HP HP ExpertONE Certification HP2-N29 Questions & Answers

• Question 31:

  What does "SMS" stand for?

  A. System Management Solution

  B. Safe Management System

  C. Security Management System

  D. Safety Management System

  Correct Answer: C

  SMS stands for the Security Management System, which is a central management point for managing different TippingPoint appliances, monitoring events and scheduling reports. Reference: http://csrc.nist.gov/groups/STM/cmvp/ documents/140-1/140sp/140sp1545.pdf

• Question 32:

  What happens when you use the IPS factory-reset feature?

  A. Only reset policies to default.

  B. Remove all IPS configuration, logs, and accounts.

  C. Remove only security profiles

  D. Remove only network information

  Correct Answer: B

• Question 33:

  The Digital Vaccine is a container consisting of what?

  A. filters organized into 15 categories

  B. filters organized into 12 categories

  C. the Virus Vaccine policy

  D. the Anti-Virus definitions

  Correct Answer: A

• Question 34:

  How can you determine if the IPS is dropping packets?

  A. red lights on the inspection segments

  B. show np rule-stats

  C. debug port errors

  D. show np general statistics

  Correct Answer: D

• Question 35:

  On the IPS, what is a Physical Segment consisted of?

  A. a single inspection port

  B. the serial console interface

  C. the management interface

  D. a pair of network ports

  Correct Answer: D

  A physical segment comprises a group of hosts protected by IPS through a pair of physical ports on an IPS device. You can configure traffic management and DDoS filters using physical segments. Reference: http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf (page 165)d

• Question 36:

  Which CLI command shows how much traffic is traversing the IPS?

  A. show interface stats

  B. show np tier-stats

  C. debug port errors

  D. debug traffic stats

  Correct Answer: B

• Question 37:

  What does the typical SYN flood attack involve?

  A. data center humidity errors

  B. an attacker sending many spoofed TCP SYN packets

  C. congestion from the inspection segment

  D. interface errors that result in congestion

  Correct Answer: B

  The Advanced DDoS system provides the following types of protection:

  SYN Proxy -- Protects against SYN floods of the system. An attacker floods a server with malicious

  connection requests (TCP SYNs) with spoofed source IP addresses, preventing legitimate clients from

  accessing the server.

  Reference:

  http://h20000.www2.hp.com/bc/docs/support/SupportManual/c02586208/c02586208.pdf?ju

  mpid=reg_R1002_USEN (page 235)