Home Certifications Editorials

Exam overview and study plan

HPE Network Security Professional Practice Questions

HPE Network Security Professional

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 52 free questions

52 questions in this view

Page 1 of 9

Question 1

A company has HPE Aruba Networking APs and AOS-CX switches. The APs bridge wireless traffic. They receive DHCP IP addresses on VLAN 12. Wireless users are assigned to VLAN 18. The company wants APs to start using 802.1X authentication. You are configuring the port-access role to which the APs are assigned post-authentication.

What is one recommended setting for that role?

Access VLAN 18 with no support for VLAN 12
Auth-mode left at client-mode
Access VLAN 12 with no support for VLAN 18
Auth-mode set to device-mode

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

You are setting up HPE Aruba Networking SSE. Which use case requires you to apply a non-default device posture in a rule?

redirecting compromised clients to a remediation server
Applying threat inspection to users when they access certain web sites
integrating with HPE Aruba Networking ClearPass OnGuard
checking whether a client has antivirus software as a condition for receiving access to resources

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

You want to examine the applications that a device is using and look for any changes in application usage over several different ranges.

In which HPE Aruba Networking solution can you view this information in an easy-to-view format?

HPE Aruba Networking ClearPass OnGuard agent installed on the device
HPE Aruba Networking Central within a device's Live Monitoring page
HPE Aruba Networking ClearPass Device Insight (CPDI) in the device's network activity
HPE Aruba Networking ClearPass Insight using an Active Endpoint Security report

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company wants to apply role-based access control lists (ACLs) on AOS-CX switches, which are implementing authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants to centralize configuration as much as possible.

Which correctly describes your options?

You can configure the role on CPPM; however, the CPPM role must reference a policy name that is configured on the switch.
You can configure the role and its policy on CPPM; however, the classes referenced in the policy must be configured locally on the switch.
You can configure the role name on CPPM; however, the role settings, including policy and classes, must be configured locally on the switch.
You can configure the role, its policy, and the classes referenced in the policy all on CPPM.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A company has been running Gateway IDS/IPS on its gateways in IDS mode for several weeks. The company wants to transition to IPS mode.

What is one step you should recommend?

Change the mode on one gateway at a time to establish a smoother transition period.
Disable traffic inspection and reboot before re-enabling traffic inspection with the new mode.
Check for legitimate traffic that has been flagged as a threat and allow list the associated rules.
Consider applying a stricter IPS policy to minimize issues during the transition period.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

You are using Wireshark to view packets captured from HPE Aruba Networking infrastructure, but you’re not sure that the packets are displaying correctly. In which circumstance does it make sense to configure Wireshark to ignore protection bits with the IV for the 802.11 protocol?

When the traffic was captured on the control plane of an HPE Aruba Networking MC and set to a remote IP
When the traffic was captured on the data plane of an HPE Aruba Networking gateway and sent to a remote IP
When the traffic was captured from an AP with HPE Aruba Networking Central
When the traffic was mirrored from an AOS-CX switch port connected to an AP

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 9

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.