Authentic HPE6-A78 Dumps With 100% Passing Rate Practice Tests Dumps
HP HPE6-A78 Real Exam Questions Guaranteed Updated Dump from PrepPDF
NEW QUESTION 21
What is a correct guideline for the management protocols that you should use on ArubaOS-Switches?
- A. Disable HTTPS and use SSH instead
- B. Disable Telnet and use TFTP instead.
- C. Disable Telnet and use SSH instead
- D. Disable SSH and use https instead.
Answer: D
NEW QUESTION 22
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?
- A. The AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately
- B. The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.
- C. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue
- D. The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue
Answer: B
NEW QUESTION 23
What are some functions of an AruDaOS user role?
- A. The role determines which authentication methods the user must pass to gain network access
- B. The role determines which control plane ACL rules apply to the client's traffic
- C. The role determines which wireless networks (SSiDs) a user is permitted to access
- D. The role determines which firewall policies and bandwidth contract apply to the clients traffic
Answer: A
NEW QUESTION 24
Refer to the exhibit.
This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?
- A. Clear the MSCHAP check box
- B. Change the local user role to read-only
- C. Disable local authentication
- D. Change the default role to "guest-provisioning"
Answer: D
NEW QUESTION 25
What is one way that Control Plane Security (CPsec) enhances security for me network?
- A. It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.
- B. It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).
- C. It protects wireless clients' traffic tunneled between APs and Mobility Controllers, from eavesdropping
- D. It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs") control plane.
Answer: C
NEW QUESTION 26
What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?
- A. WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.
- B. WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password
- C. WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters
- D. WPA3-Personal is more complicated to deploy because it requires a backend authentication server
Answer: B
NEW QUESTION 27
What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?
- A. The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.
- B. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.
- C. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.
- D. The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.
Answer: C
NEW QUESTION 28
Refer to the exhibit.
This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP What Is the proper way to configure the switches to meet these requirements?
- A. On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network
- B. On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.
- C. On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection
- D. On Switch-2, make ports connected to employee devices trusted ports for ARP protection
Answer: A
NEW QUESTION 29
What is a benefit of deploying Aruba ClearPass Device insight?
- A. visibility into devices' 802.1X supplicant settings and automated certificate deployment
- B. Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining
- C. Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers
- D. Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)
Answer: A
NEW QUESTION 30
Which is a correct description of a stage in the Lockheed Martin kill chain?
- A. In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.
- B. In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.
- C. In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.
- D. In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.
Answer: B
NEW QUESTION 31
Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?
- A. the confidence level
- B. the detecting devices
- C. the match method
- D. the match type
Answer: C
NEW QUESTION 32
What is one of the roles of the network access server (NAS) in the AAA framewonx?
- A. It determines which resources authenticated users are allowed to access and monitors each users session
- B. It negotiates with each user's device to determine which EAP method is used for authentication
- C. It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.
- D. It enforces access to network services and sends accounting information to the AAA server
Answer: C
NEW QUESTION 33
An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?
- A. DHCP, DNS and RADIUS only
- B. EAP only
- C. RADIUS only
- D. DHCP, DNS, and EAP only
Answer: B
NEW QUESTION 34
What is a benefit of Opportunistic Wireless Encryption (OWE)?
- A. It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN
- B. It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks
- C. It offers more control over who can connect to the wireless network when compared with WPA2-Personal
- D. It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network
Answer: D
NEW QUESTION 35
What is symmetric encryption?
- A. It uses the same key to encrypt plaintext as to decrypt ciphertext.
- B. It simultaneously creates ciphertext and a same-size MAC.
- C. It any form of encryption mat ensures that thee ciphertext Is the same length as the plaintext.
- D. It uses a Key that is double the size of the message which it encrypts.
Answer: A
NEW QUESTION 36
How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?
- A. The firewall applies thee rules in policies associated with the client's user role.
- B. The firewall applies every rule that includes the dent's IP address as the source.
- C. The firewall applies the rules in policies associated with the client's wlan
- D. The firewall applies every rule that includes the client's IP address as the source or destination.
Answer: B
NEW QUESTION 37
What is an example or phishing?
- A. An attacker lures clients to connect to a software-based AP that is using a legitimate SSID.
- B. An attacker sends emails posing as a service team member to get users to disclose their passwords.
- C. An attacker checks a user's password by using trying millions of potential passwords.
- D. An attacker sends TCP messages to many different ports to discover which ports are open.
Answer: B
NEW QUESTION 38
A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user's Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC's) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?
- A. the RADIUS events within the CPPM Event Viewer
- B. the reports generated by Aruba ClearPass Insight
- C. the packets captured on the MC control plane destined to UDP 1812
- D. the Alerts tab in the authentication record in CPPM Access Tracker
Answer: D
NEW QUESTION 39
Refer to the exhibit.
Device A is establishing an HTTPS session with the Arubapedia web sue using Chrome. The Arubapedia web server sends the certificate shown in the exhibit What does the browser do as part of vacating the web server certificate?
- A. It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate's signature.
- B. It uses the public key in the DigCert root CA certificate to check the certificate signature
- C. It uses the private key in the Arubapedia web site's certificate to check that certificate's signature
- D. It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate's signature.
Answer: D
NEW QUESTION 40
You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?
- A. Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.
- B. Verify that you are logged in to the CPPM Ul with read-write, not read-only, access
- C. Click Edit in Access viewer and make sure that the correct servers are selected.
- D. Make sure that CPPM cluster settings are configured to show Access-Rejects
Answer: D
NEW QUESTION 41
What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?
- A. It resides in the cloud and manages licensing and configuration for Collectors
- B. It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors
- C. It resides on-prem and is responsible for running active SNMP and Nmap scans
- D. It resides on-prem and provides the span port to which traffic is mirrored for deep analytics.
Answer: B
NEW QUESTION 42
Refer to the exhibit.
You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?
- A. Configure the switch to listen for these protocols on OOBM only.
- B. Specify vlan 100 as the management vlan for the switches.
- C. Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.
- D. Specify 192.168.1.0.255.255.255.0 as authorized IP manager address
Answer: C
NEW QUESTION 43
Refer to the exhibit, which shows the current network topology.
You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?
- A. Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.
- B. Assign the WLAN to a single new VLAN which is dedicated to wireless users
- C. Use wireless user roles to assign the devices to a range of new vlan IDs.
- D. Use wireless user roles to assign the devices to different VLANs in the 100-150 range
Answer: D
NEW QUESTION 44
What is a Key feature of me ArubaOS firewall?
- A. The firewall Includes application layer gateways (ALGs). which it uses to filter Web traffic based on the reputation of the destination web site.
- B. The firewall is stateful which means that n can track client sessions and automatically allow return traffic for permitted sessions
- C. The firewall examines all traffic at Layer 2 through Layer 4 and uses source IP addresses as the primary way to determine how to control traffic.
- D. The firewall is designed to fitter traffic primarily based on wireless 802.11 headers, making it ideal for mobility environments
Answer: A
NEW QUESTION 45
......
Verified Pass HPE6-A78 Exam in First Attempt Guaranteed: https://www.preppdf.com/HP/HPE6-A78-prepaway-exam-dumps.html
Free HPE6-A78 Sample Questions and 100% Cover Real Exam Questions: https://drive.google.com/open?id=1zGlCGMkIQR-WJ4GPQ1y5iZPkf7FVADc3