Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

HPE7-A01 Aruba Certified Campus Access Professional Exam

  • HP
  • 5 free sample questions

About this exam

HPE7-A01 is the HP exam Aruba Certified Campus Access Professional Exam. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
HPE7-A01
Vendor
HP
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for HPE7-A01.

Question 1

Your Director of Security asks you to assign AOS-CX switch management roles to new employees based on their specific job requirements

After the configuration was complete, it was noted that a user assigned with the administrators role did not have the appropriate level of

access on the switch.

The user was not limited to viewing nonsensitive configuration information and a level of 1 was not assigned to their role Which default management role should have

been assigned for the user?

  1. Option A:

    sysadmin

  2. Option B:

    operators

  3. Option C:

    helpdesk

  4. Option D:

    config

Show answer and explanation

Correct answer: B

The default management role that should have been assigned for the user is B. operators.

The operators user role is a predefined role that allows users to view nonsensitive configuration information on the switch, such as interfaces,

VLANs, routing protocols, statistics, and more. The operators user role has a privilege level of 1, which is the lowest level of access on

the switch 1 .

The administrators user role is a predefined role that has full access to all switch configuration information and all REST API methods. This role is more than what the Director of Security requires 1 .

Question 2 (choose 2)

A customer is looking Tor a wireless authentication solution for all of their loT devices that meet the following requirements

- The wireless traffic between the IoT devices and the Access Points must be encrypted

- Unique passphrase per device

- Use fingerprint information to perform role-based access

Which solutions will address the customer ' s requirements? (Select two.)

  1. Option A:

    MPSK and an internal RADIUS server

  2. Option B:

    MPSK Local with MAC Authentication

  3. Option C:

    ClearPass Policy Manager

  4. Option D:

    MPSK Local with EAP-TLS

  5. Option E:

    Local User Derivation Rules

Show answer and explanation

Correct answer: C, D

The correct answers are C and D.

MPSK (Multi Pre-Shared Key) is a feature that allows multiple PSKs to be used on a single SSID, providing device-specific or group-specific passphrases for enhanced security and deployment flexibility for headless IoT devices 1 . MPSK requires MAC authentication against a ClearPass Policy Manager server, which returns the encrypted passphrase for the device in a RADIUS VSA 2 . ClearPass Policy Manager is a platform that provides role- and device-based network access control for any user across any wired, wireless and VPN infrastructure 3 . ClearPass Policy Manager can also use device profiling and posture assessment to assign roles based on device fingerprint information 4 .

MPSK Local is a variant of MPSK that allows the user to configure up to 24 PSKs per SSID locally on the device, without requiring ClearPass Policy Manager 5 . MPSK Local can be combined with EAP-TLS (Extensible Authentication Protocol-Transport Layer Security), which is a secure authentication method that uses certificates to encrypt the wireless traffic between the IoT devices and the access points 6 . EAP-TLS can also use device certificates to perform role-based access control 6 .

Therefore, both ClearPass Policy Manager and MPSK Local with EAP-TLS can meet the customer’s requirements for wireless authentication, encryption, unique passphrase, and role-based access for their IoT devices.

MPSK and an internal RADIUS server is not a valid solution, because MPSK does not support internal RADIUS servers and requires ClearPass Policy Manager 7 8 9 . MPSK Local with MAC Authentication is not a valid solution, because MAC Authentication does not encrypt the wireless traffic or use fingerprint information for role-based access 2 . Local User Derivation Rules are not a valid solution, because they do not provide unique passphrase per device or use fingerprint information for role-based access 10 11 12 .

See all 5 free sample questions