HPE Sovereign Cloud Solutions (HPE2-B09) Certification Sample Questions

01. A public hospital's wireless network carries staff devices, medical IoT devices and visitors. Visitors must reach only the internet, and medical devices must reach only their own clinical servers. Which design meets these requirements?
a) Per-class role-based policy, with visitors tunneled to a DMZ gateway
b) One shared wireless network, with visitors trusted to stay on public websites
c) Pre-shared keys per class, with medical devices allowed on staff segments
d) A separate SSID per class, all bridged into the same internal VLAN and subnet

02. After a ransomware attack, a government agency plans how to restore from its immutable backups without reinfecting production. Which three steps belong in its recovery plan?
(Select three.)
a) Restore directly over production systems to save time
b) Scan restored systems for malware and persistence
c) Restore the most recent backup to minimize data loss
d) Restore first into an isolated recovery environment
e) Choose a recovery point from before the compromise began

03. Which HPE deliverable packages a tested set of server firmware, drivers and tools, and is often used as the approved firmware baseline?
a) Intelligent Provisioning
b) Smart Update Manager
c) Service Pack for ProLiant
d) Active Health System

04. A ministry wants its HPE Aruba Networking wireless network to protect against unauthorized access points. Which two capabilities of wireless intrusion prevention help?
(Select two.)
a) Containing rogue access points so clients cannot associate
b) Detecting rogue access points connected to the wired network
c) Encrypting wired traffic between access points and switches
d) Profiling wired endpoints and assigning them roles

05. ClearPass authenticates a user on an HPE Aruba Networking switch and returns a downloadable user role. What advantage does this give over a role that must already be defined locally?
a) The switch stops sending authentication requests to ClearPass afterward
b) The user's traffic is encrypted between the switch and the gateway
c) The role follows the user onto other vendors' switches without configuration
d) The switch gets the role's policy from ClearPass, with no local copy needed

06. A bank deploys HPE Aruba Networking EdgeConnect SD-WAN. Its regulator requires the SD-WAN management and policy system to run under the bank's control, inside the country. How should the orchestrator be deployed?
a) Hosted at the bank's disaster recovery site in a neighboring country
b) Omitted, with each appliance configured and managed on its own
c) As a vendor-hosted service, with administrator access restricted by IP address
d) Self-hosted in the bank's own in-country data center

07. HPE servers at unattended edge sites must resist tampering by anyone who gains physical access. Which two UEFI system settings reduce this risk?
(Select two.)
a) Allow booting from removable media for recovery
b) Enable network boot from any site server
c) Set a UEFI administrator password
d) Disable USB ports that are not needed

08. Which HPE StoreOnce interface lets backup software that expects a tape library write to disk-based storage without changes?
a) Virtual tape library
b) Catalyst store
c) NAS share
d) Cloud Bank storage

09. A sovereign operator hardens management access to its HPE Aruba Networking switches and gateways. Which two protocol choices are appropriate?
(Select two.)
a) HTTP instead of HTTPS
b) SNMPv3 instead of SNMPv2c
c) TFTP instead of SCP
d) SSH instead of Telnet

10. A sovereign cloud operator hosts tenant virtual machines and wants to protect tenant data in memory, even from the operator's own hypervisor administrators. Which technology addresses this requirement?
a) Role-based access control on each host's iLO
b) Controller-based encryption of each host's local drives
c) Processor-based memory encryption for confidential computing
d) Server Configuration Lock on the virtualization hosts