HP HPE2-W05 Exam Overview:
| Certification Vendor: | HPE Aruba |
| Exam Name: | Implementing Aruba IntroSpect |
| Exam Number: | HPE2-W05 |
| Related Certifications: | HPE Product Certified – Aruba IntroSpect Specialist [2019] |
| Exam Duration: | 90 minutes |
| Passing Score: | 70% |
| Available Languages: | English |
| Real Exam Qty: | 60 |
| Exam Format: | Multiple Choice, Multiple Response, Scenario-Based Questions |
| Exam Price: | $145 USD |
| Certificate Validity Period: | 2 years |
| Sample Questions: | HP HPE2-W05 Sample Questions |
| Exam Way: | Pearson VUE testing center or online proctored exam (where available). |
| Pre Condition: | Recommended: Two years of networking or security administration experience and familiarity with Aruba ClearPass and enterprise security solutions. |
| Official Syllabus URL: | https://certification-learning.hpe.com/tr/datacard/Exam/HPE2-W05 |
HP HPE2-W05 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Installation and Initial Configuration | 20% | - Deploy IntroSpect components
|
| Aruba IntroSpect Architecture and Components | 15% | - IntroSpect solution architecture
|
| Data Collection and Integration | 25% | - Configure external integrations
|
| Troubleshooting and Maintenance | 20% | - Maintain IntroSpect deployment
|
| Monitoring and Threat Analytics | 20% | - Analyze security events
|
HP Implementing Aruba IntroSpect Sample Questions:
1. You receive an email alert that a Packet Processor forwarding AMON data at a remote site to a cloud- based Analyzer has stopped communicating.
Is this a valid step to try to fix the issue? (Log into the Packet Processor and check the Alerts page to make sure that the alert is still valid.)
A) Yes
B) No
2. An admin is evaluating entity activity alerts for large internal downloads, excessive host access, accessing hosts with SSH, and host and port scans. Is this a correct reason for these types of alerts? (an attacker conducting reconnaissance on the network.)
A) Yes
B) No
3. You are administering an IntroSpect Installation. While monitoring the load on the IntroSpect Packet Processors, you think that one Packet Processor is overloaded. Is this a correct statement about the possible overload? (As a general rule, the data rate should be below 9000 event/sec.)
A) Yes
B) No
4. You are working on an IntroSpect Analyzer to fix an issue, and a restart is required after fixing the issue.
Is this the correct procedure to restart? (From the Analyzer Menu navigate to Configuration ->System-
>Cluster Start/ Stop->Restart Cluster.)
A) Yes
B) No
5. While troubleshooting integration between ClearPass and IntroSpect, you notice that there are no log events for either THROUGHPUT or ERROR in the ClearPass log source on the IntroSpect Analyzer. You are planning your troubleshooting actions.
Is this something you should check? (Under Cluster-Wide Parameters on the ClearPass Publisher, make sure Post-Auth v2 is enabled.)
A) Yes
B) No
Solutions:
| Question # 1 Answer: A | Question # 2 Answer: A | Question # 3 Answer: B | Question # 4 Answer: B | Question # 5 Answer: A |

We're so confident of our products that we provide no hassle product exchange.


By Harriet


