HPE Aruba Network Security Professional (HPE7-A02) Certification Sample Questions

02. A company's HPE Aruba Networking WLAN applies firewall rules through user roles. The security team wants a role's rules to block specific applications, such as a file-sharing service, based on the application itself rather than on port numbers.
Which feature provides this capability?
a) AppRF
b) VLAN Tagging
c) DHCP Snooping
d) WIPS

03. An organization has many IoT devices that need different access policies based on their security risk level.
Which HPE Aruba Networking ClearPass capability enables automatic enforcement of security policies based on classification and context?
a) Static VLAN assignment by switch port
b) MAC filtering lists maintained on each switch
c) Role mapping based only on the SSID or port used
d) Enforcement policies using profiling, posture, and tags

04. A company wants its HPE Aruba Networking APs to detect rogue APs and automatically act to prevent unauthorized access to its WLAN.
Which security feature should be enabled?
a) Application Visibility and Control (appRF)
b) Wireless Intrusion Prevention System (WIPS)
c) Wireless Intrusion Detection System (WIDS)
d) Web Content Classification (WebCC)

05. You want AOS-CX switches to forward only high-severity events to a third-party SIEM so that security analysts are not flooded with messages.
Which of these syslog severity levels, set as the logging threshold, forwards the fewest messages?
a) Debug
b) Informational
c) Critical
d) Warning

06. A company wants to authenticate wired users on its AOS-CX switches with HPE Aruba Networking ClearPass Policy Manager (CPPM) and apply role-based policies. The solution must assign VLANs dynamically and apply security policies per user role, and role definitions must be maintained centrally in CPPM rather than on each switch.
Which security feature should be implemented?
a) Local user roles on each switch
b) Downloadable User Roles (DUR)
c) Static VLAN assignment
d) RADIUS accounting

07. An organization is deploying EAP-TLS for 802.1X authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM).
What is the primary function of the organization's Public Key Infrastructure (PKI) in this deployment?
a) To store the user credentials that CPPM checks during each authentication
b) To encrypt the wireless traffic that clients send after they authenticate
c) To assign roles and VLANs to clients according to their certificate attributes
d) To issue and validate the certificates that clients and CPPM use to prove their identities

08. A network security administrator wants to protect an AOS-CX switch from unauthorized access. They need to secure remote management while ensuring that only authorized administrators can log in.
Which configuration steps should be taken?
(Select two.)
a) Disable Telnet access and enforce SSH-only access
b) Enable TACACS+ authentication
c) Configure one shared local administrator account on every switch
d) Enable SNMPv2c read-write access for remote configuration

09. A company is deploying remote VPN access and wants users to authenticate to HPE Aruba Networking ClearPass Policy Manager (CPPM) with client certificates rather than passwords.
Which EAP method meets this requirement?
a) EAP-GTC
b) PEAP-MSCHAPv2
c) EAP-TLS
d) EAP-MD5

10. A security administrator at a company detects unauthorized devices attempting to connect to the network. The company uses HPE Aruba Networking ClearPass Policy Manager (CPPM) for authentication.
Which solution should the administrator implement to automatically detect and block unauthorized devices?
a) Classify devices with CPDI and have CPPM enforce access based on the resulting tags
b) Shorten DHCP lease times so that unknown devices lose their addresses sooner
c) Use LLDP neighbor discovery on the switches to list and block unknown devices
d) Assign every access port a static VLAN and rely on port location to control access