HPE7-A02 試験問題を無料オンラインアクセス

A company has HPE Aruba Networking APs and AOS-CX switches. The APs bridge wireless traffic. They receive DHCP IP addresses on VLAN 18. Wireless users are assigned to VLAN 12.
The company wants the APs to start using 802.1X authentication on their switch ports. You are configuring the port-access role to which the APs are assigned after authentication.
What is one recommended setting for that role?

• A.Access VLAN 18 with no support for VLAN 12
• B.Auth-mode left at client-mode
• C.No trust for DSCP
• D.Trust for DSCP

Which statement describes Zero Trust Security?

• A.Companies that support remote workers cannot achieve zero trust security and must determine if the benefits outweigh the cost.
• B.Companies can achieve zero trust security by strengthening their perimeter security to detect a wider range of threats.
• C.Companies should focus on protecting their resources rather than on protecting the boundaries of their internal network.
• D.Companies must apply the same access controls to all users, regardless of identity.

You have set up a mirroring session between an AOS-CX switch and a management station, running Wireshark. You want to capture just the traffic sent in the mirroring session, not the management station's other traffic.
What should you do?

• A.Apply this capture filter: udp port 5555
• B.Apply this capture filter: ip proto 47
• C.Edit protocol preferences and enable ARUBA_ERM.
• D.Edit protocol preferences and enable HPE_ERM.

Which endpoint classification method requires direct device interrogation for identification?

• A.Static VLAN tagging
• B.Passive profiling
• C.DHCP lease duration
• D.Active profiling

You are establishing a cluster of HPE Aruba Networking ClearPass servers. (Assume that they are running version 6.9.).
For which type of certificate is it recommended to install a CA-signed certificate on the Subscriber before it joins the cluster?

• A.HTTPS
• B.RADIUS/EAP
• C.RadSec
• D.Database