HP HPE7-A02 Certification Practice Questions & Answers

Question 6 of 118

You are setting up user based tunneling (UBT) between access layer AOS-CX switches and AOS-10 gateways. You have selected reserved (local) VLAN mode.

Tunneled devices include IoT devices, which should be assigned to:

Roles: iot on the switches and iot-wired on the gateways

VLAN: 64, for which the gateways route traffic

IoT devices connect to the access layer switches’ edge ports, and the access layer switches reach the gateways on their uplinks.

Where must you configure VLAN 64?

In the iot-wired role and on no physical interfaces

In the iot role and the iot-wired role and on no physical interfaces

In the iot-wired role and the access switch uplinks

In the iot role and the access switch uplinks

Question 7 of 118

A company has a third-party security appliance deployed in its data center. The company wants to pass all traffic for certain clients through that device before forwarding that traffic toward its ultimate destination.

Which AOS-CX switch technology fulfills this use case?

Virtual Network Based Tunneling (VNBT)

MC-LAG

Network Analytics Engine (NAE)

Device profiles

Question 8 of 118

You manage AOS-10 APs with HPE Aruba Networking Central. A role is configured on these APs with these rules:

1. Allow udp on port 67 to any destination

2. Allow any to network 10.1.6.0/23

3. Deny any to network 10.1.0.0/16 + log

4. Deny any to network 10.0.0.0/8

5. Allow any to any destination

You add this new rule immediately before rule 2:

Deny ssh to network 10.1.4.0/23 + denylist

After this change, what happens when a client assigned to this role sends SSH traffic to 10.1.11.42?

The traffic is permitted.

The traffic is dropped and logged.

The traffic is dropped (without any logging or further action against the client).

The traffic is dropped, and the client is denylisted.

Question 9 of 118

HPE Aruba Networking ClearPass Device Insight (CPDI) could not classify some endpoints using system and user rules. Using machine learning, it did assign those endpoints to a cluster and discover a recommendation. In which of these circumstances does CPDI automatically classify the endpoints based on that recommendation?

The recommendation has 96% confidence, and it based on 13 classified devices.

The recommendation has 98% confidence, and it based on 5 classified devices.

The recommendation has 93% confidence, and it based on 36 classified devices.

The recommendation has 100% confidence, and it based on 4 classified devices.

Question 10 of 118

You are setting up HPE Aruba Networking SSE. Which use case requires you to apply a non-default posture in a rule?

applying threat inspection to users when they access certain web sites

checking whether a client has antivirus software as a condition for receiving access to resources

redirecting compromised clients to a remediation server

integrating with HPE Aruba Networking ClearPass OnGuard