HPE6-A78 Exam Dumps – PDF Questions and Testing Engine [Q29-Q53]

HPE6-A78 HP

admin • December 3, 2023

HPE6-A78 Exam Dumps – PDF Questions and Testing Engine [Q29-Q53]

Rate this post

HPE6-A78 Exam Dumps – PDF Questions and Testing Engine

HPE6-A78 Dumps – The Sure Way To Pass Exam

HPE6-A78 certification exam covers a wide range of topics, including network security fundamentals, firewall technologies, intrusion detection and prevention, VPN technologies, and network access control. Candidates who pass the exam demonstrate the ability to design, implement, and manage secure networks using Aruba technologies.

NO.29 Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

NO.30 What is one practice that can help you to maintain a digital chain or custody In your network?

Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

NO.31 What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

NO.32 A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution What should you do to configure the infrastructure to support the scans?

Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass’s HTTPS certificate

Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM’s IP address.

Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

NO.33 What is a difference between radius and TACACS+?

RADIUS combines the authentication and authorization process while TACACS+ separates them.

RADIUS uses TCP for Its connection protocol, while TACACS+ uses UDP tor its connection protocol.

RADIUS encrypts the complete packet, white TACACS+ only offers partial encryption.

RADIUS uses Attribute Value Pairs (AVPs) in its messages, while TACACS+ does not use them.

NO.34 A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user’s Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC’s) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

the reports generated by Aruba ClearPass Insight

the RADIUS events within the CPPM Event Viewer

the Alerts tab in the authentication record in CPPM Access Tracker

the packets captured on the MC control plane destined to UDP 1812

NO.35 What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

NO.36 Refer to the exhibit.

How can you use the thumbprint?

Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

NO.37 You have an Aruba Mobility Controller (MC). for which you are already using Aruba ClearPass Policy Manager (CPPM) to authenticate access to the Web Ul with usernames and passwords You now want to enable managers to use certificates to log in to the Web Ul CPPM will continue to act as the external server to check the names in managers’ certificates and tell the MC the managers’ correct rote in addition to enabling certificate authentication. what is a step that you should complete on the MC?

Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM

install all of the managers’ certificates on the MC as OCSP Responder certificates

Verify that the MC trusts CPPM’s HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC

Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication

NO.38 Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

Assign the WLAN to a single new VLAN which is dedicated to wireless users

Use wireless user roles to assign the devices to different VLANs in the 100-150 range

Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

Use wireless user roles to assign the devices to a range of new vlan IDs.

NO.39 What are the roles of 802.1X authenticators and authentication servers?

The authenticator stores the user account database, while the server stores access policies.

The authenticator supports only EAP, while the authentication server supports only RADIUS.

The authenticator is a RADIUS client and the authentication server is a RADIUS server.

The authenticator makes access decisions and the server communicates them to the supplicant.

NO.40 A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:

The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

WPA3-Personal and MAC-Auth

Captive portal and WPA3-Personai

Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

Opportunistic Wireless Encryption (OWE) and WPA3-Personal

NO.41 What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

NO.42 You have detected a Rogue AP using the Security Dashboard Which two actions should you take in responding to this event? (Select two)

There is no need to locale the AP If you manually contain It.

This is a serious security event, so you should always contain the AP immediately regardless of your company’s specific policies.

You should receive permission before containing an AP. as this action could have legal Implications.

For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP’s MAC address.

There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.

NO.43 What is a benefit of Opportunistic Wireless Encryption (OWE)?

It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN

It offers more control over who can connect to the wireless network when compared with WPA2-Personal

It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

NO.44 What is a Key feature of me ArubaOS firewall?

The firewall is stateful which means that n can track client sessions and automatically allow return traffic for permitted sessions

The firewall Includes application layer gateways (ALGs). which it uses to filter Web traffic based on the reputation of the destination web site.

The firewall examines all traffic at Layer 2 through Layer 4 and uses source IP addresses as the primary way to determine how to control traffic.

The firewall is designed to fitter traffic primarily based on wireless 802.11 headers, making it ideal for mobility environments

NO.45 Refer to the exhibit.

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP What Is the proper way to configure the switches to meet these requirements?

On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

On Switch-2, make ports connected to employee devices trusted ports for ARP protection

On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

NO.46 You are managing an Aruba Mobility Controller (MC). What is a reason for adding a “Log Settings” definition in the ArubaOS Diagnostics > System > Log Settings page?

Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level

Configuring the MC to generate logs for a particular event category and level, but only for a specific user or AP.

Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory

Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers

NO.47 You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?

Make sure that CPPM cluster settings are configured to show Access-Rejects

Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

Click Edit in Access viewer and make sure that the correct servers are selected.

Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

NO.48 What is an example or phishing?

An attacker sends TCP messages to many different ports to discover which ports are open.

An attacker checks a user’s password by using trying millions of potential passwords.

An attacker lures clients to connect to a software-based AP that is using a legitimate SSID.

An attacker sends emails posing as a service team member to get users to disclose their passwords.

NO.49 What is a benefit of deploying Aruba ClearPass Device insight?

Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)

visibility into devices’ 802.1X supplicant settings and automated certificate deployment

Agent-based analysts of devices’ security settings and health status, with the ability to implement quarantining

Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

NO.50 A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI).
This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?

one AP license per-switch

one PEF license per-switch

one PEF license per-switch. and one WCC license per-switch

one AP license per-switch. and one PEF license per-switch

NO.51 What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.

In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate

NO.52 Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?