HPE6-A78 Online Practice Questions and Answers

A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.

What are the licensing requirements for the MC?

A. one AP license per-switch

B. one PEF license per-switch

C. one PEF license per-switch. and one WCC license per-switch

D. one AP license per-switch. and one PEF license per-switch

What is a benefit of deploying Aruba ClearPass Device insight?

A. Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)

B. visibility into devices' 802.1X supplicant settings and automated certificate deployment

C. Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining

D. Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

What are the roles of 802.1X authenticators and authentication servers?

A. The authenticator stores the user account database, while the server stores access policies.

B. The authenticator supports only EAP, while the authentication server supports only RADIUS.

C. The authenticator is a RADIUS client and the authentication server is a RADIUS server.

D. The authenticator makes access decisions and the server communicates them to the supplicant.

A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution.

What should you do to configure the infrastructure to support the scans?

A. Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

B. Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

C. Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.

D. Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

What is a vulnerability of an unauthenticated Dime-Heliman exchange?

A. A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

B. A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

C. Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

D. Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

A. The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

B. The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

C. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

D. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

What is one practice that can help you to maintain a digital chain or custody In your network?

A. Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

B. Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

C. Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

D. Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs

Which setting should you change to follow Aruba best security practices?

A. Change the local user role to read-only

B. Clear the MSCHAP check box

C. Disable local authentication

D. Change the default role to "guest-provisioning"

How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

A. The firewall applies every rule that includes the dent's IP address as the source

B. The firewall applies the rules in policies associated with the client's wlan

C. The firewall applies thee rules in policies associated with the client's user role

D. The firewall applies every rule that includes the client's IP address as the source or destination

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

A. it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

B. it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

C. it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

D. it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.