What is the HPE7-A02 exam and what certification does it earn?

The HPE7-A02 exam is the HPE Aruba Networking Certified Network Security Professional exam. Passing it earns the HPE Aruba Networking Certified Professional - Network Security (ACP-NS) certification. This is an intermediate-level certification that validates skills in implementing Zero Trust Security, configuring ClearPass solutions for wired and wireless authentication, endpoint classification using ClearPass Device Insight, and threat detection on Aruba network infrastructure.

How many questions are on the HPE7-A02 exam and what is the passing score?

The HPE7-A02 exam contains 70 questions and must be completed within 105 minutes (1 hour 45 minutes). The passing score is 67%. The exam consists of Multiple Choice and Multiple Response question types. No reference materials are allowed during the exam, and the exam may contain beta test items for experimental purposes.

How much does the HPE7-A02 exam cost and where can I take it?

The HPE7-A02 exam costs $350 USD in developed countries and $195 USD in emerging countries. Exam vouchers are available for $195 USD with 12-month validity. The exam is delivered through Pearson VUE testing centers or via OnVUE online proctoring from your home or office. Register at pearsonvue.com/hpe. The exam is available in English, Japanese, and Latin American Spanish.

What are the prerequisites for the HPE7-A02 exam?

There are no mandatory prerequisites for the HPE7-A02 exam. However, HPE recommends 2-3 years of networking experience with at least 1 year focused on security. The associated training course is 'Implementing HPE Aruba Networking Security, Rev. 24.41' (Course ID: 0001210365), a 5-day instructor-led or virtual course. The official study guide by Miriam Allred (670 pages, Second Edition, HPE Press) is also highly recommended.

What topics are covered on the HPE7-A02 exam?

The HPE7-A02 exam covers 10 domains across three NICE Workforce Framework categories. The largest domain is Define Security Terminology (26%), covering PKI, Zero Trust Security, WIPS/WIDS, dynamic segmentation, VPN/IPsec, and profiling. Secure Wired AOS-CX (19%) covers 802.1X, dynamic segmentation deployment, and certificate-based authentication. Secure WLAN (12%) covers AAA, firewall policies, and rogue AP detection. Other domains include Threat Detection (9%), Endpoint Classification (8% deplo

What is the official study guide for the HPE7-A02 exam?

The official study guide is 'HPE Aruba Networking Certified Network Security Professional, Second Edition (HPE7-A02)' by Miriam Allred, published by HPE Press on January 14, 2025. It is 670 pages and covers all exam topics including ClearPass configuration, wired and wireless user authentication, Security Service Edge (SSE) for remote users, ClearPass Device Insight, advanced role mapping and enforcement policies, and threat detection. It is available as hardcover ($70), eBook ($60), and Kindle

What is the difference between HPE6-A83 and HPE7-A02?

HPE7-A02 replaces the older HPE6-A83 (Aruba Certified Network Security Professional) exam. HPE7-A02 is the current, active exam that earns the ACP-NS certification. The updated exam reflects the rebranding from 'Aruba' to 'HPE Aruba Networking' and includes updated content covering the latest HPE Aruba Networking technologies. The study guide was updated to the Second Edition (January 2025) and the training course was revised (Rev. 24.41) to align with HPE7-A02.

How do I prepare for the HPE7-A02 exam effectively?

To prepare effectively for HPE7-A02, focus on the two heaviest domains: Define Security Terminology (26%) and Secure Wired AOS-CX (19%), which together make up 45% of the exam. Complete the 5-day Implementing HPE Aruba Networking Security course. Study the official Second Edition study guide. Gain hands-on experience with ClearPass Policy Manager and ClearPass Device Insight. Practice 802.1X authentication configuration for both wired and wireless, dynamic segmentation on AOS-CX, VPN/IPsec conce

What HPE Aruba Networking products should I know for the HPE7-A02 exam?

Key products for the HPE7-A02 exam include: ClearPass Policy Manager (CPPM) for AAA and policy enforcement, ClearPass Device Insight (CPDI) for AI/ML device classification, AOS-CX switches for wired network security, Aruba 9x00 Series gateways for firewall/VPN/WIPS, Aruba Central for cloud management and alerting, Network Analytic Engine (NAE) for AOS-CX monitoring, VIA (Virtual Intranet Access) for remote VPN, Aruba SD-Branch for WAN automation, Policy Enforcement Firewall (PEF), OnGuard for en

What certification path does HPE7-A02 fit into?

HPE7-A02 earns the ACP-NS (Professional level) certification in the HPE Aruba Networking Network Security track. The recommended foundation is HPE6-A85 (Associate - Campus Access). After ACP-NS, the next level is the HPE Aruba Networking Certified Expert - Network Security, which requires passing both HPE7-A10 (written exam) and HPE4-A50 (practical exam). Related Professional certifications in other tracks include HPE7-A01 (Campus Access) and HPE7-A03 (Network Architect).

HPE7-A02 Practice Test with 153 Questions (2026)

Why Study with PlanetCert?

The Latest Questions

Practice questions and exam topics aligned with the current exam objectives.

Detailed Explanations

Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.

AI-Powered Insights

Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.

Exam Information

Official specifications published by Aruba

Exam Format

Duration105 min

Questions70

Passing Score67%

LevelProfessional

Registration

DeliveryPearson VUE or online proctoring

Validity

Valid For3 years

RecertificationPass the current version of this exam; Pass a higher-level HPE Aruba Networking certification exam; Earn continuing education credits as per HPE policy

HPE7-A02 Exam Topics and Domains

HPE7-A02 is organized into 10 weighted domains. Expect to work with ClearPass Policy Manager, Aruba Central, ClearPass Device Insight, ClearPass Device Insight (CPDI), and more.

Define Security Terminology

26%

Describe PKI Dependencies

Public Key Infrastructure (PKI) ComponentsCertificate Revocation and Validation

Objectives

Describe PKI dependencies including certificate authorities, certificate chains, and certificate revocation
Explain how PKI supports secure communication and authentication in HPE Aruba Networking environments

Mitigate Threats by Using CPDI to Identify Traffic Flows and Apply Tags, and CPPM to Take Actions Based on Tags

ClearPass Device Insight Traffic Flow IdentificationTagging Mechanisms and Tag-Based Policy Enforcement

Objectives

Explain how to mitigate threats using CPDI to identify traffic flows and apply tags
Describe how CPPM takes actions based on CPDI tags for automated threat response

Explain the Methods and Benefits of Profiling

Device Profiling TechniquesBenefits of Profiling for Network Security

Objectives

Explain the methods of profiling including active and passive techniques
Describe the benefits of profiling for network security and device visibility

Explain How Aruba Solutions Apply to Different Security Vectors

Network Security Stack ComponentsSecurity Architecture Design with Aruba Products

Objectives

Explain how HPE Aruba Networking solutions map to different security vectors
Describe the defense-in-depth strategy achievable with Aruba products

Explain Zero Trust Security with Aruba Solutions

Zero Trust Security PrinciplesAruba Zero Trust Security Implementations

Objectives

Explain Zero Trust Security principles and framework
Describe how HPE Aruba Networking solutions implement ZTS across the network

Explain WIPS and WIDS, as Well as Describe the Aruba 9x00 Series

Wireless Intrusion Prevention and Detection SystemsAruba 9x00 Series Gateway Features

Objectives

Explain WIPS and WIDS concepts, capabilities, and differences
Describe the Aruba 9x00 Series gateway features and security capabilities

Describe Log Types and Levels and Use the CPPM Ingress Event Engine to Integrate with 3rd Party Logging Solutions

Syslog Levels and Log TypesCPPM Ingress Event Engine and Third-Party Integration

Objectives

Describe log types and syslog severity levels
Explain how to use the CPPM ingress event engine to integrate with third-party logging solutions

Explain Dynamic Segmentation, Including Its Benefits and Use Cases

Dynamic Segmentation ConceptsDynamic Segmentation Benefits and Use Cases

Objectives

Explain dynamic segmentation concepts, architecture, and implementation
Describe the benefits and typical use cases for dynamic segmentation

Explain VPN Deployment Types and IPsec Concepts Such as Protocols, Algorithms, Certificate-Based Authentication with IKE, and Reauth Intervals

VPN Deployment TypesIPsec Protocols, Algorithms, and IKE

Objectives

Explain VPN deployment types including site-to-site and remote access
Describe IPsec concepts including protocols, algorithms, certificate-based authentication with IKE, and re-authentication intervals

Device Hardening

Set Up Secure Authentication and Authorization of Network Infrastructure Managers

TACACS+ Authorization and Multi-Factor AuthenticationSecure Management Protocols

Objectives

Set up secure authentication and authorization of network infrastructure managers with a focus on TACACS+ authorization and multi-factor authentication

Secure L2 and L3 Protocols, as Well as Other Network Protocols Such as SFTP

Layer 2 Security MechanismsLayer 3 and Network Protocol Security

Objectives

Secure Layer 2 and Layer 3 protocols on AOS-CX switches
Implement secure network protocols such as SFTP, SNMPv3, and NTP authentication

Secure WLAN

12%

Deploy AAA for WLANs with ClearPass Policy Manager (CPPM)

RADIUS and 802.1X Authentication for WLANsRole Derivation, Enforcement, and Fallback Mechanisms

Objectives

Deploy AAA for WLANs using ClearPass Policy Manager including 802.1X, MAC-Auth, and captive portal

Define and Apply Advanced Firewall Policies (appRF, PEF, WIPS, WebCC, UTM)

Application Recognition and Policy Enforcement FirewallWIPS, WebCC, and UTM Integration

Objectives

Define and apply advanced firewall policies including appRF, PEF, WIPS, WebCC, and UTM

Set Up Integration Between the Aruba Infrastructure and CPPM, Allowing CPPM to Take Action in Response to Events

RADIUS CoA, Disconnect Messages, and Event-Driven Enforcement

Objectives

Set up integration between Aruba infrastructure and CPPM allowing CPPM to take action in response to events via CoA and event-driven workflows

Configure Rogue AP Detection and Mitigation

Rogue AP Classification and Containment

Objectives

Configure rogue AP detection and mitigation using WIPS policies and classification rules

Secure Wired AOS-CX

19%

Deploy AAA for Wired Devices with CPPM

RADIUS and 802.1X for Wired NetworksMAC Authentication and Failure Scenarios

Objectives

Deploy AAA for wired devices using CPPM including 802.1X and MAC authentication on AOS-CX switches

Configure 802.1X Authentication for AP

Access Point 802.1X Supplicant Configuration

Objectives

Configure 802.1X authentication for access points as supplicants on the wired network

Deploy Dynamic Segmentation

Dynamic Segmentation on AOS-CX

Objectives

Deploy dynamic segmentation on AOS-CX switches including User-Based Tunneling and role assignment

Deploy Certificate-Based Authentication for Users and Devices

Certificate Enrollment and EAP-TLS ConfigurationMachine, User, and Combined Authentication

Objectives

Deploy certificate-based authentication for users and devices including EAP-TLS and TEAP configuration

Set Up Integration Between the Aruba Infrastructure and CPPM, Allowing CPPM to Take Action in Response to Events

RADIUS CoA and Event-Driven Enforcement on Wired Networks

Objectives

Set up integration between AOS-CX infrastructure and CPPM for event-driven actions on wired ports

Secure the WAN

Understand That Aruba SD-Branch Automates VPN Deployment for the WAN

Aruba SD-Branch Architecture

Objectives

Understand how Aruba SD-Branch automates VPN deployment for the WAN

Design and Deploy Remote VPN with VIA

VIA Client Deployment and Configuration

Objectives

Design and deploy remote VPN with VIA including split-tunnel, full-tunnel, and per-app VPN configurations

Endpoint Classification (Deploy and Define)

Deploy and Apply Endpoint Classification to the Device

Endpoint Classification Deployment

Objectives

Deploy and apply endpoint classification to devices using ClearPass

Define Endpoint Classification Methodology Using Active and Passive Methods

Active and Passive Classification Methods

Objectives

Define endpoint classification methodology using active and passive methods

Define, Deploy, and Integrate ClearPass and CPDI

ClearPass Device Insight Integration

Objectives

Define, deploy, and integrate ClearPass Policy Manager and ClearPass Device Insight

Threat Detection

Investigate Central Alerts

Aruba Central Alert Investigation

Objectives

Investigate security alerts in Aruba Central including IDS/IPS alerts

Interpret Packet Captures

Packet Capture Analysis for Security

Objectives

Interpret packet captures to identify security events and malicious traffic patterns

Recommend Action Based on the Analysis of the Central Alerts

Incident Response and Remediation Recommendations

Objectives

Recommend appropriate actions based on analysis of Aruba Central alerts

Evaluate Endpoint Posture

Endpoint Posture Assessment

Objectives

Evaluate endpoint posture using ClearPass OnGuard and posture assessment policies

Troubleshooting

Deploy and Analyze Network Analytic Engine (NAE) Scripts for Monitoring and Correlation

NAE Architecture and Script Deployment

Objectives

Deploy and analyze Network Analytic Engine (NAE) scripts for monitoring and correlation on AOS-CX

Perform Packet Capture on Aruba Infrastructure Locally and Using Central

Local and Remote Packet Capture

Objectives

Perform packet capture on Aruba infrastructure locally and using Aruba Central

Endpoint Classification (Analyze)

Analyze Endpoint Classification Data to Identify Risk

Risk Identification from Classification Data

Objectives

Analyze endpoint classification data to identify risk and suspicious devices

Analyze Endpoint Classification Data on CPDI

CPDI Data Analysis and Reporting

Objectives

Analyze endpoint classification data on ClearPass Device Insight including dashboard navigation, tag management, and reporting

Forensics

Explain CPDI Capabilities for Showing Network Conversations on Supported Aruba Devices

CPDI Network Conversation Visibility

Objectives

Explain CPDI capabilities for showing network conversations on supported Aruba devices for forensic investigation

How do I earn this certification?

Passing HPE7-A02 earns the HPE Aruba Networking Certified Professional - Network Security (ACP-NS) certification. It sits in the Network Security track.

Current Level Exams

Next Level Options

HPE7-A10 - HPE Aruba Networking Certified Expert - Network Security (Written)Both HPE7-A10 and HPE4-A50 required for Expert certification
HPE4-A50 - HPE Aruba Networking Certified Expert - Network Security (Practical)Hands-on practical exam required alongside HPE7-A10

Alternative Paths

HPE7-A01 - HPE Aruba Networking Certified Professional - Campus Access (ACP)Complementary campus networking skills for security professionals
HPE7-A07 - HPE Aruba Networking Certified Expert - Campus Access MobilityExpert-level wireless and mobility expertise
HPE7-A09 - HPE Aruba Networking Certified Expert - SwitchingExpert-level switching knowledge to complement security

Practice with Precision

The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.

Launch Simulator

How to study for this exam?

The most effective way to prepare for HPE7-A02 is by using the PlanetCert Simulator to practice questions and review detailed explanations.

What's changed on this exam?

Current Status

ACTIVE
Last content update: 2024-10-15

Updates

Security Service Edge (SSE) New topic area covering remote user authentication via SSE in addition to traditional VIA VPN
ClearPass Device Insight (CPDI) Core topic spanning three domains: Define Security Terminology, Endpoint Classification (Deploy), and Endpoint Classification (Analyze)
TEAP (Tunneled EAP) Tested in Domain 4 (Secure Wired AOS-CX) as part of certificate-based authentication

Who should take this exam?

Recommended Preparation

2-3 years networking experience with 1-year security focus
Familiarity with HPE Aruba Networking solutions
Experience with ClearPass Policy Manager and ClearPass Device Insight
Understanding of 802.1X, RADIUS, and network access control concepts

Why Study with PlanetCert?

The Latest Questions

Detailed Explanations

AI-Powered Insights

Exam Information

Exam Format

Registration

Validity

Define Security Terminology

Describe PKI Dependencies

Mitigate Threats by Using CPDI to Identify Traffic Flows and Apply Tags, and CPPM to Take Actions Based on Tags

Explain the Methods and Benefits of Profiling

Explain How Aruba Solutions Apply to Different Security Vectors

Explain Zero Trust Security with Aruba Solutions

Explain WIPS and WIDS, as Well as Describe the Aruba 9x00 Series

Describe Log Types and Levels and Use the CPPM Ingress Event Engine to Integrate with 3rd Party Logging Solutions

Explain Dynamic Segmentation, Including Its Benefits and Use Cases

Explain VPN Deployment Types and IPsec Concepts Such as Protocols, Algorithms, Certificate-Based Authentication with IKE, and Reauth Intervals

Device Hardening

Set Up Secure Authentication and Authorization of Network Infrastructure Managers

Secure L2 and L3 Protocols, as Well as Other Network Protocols Such as SFTP

Secure WLAN

Deploy AAA for WLANs with ClearPass Policy Manager (CPPM)

Define and Apply Advanced Firewall Policies (appRF, PEF, WIPS, WebCC, UTM)

Set Up Integration Between the Aruba Infrastructure and CPPM, Allowing CPPM to Take Action in Response to Events

Configure Rogue AP Detection and Mitigation

Secure Wired AOS-CX

Deploy AAA for Wired Devices with CPPM

Configure 802.1X Authentication for AP

Deploy Dynamic Segmentation

Deploy Certificate-Based Authentication for Users and Devices

Set Up Integration Between the Aruba Infrastructure and CPPM, Allowing CPPM to Take Action in Response to Events

Secure the WAN

Understand That Aruba SD-Branch Automates VPN Deployment for the WAN

Design and Deploy Remote VPN with VIA

Endpoint Classification (Deploy and Define)

Deploy and Apply Endpoint Classification to the Device

Define Endpoint Classification Methodology Using Active and Passive Methods

Define, Deploy, and Integrate ClearPass and CPDI

Threat Detection

Investigate Central Alerts

Interpret Packet Captures

Recommend Action Based on the Analysis of the Central Alerts

Evaluate Endpoint Posture

Troubleshooting

Deploy and Analyze Network Analytic Engine (NAE) Scripts for Monitoring and Correlation

Perform Packet Capture on Aruba Infrastructure Locally and Using Central

Endpoint Classification (Analyze)

Analyze Endpoint Classification Data to Identify Risk

Analyze Endpoint Classification Data on CPDI

Forensics

Explain CPDI Capabilities for Showing Network Conversations on Supported Aruba Devices

Practice with Precision

Related practice tests

Your Complete Exam Solution

Best-In-Class Practice Tests

Topical Breakdown

Flashcard Mode

See How You Compare Against Yourself

Other Exam Prep

PlanetCert

Study Naturally, Study Responsibly

Common Questions

Student Reviews