HP HP Certifications HPE2-W05 Questions & Answers

• Question 91:

  You need to deploy IntroSpect Analyzer in your existing network. You are planning to configure logs from multiple systems around your network. Can this 3rd-party tool collect the logs and push them to Analyzer? (Splunk Enterprise will allow push notifications.)

  A. Yes

  B. No

  Correct Answer: B

• Question 92:

  A customer with approximately 200 users in Active Directory, is running Aruba Mobility Controllers, Palo Alto firewalls, and Pulse Secure VPN and InfoBlox DNS on their network. They would like to implement the 2RU Fixed Configuration Analyzer Standard Edition.

  Would this be a good response to the customer? (The 2RU Fixed Configuration Analyzer should work for this smaller customer. However, they will need the Advanced Edition to monitor the DNS server.)

  A. Yes

  B. No

  Correct Answer: B

• Question 93:

  A customer with approximately 200 users in Active Directory, is running Aruba Mobility Controllers, Palo Alto firewalls, and Pulse Secure VPN and InfoBlox DNS on their network. They would like to implement the 2RU Fixed Configuration Analyzer Standard Edition.

  Would this be a good response to the customer? (The Standard Edition will work for this customer as long as they do not want to capture the InfoBlox DNS logs.)

  A. Yes

  B. No

  Correct Answer: A

• Question 94:

  An IntroSpect installation has been up for a day. While validating the log sources, you see an Aruba

  Firewall log source configured on a Packet Processor that has shown up on the interface in the analyzer.

  While evaluating conversation data you notice there is no eflow data from AMON. You log into the

  controller and confirm there is user activity in the dashboard.

  Would this be a correct statement about this situation? (The Packet Processor has been configured

  correctly.)

  A. Yes

  B. No

  Correct Answer: B

• Question 95:

  An IntroSpect installation has been up for a day. While validating the log sources, you see an Aruba Firewall log source configured on a Packet Processor that has shown up on the interface in the analyzer.

  While evaluating conversation data you notice there is no eflow data from AMON. You log into the controller and confirm there is user activity in the dashboard. Would this be a correct statement about this situation? (The log source on the Packet Processor may not be pointed to the analyzer IP address.)

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Default.aspx? EntryId=27259

• Question 96:

  You are one of the system administrators in your company, and you are assigned to monitor the IntroSpect system for alarms. Is this a correct statement about alarms? (To see the alarms, navigate to the IntroSpect Analyzer Menu> System Status>Alerts> page.)

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/EntryId/26587/ Default.aspx

• Question 97:

  You are one of the system administrators in your company, and you are assigned to monitor the IntroSpect system for alarms. Is this a correct statement about alarms? (A memory_full alarm will fire when there is less than 1 GB of free memory for more than thirty minutes.)

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Default.aspx? EntryId=27259

  (2.4 user guide)

• Question 98:

  You are one of the system administrators in your company, and you are assigned to monitor the IntroSpect system for alarms. Is this a correct statement about alarms? (You must navigate to the IntroSpect Analyzer Menu>Alerts page to see if there are any alarms.)

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/EntryId/26587/ Default.aspx

• Question 99:

  You receive an email alert that a Packet Processor forwarding AMON data at a remote site to a cloud-based Analyzer has stopped communicating. Is this a valid step to try to fix the issue? (Contact the firewall administrator from the site and see if any rules have changed that may be blocking TCP port 389.)

  A. Yes

  B. No

  Correct Answer: B

• Question 100:

  You are configuring a ClearPass Cluster to send endpoint context to an IntroSpect Analyzer for the wireless network. You want to test the setup after you have installed the XML file with the enforcement profiles and actions. Can this method be used to test that the setup is functioning correctly? (Connect to the wireless network, and send a test authentication from a test device/user in the network. Observe the results in Access Tracker.)

  A. Yes

  B. No

  Correct Answer: A