HP Certified Professional
Securing HP ProCurve Networks
Exam HP0-Y24
Exam Preparation Guide
Purpose
The intent of this guide is to set expectations about the context of the exam and to help candidates prepare for it. Recommended training to prepare for this exam can be found at The Learning Center. It is important to note that
although training is recommended for exam preparation, successful completion of the training alone does not guarantee that you will pass the exam. In
addition to training, exam items are based on knowledge gained from on-the-job experience and application as well as other supplemental reference material that may be specified in this guide.
HP certification
The HP Certified Professional community is a network of qualified HP channel partners, customers, and employees who have taken the courses and studied the associated reference material necessary to pass the certification exams that earn HP Certified Professional credentials. The exams offered through the HP Certified Professional program validate the skills and assure the competency of HP certified professionals. The knowledge and experience required to pass HP certification exams ensure that HP certified professionals are respected and valued throughout the industry.
Audience
This exam is for systems engineers or networking engineers who design complex networks with a focus on security. Examples of job roles include:
5 Reseller and customer network specialists 5 System Engineers
5 Network Engineers
2
Minimum qualifications
To pass this exam, you should have at least1 year of experience in HP ProCurve ProActive Defense Security Solutions using Identity Driven Manager (IDM), Microsoft Network Access Protection (NAP), the ProCurve Threat Management Services zl Module and Network Immunity Manager (NIM) with other 3rd party devices. Exams are based on an assumed level of industry-standard knowledge that may be gained from the training, hands-on
experience, or other pre-requisite events. You should also be knowledgeable about:
5 Installing the TMS application onto a ONE blade that has no products
installed.
5 Enabling/disabling end point integrity integration within IDM. Based on
customer requirements, determine if endpoint integrity is necessary.
5 Installing and configuring NAP Agent and 802.1X supplicant on
Windows Vista client and possibly Windows XP SP3.
5 Running reports to look for alerts, offenders, and false positives
Relevant certifications
After passing this exam, your achievement may be applied toward more than one certification. To determine which certifications will be credited with this achievement, log into The Learning Center and view the certifications listed on the exam’s More Details tab. You may be on your way to achieving additional HP certifications.
Exam details
The following are details about the exam:
5 Number of items: 70
5 Item types: multiple choice and drag-and-drop 5 Exam Time:105 minutes
5 Passing Score: 77%
5 Reference Material: No on-line or hard copy reference material will be
Comments on the exam
4
Exam content
The following testing objectives represent the specific areas of content covered in the exam. Use this outline to guide your study and to check your readiness for the exam. The exam measures your understanding of these areas. Sections/Objectives
26% ProCurve Security Solution
• Select components of a ProActive Defense architecture that are appropriate for various customer environments
• Describe the functional layers of network security including the capabilities of the ProCurve ProActive Defense solution
• Understand when network access control (NAC) with endpoint integrity is appropriate for a specific customer environment.
• Choose the right implementation of the Network Immunity Solution for a given environment
11% Access Control Overview & IDM / Microsoft NAP design scenarios
• Describe ways in which ProCurve Identity Driven Management (IDM) enhances the flexibility and security provided by Microsoft Network Access Protection (NAP)
• Monitor and troubleshoot interactions between NAP client, IDM, and NPS server
• Configure IDM to use endpoint integrity posture generated by Microsoft NAP as selection criteria for authenticated clients, differentiating between compliant and noncompliant endpoints
15% Threat Detection and Response
• Describe the three types of events that can trigger an alert in ProCurve Network Immunity Manager (NIM)
• Make an educated guess about the type of attack that caused NIM’s Network Behavior Anomaly Detection (NBAD) engine to detect a particular anomaly
• Determine which alerts and actions should be used to solve a particular problem
20% ProCurve Threat Management Services zl Module
• Install TMS zl Module into the chassis & Understand the temperature restrictions for slot placement
• Choose the right deployment mode for the TMS module in different environments and for different purposes
• TMS Routing Mode - Configure Firewall Access & NAT Policies, Addresses and Services
12% ProCurve Network Immunity Solution-NIM + IDS
• Set up your third-party IDS to interoperate with NIM
• Plan and create policies that mirror suspicious traffic to an external IDS • Troubleshoot a NIM + IDS deployment
11% Security Policy Management
• Establish your baseline and complete the initial network immunity lifecycle • Use best practices to create policies customized to your environment • Use PCM+ tabs, maps, and reports to audit security vulnerabilities, track
offenders, offline policies, support regulatory compliance 5% End to End Security Solution
6
Training
Recommended training to prepare for this exam is accessible from this exam’s page in The Learning Center. See the exam attachment, Supporting courses, to view and register for the courses.
You are not required to take the associated courses; however, HP strongly recommends that you complete the training and thoroughly review all course materials and documents before taking the exam. Sufficient on-the-job experience may also be required.
Additional study references
This section lists courses and documents that can help you prepare for the exam and acquire the knowledge necessary to achieve the associated
credential. You must also gain the practical experience outlined in this guide.
Please note: The following materials were available when this document was published. Reference materials are continually updated.
Reference Type/ Title Order Number Source Product manuals and other support
documents for NIM, TMS zl, Access Control and IDM
New Product Introduction (NPI) technical trainings on NIM, TMS zl, Access Control and IDM
N/A N/A http://www.procurve.com/cust omercare/index.htm http://www.procurve.com/trai ning/index.htm
Exam registration
To register for this exam, please go to the exam’s description in The Learning Center: http://www.hp.com/go/partnerlearning
