Question 1

What is the purpose of an Enrollment over Secure Transport (EST) server?

Options :

A : It acts as an intermediate Certification Authority (CA) that signs end-entity certificates.

B : It helps admins to avoid expired certificates with less management effort.

C : It provides a secure central repository for private keys associated with devices' digital certif-icates.

D : It provides a more secure alternative to private CAs at less cost than a public CA.

Answer: B

Question 2

Which attack is an example of social engineering?

Options :

A :

An email is used to impersonate a bank and trick users into entering their bank login information on a fake website page.

B : An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

C :

A hacker eavesdrops on insecure communications, such as Remote Desktop Protocol (RDP), and discovers login credentials.

D :

A user visits a website and downloads a file that contains a worm, which self-replicates throughout the network.

Answer: A

Question 3

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

Options :

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C

Question 4

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Question 5

What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?

Options :

A : It enables secure boot, which detects if hackers corrupt the OS with malware.

B : It deploys the AP with enhanced security, which includes disabling the password recovery mechanism.

C :

It allows the AP to run in secure mode, which automatically enables CPsec and disables the console port.

D : It enables the AP to encrypt and decrypt 802.11 traffic locally, rather than at the MC.

Answer: A