HP HP ExpertONE Certification HP2-N29 Questions & Answers

• Question 21:

  While managing profiles from the Local Security Manager (LSM), what is applied to the Virtual Segment to implement security policy?

  A. Security Profile

  B. Block Log

  C. Security Blade

  D. Management Port

  Correct Answer: A

  Reference: http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf (page 124)

• Question 22:

  Where are Traffic Management Filters configured?

  A. within the applicable Digital vaccine

  B. the Management Filter Toolkit, from the Shared Settings menu option

  C. within the applicable profile

  D. from the Shared Settings menu option

  Correct Answer: C

  How To: Create/Edit a Traffic Management Filter

  1. On the Profiles - Traffic Management screen, do one of the following:

  -Click New.

  -Right-click on an entry and select New

  Reference: http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c02586208-1.pdf page 232.

• Question 23:

  Which task does the IPS Device Configuration dialog allow you to perform?

  A. access the security profiles

  B. review the system and audit logs

  C. a read-only overview of device settings

  D. all IPS settings to be edited

  Correct Answer: D

• Question 24:

  What is the default user access granted when creating a new local user on the IPS?

  A. Operator

  B. SuperUser

  C. Undefined

  D. Administrator

  Correct Answer: B

  A user, who sets up and performs the first-time initialization of the module, is implicitly assigned a Super-

  User Crypto-Officer role.

  Reference: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1545.pdf (page 14, Roles)

• Question 25:

  According to best practices, which steps are followed on the SMS to utilize a Digital vaccine on the IPS?

  A. Distribution and Obfuscation

  B. Obfuscation and Confusion

  C. Activation and Distribution

  D. Activation and Elimination

  Correct Answer: D

• Question 26:

  What is the port speed for the console connection on a TippingPoint SMS?

  A. 1200 kbps

  B. 115.2 kbps

  C. 96 kbps

  D. 1024 kbps

  Correct Answer: B

  Reference: http://www.nfwest.com/tp/docs/techd284-nplatformqs_reva07.pdf (page 2)

• Question 27:

  Which log are blocked attack event notifications sent to?

  A. Denied Log

  B. Block Log

  C. Audit Log

  D. System Log

  Correct Answer: B

  The IPS Block log documents packets that trigger IPS filters configured with any action that includes a Block + Notify or Block + Notify + Trace action, including Quarantine and TCP Reset action sets. Reference: http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf (page 66)

• Question 28:

  Which action will cause your profile to take effect?

  A. Compare

  B. Import

  C. Distribute

  D. Export

  Correct Answer: B

• Question 29:

  How does HP TippingPoint provide filter updates?

  A. TippingPoint Operating System

  B. IGRP

  C. Digital vaccine

  D. Hot Patch Install

  Correct Answer: C

  Digital Vaccine filters Using HP TippingPoint's Threat Management Center (TMC), the DVLabs team continually searches for emerging vulnerabilities and develops new attack filters to block network attacks. Filter updates provide rapid inoculation against emerging threats. Digital Vaccine filters are delivered at least once per week or on a prioritized basis as critical vulnerabilities are identified; filters can be deployed automatically with no user interaction required. Reference: http://www.ndm.net/ips/pdf/hptippingpoint/4AA3-3612ENW.pdf (Digital Vaccine filters)

• Question 30:

  When you change a category, how will new filters added to that category behave?

  A. They will assume the default category setting.

  B. They will set to block and notify until reviewed.

  C. They will assume the defined category setting.

  D. They will be disabled until reviewed.

  Correct Answer: C