Question 1

What is a benefit of Opportunistic Wireless Encryption (OWE)?

Options :

A :

It allows both WPA2-capable and WPA3-capable clients to authenticate to the same WPA-Personal WLAN.

B :

It offers more control over who can connect to the wireless network when compared with WPA2- Personal.

C :

It allows anyone to connect, but provides better protection against eavesdropping than a traditional open network.

D :

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MITM) attacks.

Answer: C

Question 2

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 3

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D

Question 4

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Question 5

What is a correct description of a stage in the Lockheed Martin kill chain?

Options :

A : In the delivery stage, the hacker delivers malware to targeted users, often with spear phishing methods.

B : In the installation phase, hackers seek to install vulnerabilities in operating systems across the network.

C :

In the weaponization stage, malware installed in the targeted network seeks to attack intrusion prevention systems (IPS).

D :

In the exploitation phase, hackers conduct social engineering attacks to exploit weak algorithms and crack user accounts.

Answer: A