: C

Question 5

What is endpoint classification used for in network security?

Options :

A : Encrypting data transmission

B : Identifying network vulnerabilities

C : Monitoring network traffic

D : Assigning access control policies

Answer: D

Higher Test Marks with Free Online HPE7-A02 Exam Practice

Buying Options: