[Apr 07, 2022] HPE6-A78 Exam Dumps PDF Guaranteed Success with Accurate & Updated Questions [Q35-Q51]

4.3/5 - (3 votes)

[Apr 07, 2022] HPE6-A78 Exam Dumps PDF Guaranteed Success with Accurate & Updated Questions

Pass HPE6-A78 Exam – Real Test Engine PDF with 62 Questions

NEW QUESTION 35
What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

NEW QUESTION 36
What are some functions of an AruDaOS user role?

The role determines which authentication methods the user must pass to gain network access

The role determines which firewall policies and bandwidth contract apply to the clients traffic

The role determines which wireless networks (SSiDs) a user is permitted to access

The role determines which control plane ACL rules apply to the client’s traffic

NEW QUESTION 37
What is one of the roles of the network access server (NAS) in the AAA framewonx?

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

It negotiates with each user’s device to determine which EAP method is used for authentication

It enforces access to network services and sends accounting information to the AAA server

It determines which resources authenticated users are allowed to access and monitors each users session

NEW QUESTION 38
Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches’ CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?

Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

Specify 192.168.1.0.255.255.255.0 as authorized IP manager address

Configure the switch to listen for these protocols on OOBM only.

Specify vlan 100 as the management vlan for the switches.

NEW QUESTION 39
What is a benefit or Protected Management Frames (PMF). sometimes called Management Frame Protection (MFP)?

PMF helps to protect APs and MCs from unauthorized management access by hackers.

PMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.

PMF prevents hackers from capturing the traffic between APs and Mobility Controllers.

PMF protects clients from DoS attacks based on forged de-authentication frames

NEW QUESTION 40
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

NEW QUESTION 41
You are managing an Aruba Mobility Controller (MC). What is a reason for adding a “Log Settings” definition in the ArubaOS Diagnostics > System > Log Settings page?

Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level

Configuring the MC to generate logs for a particular event category and level, but only for a specific user or AP.

Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory

Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers

NEW QUESTION 42
You have detected a Rogue AP using the Security Dashboard Which two actions should you take in responding to this event? (Select two)

There is no need to locale the AP If you manually contain It.

This is a serious security event, so you should always contain the AP immediately regardless of your company’s specific policies.

You should receive permission before containing an AP. as this action could have legal Implications.

For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP’s MAC address.

There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.

NEW QUESTION 43
What is one practice that can help you to maintain a digital chain or custody In your network?

Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

NEW QUESTION 44
Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?

that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized

that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM

that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM

that the MC has valid admin credentials configured on it for logging into the CPPM

NEW QUESTION 45
You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC).
What should you do to enhance security for control channel communications between the switches and the MC?

Create one UBT zone for control traffic and a second UBT zone for clients.

Configure a long, random PAPI security key that matches on the switches and the MC.

install certificates on the switches, and make sure that CPsec is enabled on the MC

Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

NEW QUESTION 46
You have an Aruba Mobility Controller (MC). for which you are already using Aruba ClearPass Policy Manager (CPPM) to authenticate access to the Web Ul with usernames and passwords You now want to enable managers to use certificates to log in to the Web Ul CPPM will continue to act as the external server to check the names in managers’ certificates and tell the MC the managers’ correct rote in addition to enabling certificate authentication. what is a step that you should complete on the MC?

Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM

install all of the managers’ certificates on the MC as OCSP Responder certificates

Verify that the MC trusts CPPM’s HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC

Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication

NEW QUESTION 47
What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.

In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate

NEW QUESTION 48
What is a vulnerability of an unauthenticated Dime-Heliman exchange?

A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

NEW QUESTION 49
What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

it examines wireless clients’ probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker’s wireless network instead.

NEW QUESTION 50
A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution What should you do to configure the infrastructure to support the scans?

Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass’s HTTPS certificate

Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM’s IP address.

Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

NEW QUESTION 51
What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?

A DDoS attack originates from external devices, while a DoS attack originates from internal devices

A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device

A DoS attack targets one server, a DDoS attack targets all the clients that use a server

A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

HP HPE6-A78 Exam Syllabus Topics:

Topic	Details
Topic 1	Explain common security protocols and their use cases Compare endpoint classifications methods
Topic 2	Describe and deploy basic user roles for wireless users Define and deploy basic user roles for wired users
Topic 3	Compare and contrast wireless LAN methodologies Describe user roles and policy enforcement
Topic 4	Explain attack stages and kill chain Identify the difference between a threat and a vulnerability
Topic 5	Collect and monitor historical network pattern data Describe firewall (PEF), dynamic segmentation, RBAC, AppRF
Topic 6	Disable insecure protocols and follow best practices for implement secure management protocols such as SSH, HTTPS
Topic 7	View and acknowledge WIPS and WIDS, alarms Troubleshoot with access tracker
Topic 8	Explain social engineering and defense Describe PKI components
Topic 9	Compare and contrast wired LAN methodologies Explain the purpose and methods of a packet capture

Get New HPE6-A78 Certification Practice Test Questions Exam Dumps: https://www.surepassexams.com/HPE6-A78-exam-bootcamp.html

HP HPE6-A78 Exam Syllabus Topics:

Leave a Reply Cancel reply