HPE6-A84 Exam Questions
60 real HPE6-A84 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Designing Advanced Network Security Solutions
You are designing an Aruba ClearPass Policy Manager (CPPM) solution for a customer. You learn that the customer has a Palo Alto firewall that filters traffic between clients in the...
ClearPass CPPMPalo Alto integrationsyslogfirewall integration - Question #2Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer has an Aruba ClearPass cluster. The customer has AOS-CX switches that implement 802.1X authentication to ClearPass Policy Manager (CPPM). Switches...
UBTgateway cluster HAClearPass enforcementcontroller redundancy - Question #3Troubleshooting Advanced Network Security
Refer to the scenario. A customer requires these rights for clients in the "medical-mobile" AOS firewall role on Aruba Mobility Controllers (MCs): - Permitted to receive IP address...
AOS firewall policysubnet maskACL rule orderingMobility Controller - Question #4Troubleshooting Advanced Network Security
A company has an Aruba ClearPass server at 10.47.47.8, FQDN radius.acnsxtest.local. This exhibit shows ClearPass Policy Manager's (CPPM's) settings for an Aruba Mobility Controller...
CoARFC 3576RadSecdynamic authorization - Question #5Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer requires these rights for clients in the "medical-mobile" AOS firewall role on Aruba Mobility Controllers (MCs): - Permitted to receive IP address...
AppRFWebCCAOS firewall roleapplication visibility - Question #6Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer has an Aruba ClearPass cluster. The customer has AOS-CX switches that implement 802.1X authentication to ClearPass Policy Manager (CPPM). Switches...
UBTAOS-CXVLAN configurationgateway tunneling - Question #7Optimizing and Managing Advanced Network Security
A company has Aruba gateways and wants to start implementing gateway IDS/IPS. The customer has selected Block for the Fail Strategy. What might you recommend to help minimize unexp...
gateway IDS/IPSfail strategyIPS engine utilizationoutage prevention - Question #8Optimizing and Managing Advanced Network Security
A company has Aruba gateways that are Implementing gateway IDS/IPS in IDS mode. The customer complains that admins are receiving too frequent of repeat email notifications for the...
IDS/IPS alertsalert thresholdsnotification managementAruba Central - Question #9Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft End...
Azure ADClearPass authentication sourceEAP-TLSHTTP auth type - Question #10Troubleshooting Advanced Network Security
Refer to the scenario. A customer requires these rights for clients in the "medical-mobile" AOS firewall role on Aruba Mobility Controllers (MCs): - Permitted to receive IP address...
AOS firewall policyrule orderingblacklistingMobility Controller - Question #11Designing Advanced Network Security Solutions
What is a common characteristic of a beacon between a compromised device and a command and control server?
C2 beaconingthreat indicatorsnetwork anomaly detectionmalware behavior - Question #12Troubleshooting Advanced Network Security
Refer to the scenario. A hospital has an AOS10 architecture that is managed by Aruba Central. The customer has deployed a pair of Aruba 9000 Series gateways with Security licenses...
IDS/IPSRAPIDSrogue detectionincident investigation - Question #13Troubleshooting Advanced Network Security
Refer to the scenario. A customer has an Aruba ClearPass cluster. The customer has AOS-CX switches that implement 802.1X authentication to ClearPass Policy Manager (CPPM). Switches...
UBTgateway rolesVLAN assignment conflictAOS-CX - Question #14Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer has an Aruba ClearPass cluster. The customer has AOS-CX switches that implement 802.1X authentication to ClearPass Policy Manager (CPPM). Switches...
AOS-CX CLIUBTport-access rolegateway-zone - Question #15Troubleshooting Advanced Network Security
Refer to the scenario. A customer requires these rights for clients in the "medical-mobile" AOS firewall role on Aruba Mobility Controllers (MCs): - Permitted to receive IP address...
AOS firewall policysubnet maskACL rulesMobility Controller - Question #16Designing Advanced Network Security Solutions
A customer requires a secure solution for connecting remote users to the corporate main site. You are designing a client-to-site virtual private network (VPN) based on Aruba VIA an...
VIA VPNVPNCClearPass authenticationcertificate-based auth - Question #17Designing Advanced Network Security Solutions
Refer to the scenario. A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft End...
EAP-TLScertificate requirementsIntunedevice identity - Question #18Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft End...
Azure ADapp registrationClearPassIntune compliance check - Question #19Optimizing and Managing Advanced Network Security
You are configuring gateway IDS/IPS settings in Aruba Central. For which reason would you set the Fail Strategy to Bypass?
IDS/IPSfail strategybypass modegateway security - Question #20Implementing and Integrating Advanced Network Security
How does Aruba Central handle security for site-to-site connections between AOS 10 gateways?
site-to-site VPNIPsecAOS 10 gatewaysAruba Central - Question #21Troubleshooting Advanced Network Security
Refer to the exhibit. Which security issue is possibly indicated by this traffic capture?
DNS tunnelingcommand and controltraffic analysispacket capture - Question #22Implementing and Integrating Advanced Network Security
You are working with a developer to design a custom NAE script for a customer. You are helping the developer find the correct REST API resource to monitor. Refer to the exhibit bel...
NAE scriptsREST APIAOS-CXAPI authentication - Question #23Implementing and Integrating Advanced Network Security
A customer has an AOS 10 architecture, consisting of Aruba AP and AOS-CX switches, managed by Aruba Central. The customer wants to obtain information about the clients, such as the...
client profilingAruba CentralAOS 10device fingerprinting - Question #24Troubleshooting Advanced Network Security
You are reviewing an endpoint entry in ClearPass Policy Manager (CPPM) Endpoints Repository. What is a good sign that someone has been trying to gain unauthorized access to the net...
ClearPassendpoint profilingprofile conflictunauthorized access - Question #25Optimizing and Managing Advanced Network Security
Refer to the scenario. A customer is using an AOS 10 architecture with Aruba APs and Aruba gateways (two per site). Admins have implemented auto-site clustering for gateways with t...
gateway clusteringVRRPdynamic authorizationfailover - Question #26Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer is using an AOS 10 architecture with Aruba APs and Aruba gateways (two per site). Admins have implemented auto-site clustering for gateways with t...
ClearPassnetwork device entriesRADIUSgateway clustering - Question #27Implementing and Integrating Advanced Network Security
A customer wants CPPM to authenticate non-802.1X-capable devices. An admin has created the service shown in the exhibits below: What is one recommendation to improve security?
MAC authenticationClearPassnon-802.1Xauthentication method - Question #28Implementing and Integrating Advanced Network Security
You are working with a developer to design a custom NAE script for a customer. The NAE agent should trigger an alert when ARP inspection drops packets on a VLAN. The customer wants...
NAE scriptsAOS-CXVLAN monitoringARP inspection - Question #29Troubleshooting Advanced Network Security
Refer to the exhibit. Which IP address should you record as a possibly compromised client?
traffic analysiscompromised clientsecurity investigationpacket capture - Question #30Implementing and Integrating Advanced Network Security
You need to install a certificate on a standalone Aruba Mobility Controller (MC). The MC will need to use the certificate for the Web UI and for implementing RadSec with Aruba Clea...
PKI certificatesDNS SANRadSeccertificate validation - Question #31Designing Advanced Network Security Solutions
A customer has an AOS 10-based mobility solution, which authenticates clients to Aruba ClearPass Policy Manager (CPPM). The customer has some wireless devices that support WPA2 in...
MPSKWPA2 personalwireless securitylegacy devices - Question #32Implementing and Integrating Advanced Network Security
When would you implement BPDU protection on an AOS-CX switch port versus BPDU filtering?
BPDU protectionBPDU filteringSTPAOS-CX - Question #33Implementing and Integrating Advanced Network Security
Refer to the exhibit. You have been given this certificate to install on a ClearPass server for the RADIUS/EAP and RadSec usages. What is one issue?
PKI certificatesClearPassRadSeclocal domain - Question #34Implementing and Integrating Advanced Network Security
A customer needs you to configure Aruba ClearPass Policy Manager (CPPM) to authenticate domain users on domain computers. Domain users, domain computers, and domain controllers rec...
CA Trust listEAPRadSeccertificate usages - Question #35Troubleshooting Advanced Network Security
A customer's admins have added RF Protect licenses and enabled WIDS for a customer's AOS 8-based solution. The customer wants to use the built-in capabilities of APs without deploy...
WIDSrogue AP detectionair monitor modeAOS 8 - Question #36Implementing and Integrating Advanced Network Security
A customer has an AOS 10-based solution, including Aruba APs. The customer wants to use Cloud Auth to authenticate non-802.1X capable IoT devices. What is a prerequisite for settin...
Cloud AuthDevice InsightAruba CentralIoT devices - Question #37Implementing and Integrating Advanced Network Security
You want to use Device Insight tags as conditions within CPPM role mapping or enforcement policy rules. What guidelines should you follow?
Device InsightClearPassenforcement policyrole mapping - Question #38Optimizing and Managing Advanced Network Security
A customer has an AOS 10 architecture, which includes Aruba APs. Admins have recently enabled WIDS at the high level. They also enabled alerts and email notifications for several e...
WIDSalert tuningAruba Centralnotification management - Question #39Troubleshooting Advanced Network Security
Refer to the scenario. A customer has asked you to review their AOS-CX switches for potential vulnerabilities. The configuration for these switches is shown below: What is one reco...
control plane ACLAOS-CXSSH hardeningswitch security review - Question #40Troubleshooting Advanced Network Security
Refer to the scenario. A customer has asked you to review their AOS-CX switches for potential vulnerabilities. The configuration for these switches is shown below: What is one imme...
TelnetAOS-CXswitch hardeninginsecure protocols - Question #41Implementing and Integrating Advanced Network Security
Refer to the exhibit. Aruba ClearPass Policy Manager (CPPM) is using the settings shown in the exhibit. You reference the tag shown in the exhibit in enforcement policies related t...
ClearPass CPPMRADIUS CoAenforcement profilesclient reclassification - Question #42Implementing and Integrating Advanced Network Security
You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users wi...
EAP-TLSActive DirectoryuserAccountControlauthentication source - Question #43Designing Advanced Network Security Solutions
Refer to the scenario. This customer is enforcing 802.1X on AOS-CX switches to Aruba ClearPass Policy Manager (CPPM). The customer wants switches to download role settings from CPP...
AOS-CXdownloadable user rolesVLAN assignmentClearPass enforcement - Question #44Optimizing and Managing Advanced Network Security
Which element helps to lay the foundation for solid network security forensics?
network forensicsNTPlog synchronizationsecurity baseline - Question #45Troubleshooting Advanced Network Security
Refer to the exhibit. A customer requires protection against ARP poisoning in VLAN 4. Below are listed all settings for VLAN 4 and the VLAN 4 associated physical interfaces on the...
Dynamic ARP InspectionAOS-CXDHCP snoopingARP poisoning - Question #46Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster. In Ar...
Aruba CentralClearPass integrationIoT securitydata collector token - Question #47Designing Advanced Network Security Solutions
The customer needs a way for users to enroll new wired clients in Intune. The clients should have limited access that only lets them enroll and receive certificates. You plan to se...
AOS-CX rolesIntune enrollmentdownloadable user rolesnetwork access control - Question #48Implementing and Integrating Advanced Network Security
Refer to the scenario. A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster. In Ar...
ClearPass Endpoint Context ServerAruba CentralIoT monitoringCPPM integration - Question #49Troubleshooting Advanced Network Security
Several AOS-CX switches are responding to SNMPv2 GET requests for the public community. The customer only permits SNMPv3. You have asked a network admin to fix this problem. The ad...
SNMPv3AOS-CXSNMP securityvulnerability remediation - Question #50Optimizing and Managing Advanced Network Security
Refer to the scenario. An organization wants the AOS-CX switch to trigger an alert if its RADIUS server (cp.acnsxtest.local) rejects an unusual number of client authentication requ...
NAEAOS-CX REST APIRADIUS monitoringURI structure