HP HP2-N29 Online Practice Questions and Exam Preparation

HP HP2-N29 Online Questions & Answers

• Question 1:

  What does the typical SYN flood attack involve?

  A. data center humidity errors
  B. an attacker sending many spoofed TCP SYN packets
  C. congestion from the inspection segment
  D. interface errors that result in congestion
  B. an attacker sending many spoofed TCP SYN packets

  ---

  The Advanced DDoS system provides the following types of protection:

  SYN Proxy -- Protects against SYN floods of the system. An attacker floods a server with malicious connection requests (TCP SYNs) with spoofed source IP addresses, preventing legitimate clients from accessing the server.

  Reference:

  http://h20000.www2.hp.com/bc/docs/support/SupportManual/c02586208/c02586208.pdf?ju mpid=reg_R1002_USEN (page 235)

• Question 2:

  Which log are blocked attack event notifications sent to?

  A. Denied Log
  B. Block Log
  C. Audit Log
  D. System Log
  B. Block Log

  ---

  The IPS Block log documents packets that trigger IPS filters configured with any action that includes a Block + Notify or Block + Notify + Trace action, including Quarantine and TCP Reset action sets. Reference: http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf (page 66)

• Question 3:

  What is the default user access granted when creating a new local user on the IPS?

  A. Operator
  B. SuperUser
  C. Undefined
  D. Administrator
  B. SuperUser

  ---

  A user, who sets up and performs the first-time initialization of the module, is implicitly assigned a Super-User Crypto-Officer role. Reference: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1545.pdf (page 14, Roles)

• Question 4:

  How does HP TippingPoint provide filter updates?

  A. TippingPoint Operating System
  B. IGRP
  C. Digital vaccine
  D. Hot Patch Install
  C. Digital vaccine

  ---

  Digital Vaccine filters

  Using HP TippingPoint's Threat Management Center (TMC), the DVLabs team continually searches for emerging vulnerabilities and develops new attack filters to block network attacks. Filter updates provide rapid inoculation against

  emerging threats. Digital Vaccine filters are delivered at least once per week or on a prioritized basis as critical vulnerabilities are identified; filters can be deployed automatically with no user interaction required. Reference: http://

  www.ndm.net/ips/pdf/hptippingpoint/4AA3-3612ENW.pdf (Digital Vaccine filters)

• Question 5:

  The Digital Vaccine is a container consisting of what?

  A. filters organized into 15 categories
  B. filters organized into 12 categories
  C. the Virus Vaccine policy
  D. the Anti-Virus definitions
  A. filters organized into 15 categories

• Question 6:

  What does "SMS" stand for?

  A. System Management Solution
  B. Safe Management System
  C. Security Management System
  D. Safety Management System
  C. Security Management System

  ---

  SMS stands for the Security Management System, which is a central management point for managing different TippingPoint appliances, monitoring events and scheduling reports. Reference: http://csrc.nist.gov/groups/STM/cmvp/documents/1401/140sp/140sp1545.pdf

• Question 7:

  What purpose does the Multi Device Edit function serve?

  A. allows limited configuration changes to multiple IPS devices
  B. provides the same functionality as the device configuration dialog
  C. is required for custom filter implementation
  D. exposes the Multi Device WYSIWYG
  B. provides the same functionality as the device configuration dialog

• Question 8:

  On the IPS, what is a Physical Segment consisted of?

  A. a single inspection port
  B. the serial console interface
  C. the management interface
  D. a pair of network ports
  D. a pair of network ports

  ---

  A physical segment comprises a group of hosts protected by IPS through a pair of physical ports on an IPS device. You can configure traffic management and DDoS filters using physical segments. Reference: http://www.nfwest.com/tp/docs/techd293-tos3-1_ug.pdf (page 165)d

• Question 9:

  What are the types of user roles on an HP TippingPoint IPS? (Select three.)

  A. SuperUser
  B. Administrator
  C. PowerUser
  D. Filter Admin
  E. Operator
  A. SuperUser
  B. Administrator
  E. Operator

  ---

  Reference: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1545.pdf (page 14)

• Question 10:

  Which log can only be accessed by a user with an IPS SuperUser role?

  A. Audit
  B. Permit
  C. Block
  D. Action
  A. Audit