HP HP Certifications HPE2-W05 Questions & Answers

• Question 81:

  You are a security analyst for a company where an Aruba infrastructure, such as Controllers, ClearPass, and Airwave, has been deployed. The company has recently deployed Aruba IntroSpect for security analytics. You are trying to understand the functionality of three components: Analyzer, Compute Node (CN), and Packet Processor of the IntroSpect system. Is this a good description of the functions of the Analyzer Node in the system? (The Analyzer Node is the center of the system, providing all of the control and interface to the other components.)

  A. Yes

  B. No

  Correct Answer: B

• Question 82:

  You are planning to configure ClearPass to send endpoint context to IntroSpect. You need to create a checklist of functions that must be enabled in ClearPass to support this. Is this an option that is required? (Time Source Now as part of the authorization in the service.)

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://www.google.com/url?sa=tandrct=jandq=andesrc=sandsource=webandcd=2andved=2ahUKEwiBra-C_HgAhWLsKQKHQ4yDkkQFjABegQICBACandurl=http%3A%2F%2Fsupport.arubanetworks.com% 2FDocumentation%2Ftabid%2F77% 2FDMXModule%2F512%2FCommand%2FCore_Download% 2FMethod%2Fattachment%2FDefault.aspx%3FEntryId% 3D33268andusg=AOvVaw3plzLBTQalED4qNGbdU1Dx

• Question 83:

  You are planning to configure ClearPass to send endpoint context to IntroSpect. You need to create a checklist of functions that must be enabled in ClearPass to support this. Is this an option that is required? (System Monitor Service.)

  A. Yes

  B. No

  Correct Answer: B

• Question 84:

  You are planning to configure ClearPass to send endpoint context to IntroSpect. You need to create a checklist of functions that must be enabled in ClearPass to support this. Is this an option that is required? (Ingress Event Processing.)

  A. Yes

  B. No

  Correct Answer: B

• Question 85:

  You deploy IntroSpect Analyzer in your existing network. You want to monitor email for suspect malware activity. Would this action be supported by IntroSpect? (Deploy a supported DNP like Proofpoint Email Protection, and integrate with The IntroSpect Analyzer.)

  A. Yes

  B. No

  Correct Answer: B

• Question 86:

  You deploy IntroSpect Analyzer in your existing network. You want to monitor email for suspect malware activity. Would this action be supported by IntroSpect? (Deploy Splunk SIEM to gather logs from the email servers.)

  A. Yes

  B. No

  Correct Answer: A

• Question 87:

  Refer to the exhibit.

  

  Given the network diagram, would this be a proper location for a network tap? (Port G at the Head Quarters Site would expose all East/West traffic bound for the data center.)

  A. Yes

  B. No

  Correct Answer: B

• Question 88:

  In a meeting with a customer that runs a fully automated manufacturing facility that is connected to the business and corporate offices, the operations manager asks why they need IntroSpect to monitor the manufacturing network. Is this a reason they should monitor the manufacturing network security? (Because the controllers and sensors do not store customer data or corporate intellectual property, even if the automation network was to be breached it would not expose anything valuable.)

  A. Yes

  B. No

  Correct Answer: B

• Question 89:

  In a meeting with a customer that runs a fully automated manufacturing facility that is connected to the business and corporate offices, the operations manager asks why they need IntroSpect to monitor the manufacturing network. Is this a reason they should monitor the manufacturing network security? (The devices on the automation network are vulnerable to attack because they are highly functional and could be weaponized by an attacker and used to attack the corporate network.)

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://www.arubanetworks.com/assets/ds/DS_IntroSpect.pdf

• Question 90:

  You need to deploy IntroSpect Analyzer in your existing network. You are planning to configure logs from multiple systems around your network. Can this 3rd-party tool collect the logs and push them to Analyzer? (IBM QRadar SIEM will push logs to IntroSpect.)

  A. Yes

  B. No

  Correct Answer: A

  Reference: IBM QRadar SIEM will push logs to IntroSpect