Use this quick start guide to collect all the information about HPE Aruba Network Security Professional (HPE7-A02) Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the HPE7-A02 HPE Network Security Professional exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual HPE ACP-NS certification exam.
The HPE Aruba Network Security Professional certification is mainly targeted to those candidates who want to build their career in Networking domain. The HPE Aruba Networking Certified Professional - Network Security exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of HPE ACP-NS.
HPE Aruba Network Security Professional Exam Summary:
| Exam Name | HPE Aruba Networking Certified Professional - Network Security |
| Exam Code | HPE7-A02 |
| Exam Price |
Developed Countries: 350 (USD) Emerging Countries: 195 (USD) |
| Duration | 105 mins |
| Number of Questions | 70 |
| Passing Score | 67% |
| Books / Training |
Implementing Network Security, Rev. 24.41 HPE Aruba Networking Certified Network Security Professional, Second Edition Study Guide |
| Schedule Exam | Pearson VUE |
| Sample Questions | HPE Aruba Network Security Professional Sample Questions |
| Practice Exam | Hewlett Packard Enterprise HPE7-A02 Certification Practice Exam |
Hewlett Packard Enterprise HPE7-A02 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Define security terminology |
- Describe PKI dependencies - Mitigate threats by using CPDI to identify traffic flows and apply tags and CPPM to take actions based on tags - Explain the methods and benefits of profiling - Explain how Aruba solutions apply to different security vectors - Explain Zero Trust Security with Aruba solutions - Explain WIPS and WIDS, as well as describe the Aruba 9x00 Series - Describe log types and levels and use the CPPM ingress event engine to integrate with 3rd party logging solutions - Explain dynamic segmentation, including its benefits and use cases - Explain VPN deployment types and IPsec concepts such as protocols, algorithms, certificate-based authentication with IKE, and reauth intervals |
26% |
| Device hardening |
- Set up secure authentication and authorization of network infrastructure managers (with a focus on advanced topics such as TACACS+ authorization and multi-factor auth) - Secure L2 and L3 protocols, as well as other network protocols such as SFTP |
6% |
| Secure WLAN |
- Deploy AAA for WLANs with ClearPass Policy Manager (CPPM) - Define and apply advanced firewall policies (appRF, PEF, WIPS, WebCC, UTM) - Set up integration between the Aruba infrastructure and CPPM, allowing CPPM to take action in response to events - Configure rogue AP detection and mitigation |
12% |
| Secure wired AOS-CX |
- Deploy AAA for wired devices with CPPM - Configure 802.1x Authentication for AP - Deploy dynamic segmentation - Deploy certificate-based authentication for users and devices - Set up integration between the Aruba infrastructure and CPPM, allowing CPPM to take action in response to events |
19% |
| Secure the WAN |
- Understand that Aruba SD-Branch automates VPN deployment for the WAN - Design and deploy remote VPN with VIA |
5% |
| Endpoint classification |
- Deploy and apply endpoint classification to the device - Define endpoint classification methodology using active and passive methods - Define, deploy, and integrate ClearPass and CPDI |
8% |
| Threat detection |
- Investigate Central alerts - Interpret packet captures - Recommend action based on the analysis of the Central alerts - Evaluate endpoint posture |
9% |
| Troubleshooting |
- Deploy and analyze Network Analytic Engine (NAE) scripts for monitoring and correlation - Perform packet capture on Aruba infrastructure locally and using Central |
6% |
| Endpoint classification |
- Analyze endpoint classification data to identify risk - Analyze endpoint classification data on CPDI |
8% |
| Forensics | - Explain CPDI capabilities for showing network conversations on supported Aruba devices | 1% |
To ensure success in HPE ACP-NS certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for HPE Network Security Professional (HPE7-A02) exam.