HP HP Certifications HPE2-W05 Questions & Answers

• Question 101:

  You are one of the system administrators in your company, and you are assigned to monitor the IntroSpect system for alarms. Is this a correct statement about alarms? (The alarm bell icon on the header bar indicates active alarms, and clicking on it will take you to the Alerts>page.)

  A. Yes

  B. No

  Correct Answer: A

• Question 102:

  Refer to the exhibit.

  

  An IntroSpect admin is configuring an Aruba IntroSpect Packet Processor to add Microsoft AD server as a log source for analyzing the AD server logs. Are these correct Format and Source options? (Format = Standard, and Source Type = Syslog.)

  A. Yes

  B. No

  Correct Answer: A

• Question 103:

  You receive an email alert that a Packet Processor forwarding AMON data at a remote site to a cloud-based Analyzer has stopped communicating. Is this a valid step to try to fix the issue? (Log into the Packet Processor and check the Alerts page to make sure that the alert is still valid.)

  A. Yes

  B. No

  Correct Answer: A

• Question 104:

  When IntroSpect ingests logs from different sources, it standardizes and catalogs the information. When it stores log data, it currently categorizes it into one of four standard schemas. Are these the four standard schemas? (VPN access data, email data, network data, and authentication data.)

  A. Yes

  B. No

  Correct Answer: B

• Question 105:

  Refer to the exhibit.

  

  An IntroSpect admin is configuring an Aruba IntroSpect Packet Processor to add Microsoft AD server as a log source for analyzing the AD server logs. Are these correct Format and Source options? (Format = Snare, and Source Type = Syslog.)

  A. Yes

  B. No

  Correct Answer: B

• Question 106:

  Refer to the exhibit.

  

  You are monitoring a new virtual packet processor with a network tap. You run the command "cli stats SERVER_PRE | gre-a1 drop' and then return an hour later and run the same command, but notice there is a significant increase in the number dropped packets.

  Could this be a reason for the increase? (The Packet Processor may not be allocated the proper number of CPUs allocated on the VM server for the size of the TAP.)

  A. Yes

  B. No

  Correct Answer: A

• Question 107:

  Refer to the exhibit.

  

  You are monitoring a new virtual packet processor with a network tap. You run the command "cli stats SERVER_PRE | gre-a1 drop" and then return an hour later and run the same command, but notice there is a significant increase in the number dropped packets.

  Could this be a reason for the increase? (The Packet Processor may not be allocated the proper number of memory allocated on the VM server for the size of the TAP.)

  A. Yes

  B. No

  Correct Answer: B

• Question 108:

  While looking at the conversation page you notice some strange network behavior, such as DNS requests coming inbound from external DNS servers. Could this be the reason why? (You have your network tap positioned wrong, and you are just getting outside data.)

  A. Yes

  B. No

  Correct Answer: B

• Question 109:

  While validating the data sources in a new IntroSpect installation, you have confirmed that the network tap

  data is correct and there are AMON log sources for both firewall and DNS.

  When you lock in the Entity360, you see the usernames from Active Directory.

  However, when you look under E360 > activity > for any user accounts there is no information under

  "Activity Card" and "Authentication" for any user. When you filter the Entity360 for IP address and look at

  the Activity screen you do see activity on the "Activity Card".

  Could this be a reason why you do not see the information but do not see activity? (The log broker could

  be configured incorrectly and not sending authentication logs to IntroSpect.)

  A. Yes

  B. No

  Correct Answer: B

• Question 110:

  While looking at the conversation page you notice some strange network behavior, such as DNS requests coming inbound from external DNS servers. Could this be the reason why? (One of your Packet Processors may be over subscribed and is dropping packets.)

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://community.hpe.com/t5/Comware-Based/Meaning-of-FFP-in-packet-drop/tdp/6071115#.XIH4nOdR2kw