Question 1

What is a correct description of a stage in the Lockheed Martin kill chain?

Options :

A : In the delivery stage, the hacker delivers malware to targeted users, often with spear phishing methods.

B : In the installation phase, hackers seek to install vulnerabilities in operating systems across the network.

C :

In the weaponization stage, malware installed in the targeted network seeks to attack intrusion prevention systems (IPS).

D :

In the exploitation phase, hackers conduct social engineering attacks to exploit weak algorithms and crack user accounts.

Answer: A

Question 2

What is the purpose of an Enrollment over Secure Transport (EST) server?

Options :

A : It acts as an intermediate Certification Authority (CA) that signs end-entity certificates.

B : It helps admins to avoid expired certificates with less management effort.

C : It provides a secure central repository for private keys associated with devices' digital certif-icates.

D : It provides a more secure alternative to private CAs at less cost than a public CA.

Answer: B

Question 3

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 4

What is a guideline for managing local certificates on an ArubaOS-Switch?

Options :

A :

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

B :

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

C :

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

D : Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CAsigned certificates.

Answer: A

Question 5

What is a benefit or using network aliases in ArubaOS firewall policies?

Options :

A :

You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.

B :

You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall

C : You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update

D : You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Answer: C