Your company has an HPE Aruba Networking infrastructure, including a variety of HPE Aruba Networking APs and gateways. The company has recently added HPE Aruba Networking SSE. The company needs to improve security for branch users behind an HPE Aruba Networking SD-WAN gateway. You need to control users' actions on various SaaS applications. What is part of the setup?
Answer(s): C
A customer requires these rights for clients in the "medical-mobile" AOS firewall role on HPE Aruba Networking Mobility Controllers (MCs): • Permitted to receive IP addresses with DHCP • Permitted access to DNS services from 10.8.9.7 and no other server • Permitted access to all subnets in the 10.1.0.0/16 range except denied access to 10.1.12.0/22 • Denied access to other 10.0.0.0/8 subnets • Permitted access to the Internet • Denied access to the WLAN for a period of time if they send any SSH traffic • Denied access to the WLAN for a period of time if they send any Telnet traffic • Denied access to all high-risk websites External devices should not be permitted to initiate sessions with "medical-mobile" clients, only send return traffic. Refer to the scenario. The exhibits below show the configuration for the role.What setting not shown in the exhibit must you check to ensure that the requirements of the scenario?
Answer(s): A
What benefit does an organization gain from upgrading wireless security from WPA2-Personal to WPA3-Personal?
A customer’s admins have added RF Protect licenses and enabled WIDS for a customer's AOS-8-based solution. The customer wants to use the built-in capabilities of APs without deploying dedicated air monitors (AMs). Admins tested rogue AP detection by connecting a unauthorized wireless AP to a switch. The rogue AP was not detected even after several hours. What is one point about which you should ask?
Answer(s): D
Refer to the exhibit.A customer requires protection against ARP poisoning in VLAN 4. Below are listed all settings for VLAN 4 and the VLAN 4 associated physical interfaces on the AOS-CX access layer switch: interface 1/1/2-1/1/24 no shutdown no routing vlan access 4 exit interface lag 1 no shutdown no routing vlan trunk native 1 vlan trunk allowed 2-4 arp inspection trust exit vlan 4 arp inspection exit What is one issue with this configuration?
Refer to the exhibit.Which IP address should you record as a possibly compromised client?
Answer(s): B
A customer is migrating from on-prem AD to Microsoft Entra ID (Azure AD) as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune). The customer wants to improve security for the network edge. You are helping the customer design an HPE Aruba Networking ClearPass deployment for this purpose. HPE Aruba Networking devices will authenticate wireless and wired clients to a ClearPass Policy Manager (CPPM) cluster (which uses version 6.10). The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Microsoft Entra ID (Azure AD) shows that they have accounts in Microsoft Entra ID (Azure AD). To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions. Refer to the scenario. The Intune extension is configured as shown in this exhibit.The customer wants to reduce the overhead of polling information from Intune to CPPM. However, they require fresh information about clients at least every hour. What should you recommend?
A customer has an AOS-10 architecture that is managed by HPE Aruba Networking Central. HPE Aruba Networking infrastructure devices authenticate clients to an HPE Aruba Networking ClearPass cluster. In HPE Aruba Networking Central, you are examining network traffic flows on a wireless IoT device that is categorized as "Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also. Refer to the scenario. What possible issue is indicated?
Post your Comments and Discuss HP HPE7-A10 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the HPE7-A10 content, but please register or login to continue.