The HP HPE6-A78 Questions & Practice Test are Available On-Demand [Q12-Q32]

Rate this post

The HP HPE6-A78 Questions & Practice Test are Available On-Demand

Valid HPE6-A78 Exam Dumps Ensure you a HIGH SCORE

Q12. Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers’ roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

Change the local user role to read-only

Clear the MSCHAP check box

Disable local authentication

Change the default role to “guest-provisioning”

Q13. You have been instructed to look in the ArubaOS Security Dashboard’s client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers Which client fits this description?

MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering

MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor

MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering

MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

Q14. Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

Q15. What is one way that Control Plane Security (CPsec) enhances security for me network?

It protects wireless clients’ traffic tunneled between APs and Mobility Controllers, from eavesdropping

It prevents Denial of Service (DoS) attacks against Mobility Controllers’ (MCs”) control plane.

It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).

It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

Q16. What is a benefit of Opportunistic Wireless Encryption (OWE)?

It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN

It offers more control over who can connect to the wireless network when compared with WPA2-Personal

It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

Q17. You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)

users are logging in with the wrong usernames and passwords or invalid certificates.

Clients are configured to use a mismatched EAP method from the one In the CPPM service.

The RADIUS shared secret does not match between the switch and CPPM.

CPPM does not have a network device defined for the switch’s IP address.

Clients are not configured to trust the root CA certificate for CPPM’s RADIUS/EAP certificate.

Q18. A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI).
This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?

one AP license per-switch

one PEF license per-switch

one PEF license per-switch. and one WCC license per-switch

one AP license per-switch. and one PEF license per-switch

Q19. A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:

The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

WPA3-Personal and MAC-Auth

Captive portal and WPA3-Personai

Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

Opportunistic Wireless Encryption (OWE) and WPA3-Personal

Q20. How should admins deal with vulnerabilities that they find in their systems?

They should apply fixes, such as patches, to close the vulnerability before a hacker exploits it.

They should add the vulnerability to their Common Vulnerabilities and Exposures (CVE).

They should classify the vulnerability as malware. a DoS attack or a phishing attack.

They should notify the security team as soon as possible that the network has already been breached.

Q21. Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?

that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized

that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM

that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM

that the MC has valid admin credentials configured on it for logging into the CPPM

Q22. What is symmetric encryption?

It simultaneously creates ciphertext and a same-size MAC.

It any form of encryption mat ensures that thee ciphertext Is the same length as the plaintext.

It uses the same key to encrypt plaintext as to decrypt ciphertext.

It uses a Key that is double the size of the message which it encrypts.

Q23. What is a difference between radius and TACACS+?

RADIUS combines the authentication and authorization process while TACACS+ separates them.

RADIUS uses TCP for Its connection protocol, while TACACS+ uses UDP tor its connection protocol.

RADIUS encrypts the complete packet, white TACACS+ only offers partial encryption.

RADIUS uses Attribute Value Pairs (AVPs) in its messages, while TACACS+ does not use them.

Q24. What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

Q25. What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

Q26. You have an Aruba Mobility Controller (MC). for which you are already using Aruba ClearPass Policy Manager (CPPM) to authenticate access to the Web Ul with usernames and passwords You now want to enable managers to use certificates to log in to the Web Ul CPPM will continue to act as the external server to check the names in managers’ certificates and tell the MC the managers’ correct rote in addition to enabling certificate authentication. what is a step that you should complete on the MC?

Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM

install all of the managers’ certificates on the MC as OCSP Responder certificates

Verify that the MC trusts CPPM’s HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC

Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication

Q27. Refer to the exhibit.

How can you use the thumbprint?

Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

Q28. What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.

In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate

Q29. A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user’s Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC’s) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

the reports generated by Aruba ClearPass Insight

the RADIUS events within the CPPM Event Viewer

the Alerts tab in the authentication record in CPPM Access Tracker

the packets captured on the MC control plane destined to UDP 1812

Q30. What is one of the roles of the network access server (NAS) in the AAA framewonx?

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

It negotiates with each user’s device to determine which EAP method is used for authentication

It enforces access to network services and sends accounting information to the AAA server

It determines which resources authenticated users are allowed to access and monitors each users session

Q31. What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Q32. Which attack is an example or social engineering?

An email Is used to impersonate a Dank and trick users into entering their bank login information on a fake website page.

A hacker eavesdrops on insecure communications, such as Remote Desktop Program (RDP). and discovers login credentials.

A user visits a website and downloads a file that contains a worm, which sell-replicates throughout the network.

An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

HPE6-A78 Exam Practice Questions prepared by HP Professionals: https://www.pdf4test.com/HPE6-A78-dump-torrent.html

Free certification test prep

The HP HPE6-A78 Questions & Practice Test are Available On-Demand [Q12-Q32]

Leave a Reply Cancel reply