HP HP Certifications HPE6-A78 Questions & Answers

• Question 11:

  Refer to the exhibit.

  

  This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs

  Which setting should you change to follow Aruba best security practices?

  A. Change the local user role to read-only

  B. Clear the MSCHAP check box

  C. Disable local authentication

  D. Change the default role to "guest-provisioning"

  Correct Answer: D

• Question 12:

  Refer to the exhibit.

  

  You have set up a RADIUS server on an ArubaOS Mobility Controller (MC) when you created a WLAN named "MyEmployees .You now want to enable the MC to accept change of authorization (CoA) messages from this server for wireless sessions on this WLAN.

  What Is a part of the setup on the MC?

  A. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.

  B. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.

  C. Configure a ClearPass username and password in the MyEmployees AAA profile.

  D. Enable the dynamic authorization setting in the "clearpass" authentication server settings.

  Correct Answer: B

• Question 13:

  What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?

  A. It resides in the cloud and manages licensing and configuration for Collectors

  B. It resides on-prem and provides the span port to which traffic is mirrored for deep analytics.

  C. It resides on-prem and is responsible for running active SNMP and Nmap scans

  D. It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors

  Correct Answer: D

• Question 14:

  What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

  A. EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

  B. EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

  C. EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

  D. EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user

  credentials with TKIP encryption.

  Correct Answer: B

• Question 15:

  What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?

  A. A DDoS attack originates from external devices, while a DoS attack originates from internal devices

  B. A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device

  C. A DoS attack targets one server, a DDoS attack targets all the clients that use a server

  D. A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

  Correct Answer: A

• Question 16:

  What is one practice that can help you to maintain a digital chain or custody In your network?

  A. Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

  B. Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

  C. Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

  D. Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

  Correct Answer: A

• Question 17:

  A. the match method

  B. the detecting devices

  C. the match type

  D. the confidence level

  Correct Answer: A

• Question 18:

  What is one of the roles of the network access server (NAS) in the AAA framewonx?

  A. It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

  B. It negotiates with each user's device to determine which EAP method is used for authentication

  C. It enforces access to network services and sends accounting information to the AAA server

  D. It determines which resources authenticated users are allowed to access and monitors each users

  session

  Correct Answer: A

• Question 19:

  A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps. What is one benefit of adding Aruba Airwave from the perspective of forensics?

  A. Airwave can provide more advanced authentication and access control services for the AmbaOS solution

  B. Airwave retains information about the network for much longer periods than ArubaOS solution

  C. Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution

  D. AirWave enables low level debugging on the devices across the ArubaOS solution

  Correct Answer: C

• Question 20:

  What is a guideline for managing local certificates on an ArubaOS-Switch?

  A. Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

  B. Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

  C. Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

  D. Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

  Correct Answer: C