HPE6-A78 Exam Questions

A company has added a new user group. Users in the group try to connect to the WLAN and receive errors that the connection has no Internet access. The users cannot reach any resour...

What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?

What is the purpose of an Enrollment over Secure Transport (EST) server?

What is one benefit of enabling Enhanced Secure mode on an ArubaOS-Switch?

You have an Aruba Mobility Controller (MC) that is locked in a closet. What is another step that Aruba recommends to protect the MC from unauthorized access?

What is one thing can you determine from the exhibits?

What is a consideration for implementing wireless containment in response to unauthorized devices discovered by ArubaOS Wireless Intrusion Detection (WIP)?

You need to implement a WPA3-Enterprise network that can also support WPA2-Enterprise clients. What is a valid configuration for the WPA3-Enterprise WLAN?

Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP: SSID = Pub...

Refer to the exhibit, which shows the settings on the company's MCs. -- Mobility Controller Dashboard General Admin AirWave CPSec Certificates Configuration WLANs v Control Plane S...

A company has an ArubaOS solution. The company wants to prevent users assigned to the "user_group1" role from using gaming and peer-to-peer applications. What is the recommended ap...

What is one way that WPA3-Enterprise enhances security when compared to WPA2-Enterprise?

What purpose does an initialization vector (IV) serve for encryption?

Device A is contacting https://arubapedia.arubanetworks.com. The web server sends a certificate chain. What does the browser do as part of validating the web server certificate?

The first exhibit shows roles on the MC, listed in alphabetic order. The second and third exhibits show the configuration for a WLAN to which a client connects. Which description o...

You are setting up an Aruba mobility solution which includes a Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs) for a university. The university plans to enf...

The monitoring admin has asked you to set up an ArubaOS-Switch to meet these criteria: - Send logs to a SIEM Syslog server at 10.4.13.15 at the standard UDP port (514) - Send a log...

What is a correct use case for using the specified certificate file format?

What is a use case for implementing RadSec instead of RADIUS?

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. T...

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive cer...

You have enabled 802.1X authentication on an AOS-CX switch, including on port 1/1/1. That port has these port-access roles configured on it: Fallback role = roleA Auth role = roleB...

Your HPE Aruba Networking Mobility Master-based solution has detected a rogue AP. Among other information, the AOS Detected Radios page lists this information for the AP: SSID = Pu...

What is one method for HPE Aruba Networking ClearPass Policy Manager (CPPM) to use DHCP to classify an endpoint?

You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS+ server. When an admin authenticates, CPPM sends a respons...

A user attempts to connect to an SSID configured on an AOS-8 mobility architecture with Mobility Controllers (MCs) and APs. The SSID enforces WPA3-Enterprise security and uses HPE...

Which attack is an example of social engineering?

This company has AOS-CX switches. The exhibit shows one access layer switch, Switch-2, as an example, but the campus actually has more switches. Switch-1 is a core switch that acts...

What is a guideline for managing local certificates on AOS-CX switches?

You are deploying a new wireless solution with an HPE Aruba Networking Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs). The solution will include a WLAN tha...

Refer to the exhibit. A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentica...

A user is having trouble connecting to an AP managed by a standalone Mobility Controller (MC). What can you do to get detailed logs and debugs for that user's client?

A client is connected to a Mobility Controller (MC). These firewall rules apply to this client's role: ipv4 any any svc-dhcp permit ipv4 user 10.5.5.20 svc-dns permit ipv4 user 10....

An MC has a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). The WLAN's default role is set to guest. A Mobility Cont...

You have deployed a new HPE Aruba Networking Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.1X authentication to HPE Aruba Networking ClearPass Polic...

You have configured a WLAN to use Enterprise security with the WPA3 version. How does the WLAN handle encryption?

A client has accessed an HTTPS server at myhost1.example.com using Chrome. The server sends a certificate that includes these properties: Subject name: myhost.example.com SAN: DNS:...

What is a reason to set up a packet capture on an HPE Aruba Networking Mobility Controller (MC)?

Refer to the exhibit, which shows the settings on the company's MCs. You have deployed about 100 new HPE Aruba Networking 335 APs. What is required for the APs to become managed?

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria: Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514) Send a log for...

Refer to the exhibit: port-access role role1 vlan access 11 port-access role role2 vlan access 12 port-access role role3 vlan access 13 port-access role role4 vlan access 14 aaa au...

What is one way a honeypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

A company with 465 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows: - Guests select the WLAN and connect without having to ente...

A company has AOS-CX switches deployed in a two-tier topology that uses OSPF routing at the core. You need to prevent ARP poisoning attacks. To meet this need, what is one technolo...

You have been instructed to look in the ArubaOS Security Dashboard's client list. Your goal is to find clients that belong to the company and have connected to devices that might b...

What is one way that Control Plane Security (CPSec) enhances security for the network?

Which correctly describes one of HPE Aruba Networking ClearPass Policy Manager's (CPPM's) device profiling methods?

What is an example of passive endpoint classification?

A company has an AOS controller-based solution with a WPA3-Enterprise WLAN, which authenticates wireless clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). The compan...

Your AOS solution has detected a rogue AP with Wireless Intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?