Question No 1

You have configured an AOS - CX switch to implement 802.1X on edge ports. Assume ports operate in the default auth - mode. VolP phones are assigned to the "voice" role and need to send traffic that is tagged for VLAN 12. Where should you configure VLAN 12?

Choose the Choices:

As the trunk native VLAN on edge ports and the trunk native VLAN on the "voice" role

As a trunk allowed VLAN on edge ports and the trunk native VLAN in the "voice" role

As the trunk native VLAN in the "voice" role (and not in the edge port settings)

As the allowed trunk VLAN in the "voice" role (and not in the edge port settings)

Question No 2

You need to set up HPE Aruba Networking ClearPass Policy Manager (CPPM) to provide certificate - based authentication of 802.1X supplicants. How should you upload the root CA certificate for the supplicants' certificates?

Choose the Choices:

As a ClearPass Server certificate with the RADIUS/EAP usage

As a Trusted CA with the AD/LDAP usage

As a Trusted CA with the EAP usage

As a ClearPass Server certificate with the Database usage

Question No 3

A company has AOS - CX switches. The company wants to make it simpler and faster for admins to detect denial of service (DoS) attacks, such as ping or ARP floods, launched against the switches. What can you do to support this use case?

Choose the Choices:

Deploy an NAE agent on the switches to monitor control plane policing (CoPP).

Implement ARP inspection on all VLANs that support end - user devices.

Configure the switches to implement RADIUS accounting to HPE Aruba Networking ClearPass and enable HPE Aruba Networking ClearPass Insight.

Enabling debugging of security functions on the switches.

Question No 4

You have run an Active Endpoint Security Report on HPE Aruba Networking ClearPass. The report indicates that hundreds of endpoints have MAC addresses but no known IP addresses. What is one step for addressing this issue?

Choose the Choices:

Set up network devices to implement RADIUS accounting to CPPM.

Add CPPM's IP address to the IP helper list on routing switches.

Set up switches to implement ARP inspection on client VLANs.

Configure CPPM as a Syslog destination on network devices.

Question No 5

An admin has configured an AOS - CX switch with these settings port - access role employees vlan access name employees This switch is also configured with CPPM as its RADIUS server. Which enforcement profile should you configure on CPPM to work with this configuration?

Choose the Choices:

RADIUS Enforcement type with HPE - User - Role VSA set to "employees"

HPE Aruba Networking Downloadable Role Enforcement type with role name set to "employees"

HPE Aruba Networking Downloadable Role Enforcement type with gateway role name set to "employees"

RADIUS Enforcement type with Aruba - User - Role VSA set to "employees"

Practice HP HPE7-A02 Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

HPE7-A02 Exam Features

HPE7-A02 PDF Dumps