Refer to Exhibit:

All of the switches in the exhibit are AOS-CX switches.
What is the preferred configuration on Switch-2 for preventing rogue OSPF routers in this network?

• A.Configure OSPF authentication on VLANs 10-19 in password mode.
• B.Configure OSPF authentication on Lag 1 in MD5 mode.
• C.Disable OSPF entirely on VLANs 10-19.
• D.Configure passive-interface as the OSPF default and disable OSPF passive on Lag 1.

Comment: *

Name: *

Email: *

Verification: *

You have configured an AOS-CX switch to implement 802.1X on edge ports. Assume ports operate in the default auth-mode. VolP phones are assigned to the
"voice" role and need to send traffic that is tagged for VLAN 12.
Where should you configure VLAN 12?

• A.As the trunk native VLAN on edge ports and the trunk native VLAN on the "voice" role
• B.As a trunk allowed VLAN on edge ports and the trunk native VLAN in the "voice" role
• C.As the trunk native VLAN in the "voice" role (and not in the edge port settings)
• D.As the allowed trunk VLAN in the "voice" role (and not in the edge port settings)

Comment: *

Name: *

Email: *

Verification: *

A company is implementing a client-to-site VPN based on tunnel-mode IPsec.
Which devices are responsible for the IPsec encapsulation?

• A.Gateways at the remote clients' locations and devices accessed by the clients at the main site
• B.The remote clients and devices accessed by the clients at the main site
• C.The remote clients and a gateway at the main site
• D.Gateways at the remote clients' locations and a gateway at the main site

Comment: *

Name: *

Email: *

Verification: *

HPE Aruba Networking Central displays an alert about an Infrastructure Attack that was detected. You go to the Security > RAPIDS events and see that the attack was "Detect adhoc using Valid SSID." What is one possible next step?

• A.Use HPE Aruba Networking Central floorplans or the detecting AP identities to locate the general area for the threat.
• B.Look for the IP address associated with the offender and then check for that IP address among HPE Aruba Networking Central clients.
• C.Make sure that you have tuned the threshold for that check, as false positives are common for it.
• D.Make sure that clients have updated drivers, as faulty drivers are a common explanation for this attack type.

Comment: *

Name: *

Email: *

Verification: *

You are setting up HPE Aruba Networking SSE. Which use case requires you to apply a non-default device posture in a rule?

• A.Applying threat inspection to users when they access certain websites
• B.Checking whether a client has antivirus software as a condition for receiving access to resources
• C.Redirecting compromised clients to a remediation server
• D.Integrating with HPE Aruba Networking ClearPass OnGuard

Comment: *

Name: *

Email: *

Verification: *