HP HP Certifications HPE6-A78 Questions & Answers

• Question 41:

  What is a correct guideline for the management protocols that you should use on ArubaOS- Switches?

  A. Disable Telnet and use TFTP instead.

  B. Disable SSH and use https instead.

  C. Disable Telnet and use SSH instead

  D. Disable HTTPS and use SSH instead

  Correct Answer: B

• Question 42:

  You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC). What should you do to enhance security for control channel communications between the switches and the MC?

  A. Create one UBT zone for control traffic and a second UBT zone for clients.

  B. Configure a long, random PAPI security key that matches on the switches and the MC.

  C. install certificates on the switches, and make sure that CPsec is enabled on the MC

  D. Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

  Correct Answer: C

• Question 43:

  What is a vulnerability of an unauthenticated Dime-Heliman exchange?

  A. A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

  B. A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

  C. Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

  D. Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

  Correct Answer: A

• Question 44:

  You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.

  What is a good next step for troubleshooting?

  A. Renew CPPM's RADIUS/EAP certificate

  B. Reset the user credentials

  C. Check CPPM Event viewer.

  D. Check connectivity between CPPM and a backend directory server

  Correct Answer: C

• Question 45:

  A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:

  

  The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN.

  Which security options should?

  A. WPA3-Personal and MAC-Auth

  B. Captive portal and WPA3-Personai

  C. Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

  D. Opportunistic Wireless Encryption (OWE) and WPA3-Personal

  Correct Answer: C

• Question 46:

  What are some functions of an AruDaOS user role?

  A. The role determines which authentication methods the user must pass to gain network access

  B. The role determines which firewall policies and bandwidth contract apply to the clients traffic

  C. The role determines which wireless networks (SSiDs) a user is permitted to access

  D. The role determines which control plane ACL rules apply to the client's traffic

  Correct Answer: A

• Question 47:

  From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

  A. ClearPass Onboard

  B. ClearPass Access Tracker

  C. ClearPass OnGuard

  D. ClearPass Guest

  Correct Answer: C

• Question 48:

  You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access- Rejects in CPPM Access Tracker.

  What is something you can do to look for the records?

  A. Make sure that CPPM cluster settings are configured to show Access-Rejects

  B. Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

  C. Click Edit in Access viewer and make sure that the correct servers are selected.

  D. Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

  Correct Answer: A

• Question 49:

  You have been instructed to look in the ArubaOS Security Dashboard's client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers.

  Which client fits this description?

  A. MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering

  B. MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor

  C. MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering

  D. MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

  Correct Answer: C

• Question 50:

  What is a difference between radius and TACACS+?

  A. RADIUS combines the authentication and authorization process while TACACS+ separates them.

  B. RADIUS uses TCP for Its connection protocol, while TACACS+ uses UDP tor its connection protocol.

  C. RADIUS encrypts the complete packet, white TACACS+ only offers partial encryption.

  D. RADIUS uses Attribute Value Pairs (AVPs) in its messages, while TACACS+ does not use them.

  Correct Answer: A