Pass HP HPE6-A78 Exam Quickly With TrainingQuiz [Q37-Q55]

5/5 - (1 vote)

Pass HP HPE6-A78 Exam Quickly With TrainingQuiz

Prepare HPE6-A78 Question Answers – HPE6-A78 Exam Dumps

NEW QUESTION 37
What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

NEW QUESTION 38
A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution What should you do to configure the infrastructure to support the scans?

Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass’s HTTPS certificate

Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM’s IP address.

Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

NEW QUESTION 39
What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

NEW QUESTION 40
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

NEW QUESTION 41
An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?

EAP only

DHCP, DNS and RADIUS only

RADIUS only

DHCP, DNS, and EAP only

NEW QUESTION 42
A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user’s Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC’s) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

the reports generated by Aruba ClearPass Insight

the RADIUS events within the CPPM Event Viewer

the Alerts tab in the authentication record in CPPM Access Tracker

the packets captured on the MC control plane destined to UDP 1812

NEW QUESTION 43
What is a benefit of deploying Aruba ClearPass Device insight?

Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)

visibility into devices’ 802.1X supplicant settings and automated certificate deployment

Agent-based analysts of devices’ security settings and health status, with the ability to implement quarantining

Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

NEW QUESTION 44
You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?

Make sure that CPPM cluster settings are configured to show Access-Rejects

Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

Click Edit in Access viewer and make sure that the correct servers are selected.

Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

NEW QUESTION 45
Refer to the exhibit.

A diem is connected to an ArubaOS Mobility Controller. The exhibit snows all Tour firewall rules that apply to this diem What correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall
10.1 10.10
203.0.13.5

It drops both of the packets

It permits the packet to 10.1.10.10 and drops the packet to 203 0.13.5

it permits both of the packets

It drops the packet to 10.1.10.10 and permits the packet to 203.0.13.5.

NEW QUESTION 46
You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs What is one approach that you can take to find the relevant logs?

Add the “-C and *-c port-access” options to the “show logging” command.

Configure a logging Tiller for the “port-access” category, and apply that filter globally.

Enable debugging for “portaccess” to move the relevant logs to a buffer.

Specify a logging facility that selects for “port-access” messages.

NEW QUESTION 47
What is a guideline for managing local certificates on an ArubaOS-Switch?

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

NEW QUESTION 48
From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

ClearPass Onboard

ClearPass Access Tracker

ClearPass OnGuard

ClearPass Guest

NEW QUESTION 49
Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

Assign the WLAN to a single new VLAN which is dedicated to wireless users

Use wireless user roles to assign the devices to different VLANs in the 100-150 range

Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

Use wireless user roles to assign the devices to a range of new vlan IDs.

NEW QUESTION 50
What is a benefit of Opportunistic Wireless Encryption (OWE)?

It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN

It offers more control over who can connect to the wireless network when compared with WPA2-Personal

It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

NEW QUESTION 51
A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI).
This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?

one AP license per-switch

one PEF license per-switch

one PEF license per-switch. and one WCC license per-switch

one AP license per-switch. and one PEF license per-switch

NEW QUESTION 52
What is one of the roles of the network access server (NAS) in the AAA framewonx?

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

It negotiates with each user’s device to determine which EAP method is used for authentication

It enforces access to network services and sends accounting information to the AAA server

It determines which resources authenticated users are allowed to access and monitors each users session

NEW QUESTION 53
How does the ArubaOS firewall determine which rules to apply to a specific client’s traffic?

The firewall applies every rule that includes the dent’s IP address as the source.

The firewall applies the rules in policies associated with the client’s wlan

The firewall applies thee rules in policies associated with the client’s user role.

The firewall applies every rule that includes the client’s IP address as the source or destination.

NEW QUESTION 54
Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers’ roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

Change the local user role to read-only

Clear the MSCHAP check box

Disable local authentication

Change the default role to “guest-provisioning”

NEW QUESTION 55
What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

Loading …

HP HPE6-A78 Exam Syllabus Topics:

Topic	Details
Topic 1	Compare and contrast wired LAN methodologies Explain the purpose and methods of a packet capture
Topic 2	Disable insecure protocols and follow best practices for implement secure management protocols such as SSH, HTTPS
Topic 3	Compare and contrast wireless LAN methodologies Describe user roles and policy enforcement
Topic 4	Explain common security protocols and their use cases Compare endpoint classifications methods
Topic 5	Identify and evaluate discovered endpoints Describe common security threats
Topic 6	Describe and deploy basic user roles for wireless users Define and deploy basic user roles for wired users
Topic 7	View and acknowledge WIPS and WIDS, alarms Troubleshoot with access tracker