Question 1

What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?

Options :

A : It enables secure boot, which detects if hackers corrupt the OS with malware.

B : It deploys the AP with enhanced security, which includes disabling the password recovery mechanism.

C :

It allows the AP to run in secure mode, which automatically enables CPsec and disables the console port.

D : It enables the AP to encrypt and decrypt 802.11 traffic locally, rather than at the MC.

Answer: A

Question 2

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

Options :

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 3

A company has HPE Aruba Networking Mobility Controllers (MCs), HPE Aruba Networking campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities. What is a consideration for using those capabilities?

Options :

A : You will need to mirror traffic to one of CPPM’s span ports from a device such as a core routing switch.

B :

ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

C :

AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

D :

TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Answer: A

Question 4

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Question 5

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D