Question 1

A company has HPE Aruba Networking Mobility Controllers (MCs), HPE Aruba Networking campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities. What is a consideration for using those capabilities?

Options :

A : You will need to mirror traffic to one of CPPM’s span ports from a device such as a core routing switch.

B :

ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

C :

AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

D :

TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Answer: A

Question 2

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Options :

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B :

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C :

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D :

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Question 3

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

Options :

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 4

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

Options :

A : the match method

B : the detecting devices

C : the match type

D : the confidence level

Answer: B

Question 5

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D