HPE6-A78 Exam Questions
176 real HPE6-A78 exam questions with expert-verified answers and explanations. Page 2 of 4.
- Question #51Monitoring and Troubleshooting Aruba Network Security
A company has added a new user group. Users in the group try to connect to the WLAN and receive errors that the connection has no Internet access. The users cannot reach any resour...
ClearPassrole assignmentRADIUS attributesrole name mismatch - Question #52Aruba Security Solutions and Architectures
What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?
TPMsecure bootAP securityhardware security - Question #53Network Security Fundamentals
What is the purpose of an Enrollment over Secure Transport (EST) server?
ESTcertificate enrollmentPKIcertificate lifecycle - Question #54Implementing and Configuring Aruba Network Security
What is one benefit of enabling Enhanced Secure mode on an ArubaOS-Switch?
Enhanced Secure modeSSH hardeningArubaOS-Switchsecurity hardening - Question #55Aruba Security Solutions and Architectures
You have an Aruba Mobility Controller (MC) that is locked in a closet. What is another step that Aruba recommends to protect the MC from unauthorized access?
physical securitypassword recoveryMC hardeningaccess control - Question #56Monitoring and Troubleshooting Aruba Network Security
What is one thing can you determine from the exhibits?
ClearPassCoAdevice profilingrole assignment - Question #57Aruba Security Solutions and Architectures
What is a consideration for implementing wireless containment in response to unauthorized devices discovered by ArubaOS Wireless Intrusion Detection (WIP)?
wireless containmentWIProgue APlegal compliance - Question #58Implementing and Configuring Aruba Network Security
You need to implement a WPA3-Enterprise network that can also support WPA2-Enterprise clients. What is a valid configuration for the WPA3-Enterprise WLAN?
WPA3-EnterpriseWPA2 compatibilityCNSA modewireless security - Question #59Monitoring and Troubleshooting Aruba Network Security
Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP: SSID = Pub...
rogue AP detectionWIPBSSID matchingEth-Wired-Mac-Table - Question #60Implementing and Configuring Aruba Network Security
Refer to the exhibit, which shows the settings on the company's MCs. -- Mobility Controller Dashboard General Admin AirWave CPSec Certificates Configuration WLANs v Control Plane S...
CPsecAP whitelistcertificate provisioningAP management - Question #61Implementing and Configuring Aruba Network Security
A company has an ArubaOS solution. The company wants to prevent users assigned to the "user_group1" role from using gaming and peer-to-peer applications. What is the recommended ap...
DPIapplication rulesrole-based accessfirewall policy - Question #62Aruba Security Solutions and Architectures
What is one way that WPA3-Enterprise enhances security when compared to WPA2-Enterprise?
WPA3-EnterpriseCNSA modewireless security802.11 association - Question #63Network Security Fundamentals
What purpose does an initialization vector (IV) serve for encryption?
initialization vectorsymmetric encryptioncryptographyplaintext randomization - Question #64Network Security Fundamentals
Device A is contacting https://arubapedia.arubanetworks.com. The web server sends a certificate chain. What does the browser do as part of validating the web server certificate?
certificate validationDNS SANPKIHTTPS - Question #65Implementing and Configuring Aruba Network Security
The first exhibit shows roles on the MC, listed in alphabetic order. The second and third exhibits show the configuration for a WLAN to which a client connects. Which description o...
802.1Xrole assignmentRADIUS VSAWLAN policy - Question #66Implementing and Configuring Aruba Network Security
You are setting up an Aruba mobility solution which includes a Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs) for a university. The university plans to enf...
role-based access controlWPA2-Enterprisefirewall policyMobility Controller - Question #67Implementing and Configuring Aruba Network Security
The monitoring admin has asked you to set up an ArubaOS-Switch to meet these criteria: - Send logs to a SIEM Syslog server at 10.4.13.15 at the standard UDP port (514) - Send a log...
syslogSIEMlogging configurationArubaOS-Switch - Question #68Network Security Fundamentals
What is a correct use case for using the specified certificate file format?
PKCS12certificate formatsPKIprivate key - Question #69Network Security Fundamentals
What is a use case for implementing RadSec instead of RADIUS?
RadSecRADIUSTLS transportauthentication protocol - Question #70Aruba Security Solutions and Architectures
A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. T...
TCP fingerprintingClearPassendpoint profilingtraffic mirroring - Question #71Aruba Security Solutions and Architectures
An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive cer...
endpoint profilingClearPassdevice classificationpolicy enforcement - Question #72Implementing and Configuring Aruba Network Security
You have enabled 802.1X authentication on an AOS-CX switch, including on port 1/1/1. That port has these port-access roles configured on it: Fallback role = roleA Auth role = roleB...
802.1Xport-access rolesAOS-CXRADIUS VSA - Question #73Monitoring and Troubleshooting Aruba Network Security
Your HPE Aruba Networking Mobility Master-based solution has detected a rogue AP. Among other information, the AOS Detected Radios page lists this information for the AP: SSID = Pu...
rogue AP detectionPlus One methodwired MAC tableBSSID analysis - Question #74Aruba Security Solutions and Architectures
What is one method for HPE Aruba Networking ClearPass Policy Manager (CPPM) to use DHCP to classify an endpoint?
DHCP fingerprintingOption 55endpoint profilingClearPass - Question #75Implementing and Configuring Aruba Network Security
You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS+ server. When an admin authenticates, CPPM sends a respons...
TACACS+privilege levelClearPassadmin authentication - Question #76Implementing and Configuring Aruba Network Security
A user attempts to connect to an SSID configured on an AOS-8 mobility architecture with Mobility Controllers (MCs) and APs. The SSID enforces WPA3-Enterprise security and uses HPE...
WPA3-Enterpriserole assignmentRADIUS VSAMobility Controller - Question #77Network Security Fundamentals
Which attack is an example of social engineering?
social engineeringphishingsecurity awarenessimpersonation - Question #78Implementing and Configuring Aruba Network Security
This company has AOS-CX switches. The exhibit shows one access layer switch, Switch-2, as an example, but the campus actually has more switches. Switch-1 is a core switch that acts...
DHCP snoopingARP inspectionAOS-CXlayer 2 security - Question #79Implementing and Configuring Aruba Network Security
What is a guideline for managing local certificates on AOS-CX switches?
certificate managementtrust anchorPKIAOS-CX - Question #80Aruba Architecture and Wireless
You are deploying a new wireless solution with an HPE Aruba Networking Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs). The solution will include a WLAN tha...
tunnel modeVLAN propagationMobility Controllerwireless architecture - Question #81Monitoring and Troubleshooting Aruba Network Security
Refer to the exhibit. A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentica...
EAP-TLSclient certificateWPA3-EnterpriseCPPM authentication - Question #82Monitoring and Troubleshooting Aruba Network Security
A user is having trouble connecting to an AP managed by a standalone Mobility Controller (MC). What can you do to get detailed logs and debugs for that user's client?
user-debug loggingMC CLIclient troubleshooting802.1X diagnostics - Question #83Implementing and Configuring Aruba Network Security
A client is connected to a Mobility Controller (MC). These firewall rules apply to this client's role: ipv4 any any svc-dhcp permit ipv4 user 10.5.5.20 svc-dns permit ipv4 user 10....
firewall policyACL rule orderrole-based accesspacket filtering - Question #84Implementing and Configuring Aruba Network Security
An MC has a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). The WLAN's default role is set to guest. A Mobility Cont...
VSA role mappingCPPMuser role assignmentWPA3-Enterprise - Question #85Monitoring and Troubleshooting Aruba Network Security
You have deployed a new HPE Aruba Networking Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.1X authentication to HPE Aruba Networking ClearPass Polic...
802.1X troubleshootingCPPM Access TrackerRADIUSEvent Viewer - Question #86Network Security Fundamentals
You have configured a WLAN to use Enterprise security with the WPA3 version. How does the WLAN handle encryption?
WPA3-EnterpriseAES encryptionPMK802.11 security - Question #87Network Security Fundamentals
A client has accessed an HTTPS server at myhost1.example.com using Chrome. The server sends a certificate that includes these properties: Subject name: myhost.example.com SAN: DNS:...
certificate trust chainSANEKUPKI validation - Question #88Monitoring and Troubleshooting Aruba Network Security
What is a reason to set up a packet capture on an HPE Aruba Networking Mobility Controller (MC)?
packet captureMC diagnosticsWIDSthreat detection - Question #89Implementing and Configuring Aruba Network Security
Refer to the exhibit, which shows the settings on the company's MCs. You have deployed about 100 new HPE Aruba Networking 335 APs. What is required for the APs to become managed?
AP whitelistMC managementCPSeccampus AP provisioning - Question #90Implementing and Configuring Aruba Network Security
The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria: Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514) Send a log for...
AOS-CX syslogSIEM integrationlogging severityTCP syslog - Question #91Implementing and Configuring Aruba Network Security
Refer to the exhibit: port-access role role1 vlan access 11 port-access role role2 vlan access 12 port-access role role3 vlan access 13 port-access role role4 vlan access 14 aaa au...
port-access roles802.1Xcritical rolepre-auth role - Question #92Network Security Fundamentals
What is one way a honeypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?
honeypotevil twinSSID spoofingMITM attack - Question #93Implementing and Configuring Aruba Network Security
A company with 465 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows: - Guests select the WLAN and connect without having to ente...
OWE transition modecaptive portalguest WLANopen WLAN encryption - Question #94Implementing and Configuring Aruba Network Security
A company has AOS-CX switches deployed in a two-tier topology that uses OSPF routing at the core. You need to prevent ARP poisoning attacks. To meet this need, what is one technolo...
ARP inspectionDHCP snoopingARP poisoningAOS-CX security - Question #95Monitoring and Troubleshooting Aruba Network Security
You have been instructed to look in the ArubaOS Security Dashboard's client list. Your goal is to find clients that belong to the company and have connected to devices that might b...
rogue APSecurity DashboardWIPSauthorized client - Question #96Aruba Security Solutions and Architectures
What is one way that Control Plane Security (CPSec) enhances security for the network?
CPSecAP-MC communicationmanagement traffic encryptioncontrol plane security - Question #97Aruba Security Solutions and Architectures
Which correctly describes one of HPE Aruba Networking ClearPass Policy Manager's (CPPM's) device profiling methods?
CPPM profilingTCP fingerprintingpassive profilingendpoint classification - Question #98Network Security Fundamentals
What is an example of passive endpoint classification?
passive classificationTCP fingerprintingendpoint profilingdevice fingerprinting - Question #99Monitoring and Troubleshooting Aruba Network Security
A company has an AOS controller-based solution with a WPA3-Enterprise WLAN, which authenticates wireless clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). The compan...
EAP-TLSCPPM Access TrackerRADIUS Access-Rejectcertificate authentication - Question #100Monitoring and Troubleshooting Aruba Network Security
Your AOS solution has detected a rogue AP with Wireless Intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?
rogue AP locationWIDSdetecting devicesWIP