Examsoon HP0-Y15 dumps.pdf

About Global Documents

Global Documents provides you with documents from around the globe on a variety of topics for your enjoyment.
Global Documents utilizes edocr for all its document needs due to edocr's wonderful content features. Thousands of professionals and businesses around the globe publish marketing, sales, operations, customer service and financial documents making it easier for prospects and customers to find content.
IP address DHCP server NAC quarantine ProCurve NAC Endpoint Certification Material provide
Examsoon.com 
The World Renowned  IT Certification Material Provider
Exam
: HP HP0-Y15
Title
: ProCurve Network Access
Control
Version : Demo
Examsoon.com 
The World Renowned  IT Certification Material Provider 
Important Note, Please Read Carefully 
Other examsoon products 
All examsoon IT Exam Products 
Our products of Offline Testing Engine 
Use the offline Testing engine product to practice the questions in an exam environment. 
Build a foundation of knowledge which will be useful also after passing the exam. 
examsoon Testing Engine 
Guarantee 
Examsoon provides the most competitive quality of all exams for the customers, we guarantee your 
success at the first attempt with only our Certification Question&Answers, if you do not pass the exam at 
the first time, we will not only arrange FULL REFUND for you, but also provide you another exam of your 
claim, ABSOLUTELY FREE!. 
Features 
1.  Comprehensive questions with complete details 
2.  Instant Downloadable in PDF form. 
3.  Verified Answers Researched by Industry Experts 
4.  Questions accompanied by exhibits 
5.  Drag and Drop questions as experienced in the Actual Exams. 
6.  These questions and answers are backed by our GUARANTEE. 
7.  Questions updated on regular basis. 
8.  Like actual certification exams our product is in multiplechoice questions (MCQs).
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
1. You are configuring a ProCurve NAC 800 to operate using the DHCP quarantine method. Which
parameters are specified when adding a quarantine area? (Select three.)
A. IP address of the DHCP server
B. IP address of a RADIUS server
C. IP address of a default gateway
D. range of quarantine IP addresses
E. lease duration time for IP addresses
F. non-quarantine subnet using CIDR notation
G. IP address of a DNS server for quarantine subnet
H. static route for endpoints to use when quarantined
Answer: CDF
2. What is an important factor to consider when deploying the ProCurve NAC 800 using the DHCP
quarantine method?
A. The IP address lease duration must be set to five minutes or less on the DHCP server.
B. The DHCP server requires one additional, non-overlapping scope for every existing DHCP scope.
C. A switch must support traffic mirroring for each DHCP server protected by the NAC 800.
D. Endpoint Integrity cannot be enforced for devices using static IP addresses.
E. The DNS server scope option on the DHCP server must be set to the IP address of the NAC 800.
Answer: D
3. A ProCurve 3500yl switch is connected to port 1 of a ProCurve NAC 800 and a DHCP server is
connected to port 2. The DHCP server IP address is 10.1.10.10/24. The NAC 800 IP address is
10.1.10.20/24. The IP address 10.1.24.1/24 is assigned to VLAN 24 on the switch.
Which additional configuration settings would be appropriate for supporting a 10.1.24.0/24 non-quarantine
subnet and a 10.1.25.0/24 quarantine subnet? (Select two.)
A. on the switch, a multinetted IP address of 10.1.25.1/24 assigned to VLAN 24
B. on the NAC 800, the IP address of the DHCP server specified as 10.1.10.10/24
C. on the NAC 800, IP addresses 10.1.24.51 through 10.1.24.100 defined as exceptions
D. on the switch, the IP helper addresses 10.1.10.10 and 10.1.10.20 defined for VLAN 24
E. on the DHCP server, one scope for 10.1.24.0/24 and a second scope for 10.1.25.0/24
Answer: AD
4. A ProCurve 5406zl switch is connected to port 1 of a ProCurve NAC 800 and a DHCP server is
connected to port 2 of the NAC 800. You are planning to deploy the ProCurve NAC 800 with the DHCP
quarantine method using a shared subnet approach. Which configuration requirement must be satisfied?
A. The quarantine and non-quarantine subnets defined on the NAC 800 must be the same.
B. The switch requires that separate VLANs be defined for the quarantine and non-quarantine subnets.
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
C. Each switch VLAN supporting the endpoints must use a single IP helper set to the IP address of the NAC
800.
D. The scope on the DHCP server and the quarantine subnet on the NAC 800 must use non-overlapping IP
addresses.
Answer: D
5. A network is configured to support a ProCurve NAC 800 operating with the DHCP quarantine method.
The NAC 800 is located between a ProCurve 3500yl switch and a DHCP server. How is DHCP traffic
processed when an endpoint, that is currently unknown to the NAC 800, sends a DHCP request for an IP
address?
A. The switch requests the endpoint's integrity state from the NAC 800 before forwarding to the DHCP
server.
B. If the NAC 800 receives a DHCP request addressed to the DHCP server, the request is blocked by the
NAC 800.
C. The DHCP server checks the endpoint's integrity state passed to it by the NAC 800 before responding
with an IP address.
D. The DHCP server responds with a quarantine IP address initially and waits for the NAC 800 to indicate
the endpoint has passed integrity testing.
Answer: B
6. A network is configured to support a ProCurve NAC 800 operating with the DHCP quarantine method.
How does an endpoint transition from a quarantine IP address to a non-quarantine IP address after passing
integrity testing?
A. The NAC 800 triggers the switch to re-authenticate the endpoint causing a new DHCP request to be
issued.
B. The NAC 800 sends a DHCP release to the endpoint followed by a DHCP assignment message with the
IP address.
C. The switch stops forwarding DHCP requests from the endpoint to the NAC 800 and instead sends them
to the DHCP server.
D. Any subsequent DHCP request from the endpoint is allowed by the NAC 800 to pass to the DHCP
server.
Answer: D
7. Which statements are true about the DHCP quarantine method? (Select two.)
A. The DNS server for a quarantine subnet is assigned by the enterprise DHCP server.
B. A quarantine subnet consists of a set of IP addresses dynamically assigned to endpoints.
C. Endpoint Integrity can be managed for endpoints with static IP addresses by defining exceptions.
D. A non-quarantine IP address is assigned by the NAC 800 after an endpoint passes integrity testing.
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
E. Port 2 of the NAC 800 can be connected to a switch that provides a path to multiple DHCP servers.
Answer: BE
8. Which configuration task is applicable to the ProCurve NAC 800 inline quarantine method?
A. Enable the internal firewall.
B. Specify one or more quarantine subnets.
C. Add IP address entries to the Accessible Services List.
D. Select the port to be used for connection to the external network.
E. Identify the static and DHCP IP address ranges of endpoints to monitor.
Answer: C
9. Which statement is true about the ProCurve NAC 800 inline quarantine method? (Select two.)
A. Port 2 is usually connected to a gateway device such as a ProCurve Secure Router 7000dl.
B. The NAC 800 provides optional user authentication for endpoints that have passed integrity testing.
C. This method uses a quarantine subnet to limit network access by quarantined or unknown endpoints.
D. The Accessible Services List is not supported by this method when quarantined devices are located in
an external network.
E. The NAC 800 functions like a Layer 2 bridge except that it also has a firewall that controls traffic flowing
between its two ports.
Answer: AE
10. Which deployment factor needs to be considered when using the ProCurve NAC 800 inline quarantine
method?
A. The NAC 800's internal DHCP server may not provide optimal performance for a very large population of
endpoints.
B. It requires administrator expertise to tailor the internal firewall rules to manage each distinct network
environment.
C. Any entry added to the Accessible Services List must be specified using an IP address instead of a DNS
name.
D. Only 802.1X authentication using an external RADIUS server is supported for endpoints that have
passed integrity testing.
Answer: C
11. Network security can be described in terms of multiple layers of security. Which action is an example of
a perimeter security measure?
A. ACLs applied at the core
B. limiting switch access to RADIUS users
C. using a secure OS for network application servers
D. installing a firewall
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
Answer: D
12. Which statement is true about the ProCurve ProActive Defense strategy?
A. It achieves better-performing, more scalable networks by using high capacity core resources.
B. It operates at a safe distance from the points of attack and the network resources being attacked.
C. It makes access and policy enforcement decisions where users and applications connect to the network.
D. It creates a cost-effective management framework by using core infrastructure protection measures.
Answer: C
13. Which infrastructure defense capabilities are provided by the ProCurve ProActive Defense network
security solution? (Select two.)
A. phishing protection
B. connection rate filtering
C. managed security services
D. vulnerability assessment database
E. spoofing protection of DHCP traffic
Answer: BE
14. In a network that includes an Endpoint Integrity solution, which component does a ProCurve Switch
5400zl series correspond to in the Trusted Network Connect architecture?
A. Network Access Requester
B. Network Access Authority
C. Policy Enforcement Point
D. Policy Decision Point
Answer: C
15. Network security can be described in terms of multiple layers of security. Which security layer does an
unauthorized VLAN correspond to?
A. infrastructure defense
B. network access control
C. control protocol detection
D. network immunity protection
E. device-to-device authentication
Answer: B
16. You have just downloaded a system upgrade for the ProCurve NAC 800 using a Web browser on a
management station. The system upgrade has been stored on a USB drive and the USB drive has been
connected to the ProCurve NAC 800 USB port. What must be done to install the system upgrade from the
local USB drive? (Select three.)
A. The install script must be executed.
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
B. The ProCurve Services Partition must be activated.
C. The access mode must be temporarily set to allow all.
D. The USB drive must be accessed using the cd command.
E. The compressed file must be unpacked using the tar command.
F. A console or SSH session must be established using the root user account.
Answer: DEF
17. Which statements are true about licensing operation on the ProCurve NAC 800? (Select three.)
A. Endpoints defined as exceptions use a license entry.
B. License usage is tracked based on unique endpoint MAC addresses.
C. A Management Server without a license key can support only one Enforcement Server.
D. A Combination Server without a license key can support only one endpoint for integrity testing and
management.
E. After a device disconnects from the network, the license entry is locked until the lease time for the IP
address expires.
Answer: BCD
18. Which statement is true about the Accessible Services List?
A. It identifies Internet destinations that endpoints can access after passing Endpoint Integrity testing.
B. You can configure an IP address and port number of a service that can be accessed by a quarantined
endpoint.
C. The default entries identify services in the enterprise network that can be accessed regardless of
Endpoint Integrity state.
D. It identifies external RADIUS servers the NAC 800 can provide proxy access to when the local RADIUS
option is enabled.
Answer: B
19. You have just completed the initial setup process of the ProCurve NAC 800 using the Web management
interface. Which statements are true about the current configuration settings? (Select three.)
A. The access mode is normal.
B. All testing methods are disabled.
C. The root user account is disabled.
D. One policy group named Default is defined.
E. An hourly schedule for test updates is active.
F. All Ethernet ports are blocked except for Web management access.
Answer: ADE
20. Which statements are true about ProCurve NAC 800 hardware features? (Select two.)
A. Only Ethernet port 1 responds to ping requests.
ExamSoon.com 
The World Renowned  IT Certification Material Provider 
Help you pass any IT Exams
B. Ethernet port 2 is used to access the Web management interface.
C. The LCD menu and control buttons can be used to initiate a factory image recovery.
D. Up to two Ethernet 10/100/1000 Mbps ports are supported depending on the quarantine method.
E. The console port cable supported for out-of-band management access has an RJ-45 connector.
Answer: DE
Examsoon.com was founded in 2006. The safer,easier way to help you pass any IT Certification 
exams . We provide high quality IT Certification exams practice questions and answers(Q&A). 
Especially  Adobe,  Apple,  Citrix,  Comptia,  EMC,  HP,  Juniper,  LPI,  Nortel,  Oracle,  SUN, 
Vmware  and so on. And help you pass any IT Certification exams at the first try. 
we guarantee your success at the first attempt with only our Certification Question&Answers, 
if you do not pass the exam at the first time, we will not only arrange FULL REFUND for you, 
but also provide you another exam of your claim, ABSOLUTELY FREE! 
You can reach us at any of the email addresses listed below. 
EMAIL: 
examsoon(at)hotmail.Com 
Examsoon.com 
The World Renowned  IT Certification Material Provider