HPE Network Security Associate Exam Practice Questions & Answers • ExamPrepare

Question 1

What is an example of active endpoint classification?

SSH scans
DHCP fingerprinting
HTTP User-Agent string-based classification
MAC OUI based classification

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A company has AOS-CX switches deployed in a two-tier topology that uses OSPF routing at the core.

You need to prevent DoS attacks. To meet this need, what is one technology that you could apply to switch control plane? (Select two.)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Your company policies require you to encrypt logs between network infrastructure devices and Syslog servers. What should you do to meet these requirements on an AOS-CX switch?

Set up RadSec and then enable Syslog as a protocol carried by the RadSec tunnel.
Specify the Syslog server with the UDP option and then add an CPsec tunnel that selects Syslog.
Specify a priv key with the Syslog settings that matches a priv key on the Syslog server.
Specify the Syslog server with the TLS option and make sure the switch has a valid certificate.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibit.

The monitoring admin has asked you to set up HPE Aruba Networking Mobility Controllers to meet these criteria:

Send logs to a SIEM Syslog server at 10.1.10.90 at the standard UDP port (514)
Send a log for all events in the security category at the "warning" level or above

The exhibit shows the configuration for the server in the AOS Web UI.

What should you do to finish configuring to the requirements?

Create four more Syslog server definitions to send security logs at levels "error" through "emergency."
Check the Logging Levels and make sure that "warning" or below is set for the security category.
Access the CLI to specify an authentication key that matches the one on the SIEM server.
Access the CLI to change the transport mode from the default TCP to UDP.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

You are checking the Security Dashboard in the Web UI for your AOS solution and see that Wireless Intrusion Prevention (WIP) has discovered a rogue radio operating in ad hoc mode with open security. What correctly describes a threat that the radio could pose?

It could open a backdoor into the corporate LAN for unauthorized users.
It could be attempting to conceal itself from detection by changing its BSSID and SSID frequently.
It is running in a non-standard 802.11 mode and could effectively jam the wireless signal.
It is flooding the air with many wireless frames in a likely attempt at a DoS attack.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Your AOS solution has detected a rogue AP with Wireless Intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

the confidence level
the detecting devices
the match type
the match method

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.