[Jan 07, 2024] HPE6-A78 PDF Recently Updated Questions Dumps to Improve Exam Score
HPE6-A78 Dumps Full Questions with Free PDF Questions to Pass
NEW QUESTION # 16
Refer to the exhibit.
This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?
- A. Clear the MSCHAP check box
- B. Change the local user role to read-only
- C. Change the default role to "guest-provisioning"
- D. Disable local authentication
Answer: C
NEW QUESTION # 17
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?
- A. The AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately
- B. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue
- C. The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.
- D. The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue
Answer: C
NEW QUESTION # 18
You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?
- A. Verify that you are logged in to the CPPM Ul with read-write, not read-only, access
- B. Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.
- C. Make sure that CPPM cluster settings are configured to show Access-Rejects
- D. Click Edit in Access viewer and make sure that the correct servers are selected.
Answer: C
NEW QUESTION # 19
Refer to the exhibit.
You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?
- A. Specify vlan 100 as the management vlan for the switches.
- B. Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.
- C. Configure the switch to listen for these protocols on OOBM only.
- D. Specify 192.168.1.0.255.255.255.0 as authorized IP manager address
Answer: B
NEW QUESTION # 20
Refer to the exhibit.
You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?
- A. that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized
- B. that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM
- C. that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM
- D. that the MC has valid admin credentials configured on it for logging into the CPPM
Answer: B
NEW QUESTION # 21
You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.
What is a good next step for troubleshooting?
- A. Check connectivity between CPPM and a backend directory server
- B. Renew CPPM's RADIUS/EAP certificate
- C. Check CPPM Event viewer.
- D. Reset the user credentials
Answer: C
NEW QUESTION # 22
What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?
- A. EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.
- B. EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.
- C. EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.
- D. EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process
Answer: C
NEW QUESTION # 23
What is a guideline for managing local certificates on an ArubaOS-Switch?
- A. Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate
- B. Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.
- C. Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install
- D. Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.
Answer: B
NEW QUESTION # 24
A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user's Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC's) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?
- A. the RADIUS events within the CPPM Event Viewer
- B. the packets captured on the MC control plane destined to UDP 1812
- C. the reports generated by Aruba ClearPass Insight
- D. the Alerts tab in the authentication record in CPPM Access Tracker
Answer: D
NEW QUESTION # 25
What is a benefit of Opportunistic Wireless Encryption (OWE)?
- A. It offers more control over who can connect to the wireless network when compared with WPA2-Personal
- B. It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks
- C. It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN
- D. It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network
Answer: D
NEW QUESTION # 26
Which is a correct description of a stage in the Lockheed Martin kill chain?
- A. In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.
- B. In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.
- C. In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.
- D. In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.
Answer: D
NEW QUESTION # 27
Refer to the exhibit.
You have set up a RADIUS server on an ArubaOS Mobility Controller (MC) when you created a WLAN named "MyEmployees .You now want to enable the MC to accept change of authorization (CoA) messages from this server for wireless sessions on this WLAN.
What Is a part of the setup on the MC?
- A. Enable the dynamic authorization setting in the "clearpass" authentication server settings.
- B. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.
- C. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.
- D. Configure a ClearPass username and password in the MyEmployees AAA profile.
Answer: B
NEW QUESTION # 28
What is a benefit of deploying Aruba ClearPass Device insight?
- A. visibility into devices' 802.1X supplicant settings and automated certificate deployment
- B. Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers
- C. Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)
- D. Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining
Answer: A
NEW QUESTION # 29
You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP
- A. Avoid using external manager authentication tor the Web UI.
- B. Change the default 4343 port tor the web UI to TCP 443.
- C. Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.
- D. Install a CA-signed certificate to use for the Web UI server certificate.
Answer: D
NEW QUESTION # 30
What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?
- A. In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate
- B. In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.
- C. In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.
- D. In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.
Answer: D
NEW QUESTION # 31
What is one of the roles of the network access server (NAS) in the AAA framewonx?
- A. It enforces access to network services and sends accounting information to the AAA server
- B. It negotiates with each user's device to determine which EAP method is used for authentication
- C. It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.
- D. It determines which resources authenticated users are allowed to access and monitors each users session
Answer: C
NEW QUESTION # 32
You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)
- A. Clients are configured to use a mismatched EAP method from the one In the CPPM service.
- B. The RADIUS shared secret does not match between the switch and CPPM.
- C. users are logging in with the wrong usernames and passwords or invalid certificates.
- D. Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.
- E. CPPM does not have a network device defined for the switch's IP address.
Answer: C,D
NEW QUESTION # 33
What is an Authorized client as defined by ArubaOS Wireless Intrusion Prevention System (WIP)?
- A. a client that is not on the WIP blacklist
- B. a client that has successfully authenticated to an authorized AP and passed encrypted traffic
- C. a client that has a certificate issued by a trusted Certification Authority (CA)
- D. a client that is on the WIP whitelist.
Answer: B
NEW QUESTION # 34
A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps.
What is one benefit of adding Aruba Airwave from the perspective of forensics?
- A. Airwave can provide more advanced authentication and access control services for the AmbaOS solution
- B. Airwave retains information about the network for much longer periods than ArubaOS solution
- C. AirWave enables low level debugging on the devices across the ArubaOS solution
- D. Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution
Answer: D
NEW QUESTION # 35
You have an Aruba Mobility Controller (MC). for which you are already using Aruba ClearPass Policy Manager (CPPM) to authenticate access to the Web Ul with usernames and passwords You now want to enable managers to use certificates to log in to the Web Ul CPPM will continue to act as the external server to check the names in managers' certificates and tell the MC the managers' correct rote in addition to enabling certificate authentication. what is a step that you should complete on the MC?
- A. Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication
- B. Verify that the MC trusts CPPM's HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC
- C. install all of the managers' certificates on the MC as OCSP Responder certificates
- D. Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM
Answer: D
NEW QUESTION # 36
Refer to the exhibit.
A diem is connected to an ArubaOS Mobility Controller. The exhibit snows all Tour firewall rules that apply to this diem What correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall
10.1 10.10
203.0.13.5
- A. It drops both of the packets
- B. it permits both of the packets
- C. It drops the packet to 10.1.10.10 and permits the packet to 203.0.13.5.
- D. It permits the packet to 10.1.10.10 and drops the packet to 203 0.13.5
Answer: B
NEW QUESTION # 37
You are managing an Aruba Mobility Controller (MC). What is a reason for adding a "Log Settings" definition in the ArubaOS Diagnostics > System > Log Settings page?
- A. Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers
- B. Configuring the MC to generate logs for a particular event category and level, but only for a specific user or AP.
- C. Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory
- D. Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level
Answer: D
NEW QUESTION # 38
An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?
- A. DHCP, DNS and RADIUS only
- B. DHCP, DNS, and EAP only
- C. EAP only
- D. RADIUS only
Answer: C
NEW QUESTION # 39
What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?
- A. securing the network infrastructure control plane by creating a virtual out-of-band-management network
- B. enhancing the security of communications from the access layer to the core with data encryption
- C. applying firewall policies and deep packet inspection to wired clients
- D. simplifying network infrastructure management by using the MC to push configurations to the switches
Answer: C
NEW QUESTION # 40
......
100% Updated HP HPE6-A78 Enterprise PDF Dumps: https://validdumps.free4torrent.com/HPE6-A78-valid-dumps-torrent.html