HP0-757 Exam

HP ProCurve Security

Exam Number/Code : HP0-757
Exam Name : HP ProCurve Security
Questions and Answers : 70 Q&As
Update Time: 2011-09-21
Price: ~~$ 119.00~~ $ 69.00

HP0-757

Free HP0-757 Demo Download

Test4pass offers free demo for Certification I HP0-757 exam (HP ProCurve Security). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.

Exam Description

It is well known that HP0-757 exam test is the hot exam of HP certification. Test4pass offer you all the Q&A of the HP0-757 real test . It is the examination of the perfect combination and it will help you pass HP0-757 exam at the first time!

Why choose Test4pass HP0-757 braindumps

Quality and Value for the HP0-757 Exam
100% Guarantee to Pass Your HP0-757 Exam
Downloadable, Interactive HP0-757 Testing engines
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Practice Test Questions accompanied by exhibits
Our Practice Test Questions are backed by our 100% MONEY BACK GUARANTEE.

HP Certification I HP0-757 exam braindumps questions and answers

��
��
Exam : HP HP0-757
Title : HP ProCurve Security

1. What is the main difference between EAP-TLS and EAP-MD5?
A. EAP-TLS uses a challenge/handshake mechanism for authentication; EAP-MD5 uses certificates for authentication.
B. EAP-TLS uses a challenge/handshake mechanism for authentication and encryption; EAP-MD5 uses certificates for authentication and encryption.
C. EAP-TLS uses a name and password along with digital certificates to produce a session key; EAP-MD5 uses a name and password to produce a session key.
D. EAP-TLS uses digital certificates for mutual authentication; EAP-MD5 uses a challenge/handshake mechanism to authenticate the client to the server.
Answer: D

2. A network administrator wants to prevent users in the marketing department from accessing servers on the finance network. Both departments are connected to the network with an 5300xl switch. Finance department users should have access to the finance servers as well as other common network resources. Which measures combined would accomplish this goal? Select TWO.
A. Enforce resource operating system security on the finance servers in the form of user names and passwords.
B. Place marketing department users in a different VLAN than the finance servers.
C. Apply access control lists to router interfaces to prevent unauthorized traffic from reaching the finance servers.
D. Isolate the "problem" users in the marketing department by placing them in a separate physical network.
E. Provide multiple physical interfaces for the finance server.
Answer: BC

3. In an 802.1X authentication environment there are different methods by which a user can be placed on a VLAN. Which method has the highest priority on a given port?
A. an authorized VLAN assignment configured on the switch at the time 802.1X was enabled for the port
B. a dynamic VLAN assignment from the RADIUS server
C. the statically assigned VLAN configured for the port
D. the priority determined by the command used to configure the port for 802.1X authentication
Answer: B

4. The HP ProCurve Access Control Security solution helps protect valuable network resources and intellectual property from internal and external security threats. As part of this solution, 802.1X and RADIUS technology on HP switches controls network access based on which criteria? Select THREE.
A. locked out MAC addresses
B. type of applications used on the network
C. type of client OS
D. login location on the network
E. access control lists (ACLs)
F. user's role within in an organization
G. time of access
Answer: DFG

5. A customer wants to provide stricter access security for all network clients and implement a combination of 802.1X and MAC authentication. Which parameters must be configured on the RADIUS server to support the ports configured with MAC authentication? Select TWO.
A. Configure PAP to support unencrypted authentication of network peripherals.
B. Create a user on the RADIUS server using the MAC address of the device for the username and the password.
C. Create a user on the RADIUS server using the MAC address of the device for the username and the RADIUS shared secret for the password.
D. Configure CHAP RADIUS for the authentication method.
E. Create a user on the RADIUS server using the MAC address of the device for the username and do not configure a password (leave it blank).
F. Configure EAP RADIUS for the authentication method.
Answer: BD

6. Click the Exhibit button.
The RADIUS server and switch are correctly configured for proper interaction. The switch has the VLAN assignments and port-access commands shown in the diagram. When the user provides valid authentication information, port 10 will ________.
A. remain in an unauthorized state and prevent user traffic from being forwarded
B. become a member of VLAN 20
C. become a member of VLAN 25
D. become a member of VLAN 200
Answer: C

7. What is true with regard to standard and extended access control lists (ACLs) on the HP ProCurve 5300xl?
A. A standard ACL can only specify a filter based on a destination IP address, while an extended ACL can specify both source and destination IP addresses.
B. Standard and extended ACLs can both specify Layer 4 TCP/UDP ports, but only an extended ACL can specify precedence and type of service traffic.
C. An extended ACL can filter traffic from a source TCP/UDP port to a destination IP address, while a standard ACL only supports filters based on the source IP address.
D. An extended ACL supports filtering on both source and destination TCP/UDP ports, while a standard ACL only supports source TCP/UDP ports.
Answer: C

8. You have enabled port security using the "send-disable" action. Which administrative action, if any, is required after an intrusion to enable the device to return to normal operation?
A. No action is required.
B. The intrusion flag must be cleared.
C. The port must be enabled.
D. The intrusion flag must be cleared and the port must be enabled.
Answer: D

9. Click the Exhibit button.
A network administrator creates an ACL on the core 5300xl router that denies Telnet traffic from any IP source to any IP destination, but permits all other IP traffic. The ACL is applied as an "outbound" access group to VLAN 50. If no other ACLs have been configured on the router, what is a result of this configuration?
A. Clients in VLAN 50 can Telnet to local devices but not to devices in other VLANs.
B. Clients in VLAN 50 cannot Telnet to VLAN 100 but they can access the web servers in that VLAN.
C. Clients in VLAN 1 can Telnet only to local devices and to devices on VLAN 100.
D. Clients in VLAN 1 can Telnet to all devices on all three VLANs.
Answer: C

10. You support a network that has ports in a conference room that is regularly used by guests. You have decided to define a guest VLAN that allows access to the internet and prevents access to corporate resources. Which solution provides the most flexibility and lowest management overhead while placing the guest users in the appropriate VLAN?
A. Require that guests connect only to ports in the conference room that are members of the guest VLAN.
B. Enable 802.1X on the conference room ports. Give guests a temporary logon ID and provide them with 802.1X supplicant software. Associate guest user IDs with a guest VLAN that prevents access to corporate resources.
C. Enable IEEE 802.1X on the conference room ports and configure the guest VLAN as the authorized VLAN for these ports.
D. Enable IEEE 802.1X on the conference room ports and configure the guest VLAN as the unauthorized VLAN for these ports.
Answer: D

11. The network administrator of a university realizes that students in the on campus housing are connecting wireless acccess points and switches to the network. The administrator wants to limit a particular port to one MAC address at a time, but is not concerned about the actual address. Which security feature on the 5300xl provides flexibility while effectively limiting a port to a single MAC address at a time?
A. Port security learn mode limited-continuous
B. MAC lockdown learn mode limited-continuous
C. MAC lockout learn mode limited-continuous
D. 802.1X MAC authentication
Answer: A

12. The network administrator of a private college wants to enable web authentication for all access ports in the student housing buildings. In addition, he wants to address the growing problem of students using unauthorized switches to network more than one device per access port. What additional configuration is required to prevent more than one authenticated user from connecting to a port that has default web authentication enabled?
A. Enable port security with the address-limit 1 option.
B. The default client limit is 1 for Web authentication so no further configuration is required.
C. Enable port security with the learn-mode port-access option.
D. Add an option to the port-access command that limits the number of MAC addresses to 1.
Answer: B

13. Click the Exhibit button.
The RADIUS server and switch are correctly configured for proper interaction. The switch has the VLAN assignments and port-access commands shown in the diagram. When the user shown in the diagram connects to the network as shown, port 10 will ________.
A. remain in an unauthorized state and prevent user traffic from being forwarded
B. become a member of VLAN 20
C. become a member of VLAN 25
D. become a member of VLAN 200
Answer: D

14. Which statement is true with regard to the AAA security framework? It _______.
A. defines standardized processes for access, authorization, and accountability
B. defines standardized processes for authentication, authorization, and accounting
C. is an application-neutral Internet standard that defines access control for layer 3 switches
D. is an HP-proprietary specification that defines how HP ProCurve switches process login sessions
Answer: B

Click Online chat to talk with us , get more informations about HP Certification I HP0-757 practice exam study guides questions and answers

Test4pass HP0-757 Exam Features

Quality and Value for the HP0-757 Exam

Test4pass Practice Exams for HP HP0-757 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.

100% Guarantee to Pass Your HP0-757 Exam

If you prepare for the exam using our Test4pass testing engine, we guarantee your success in the first attempt. If you do not pass the Certification I HP0-757 exam (ProCurve Secure WAN) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.

HP HP0-757 Downloadable, Printable Exams (in PDF format)

Our Exam HP0-757 Preparation Material provides you everything you will need to take your HP0-757 Exam. The HP0-757 Exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

HP0-757 Downloadable, Interactive Testing engines

We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Our Exam Preparation Material provides you everything you will need to take a certification examination. Like actual certification exams, our Practice Tests are in multiple-choice (MCQs) Our HP HP0-757 Exam will provide you with free HP0-757 dumps questions with verified answers that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. High quality and Value for the HP0-757 Exam:100% Guarantee to Pass Your Certification I exam and get your Certification I Certification.

Test4pass HP0-757 exam
Test4pass HP0-757 pdf exam
Test4pass HP0-757 braindumps
Test4pass HP0-757 study guides
Test4pass HP0-757 trainning materials
Test4pass HP0-757 simulations
Test4pass HP0-757 testing engine
Test4pass HP0-757 vce
Test4pass HP0-757 torrent
Test4pass HP0-757 dumps
free download HP0-757
Test4pass HP0-757 practice exam
Test4pass HP0-757 preparation files
Test4pass HP0-757 questions
Test4pass HP0-757 answers

http://www.test4pass.com/HP0-757-exam.html The safer.easier way to get Certification I Certification .