Latest HP HPE6-A78 Actual Free Exam Questions & Community Discussion, Page 1

Question #1

Which is a correct description of a stage in the Lockheed Martin kill chain?

A. In the delivery stage, malware collects valuable data and delivers or exfiltrates it to the hacker.

B. In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes its function.

C. In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfiltrated.

D. In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

Which scenario requires the Aruba Mobility Controller to use a Server Certificate?

A. Obtain downloadable user roles (DURs) from ClearPass.

B. Use RADIUS for enforcing 802.1X authentication to ClearPass.

C. Use RadSec for enforcing 802.1X authentication to ClearPass.

D. Synchronize its clock with an NTP server that requires authentication.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #3

What is a benefit of Opportunistic Wireless Encryption (OWE)?

A. It allows anyone to connect, but provides better protection against eavesdropping than a traditional open network.

B. It offers more control over who can connect to the wireless network when compared with WPA2-Personal.

C. It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MITM) attacks.

D. It allows both WPA2-capable and WPA3-capable clients to authenticate to the same WPA-Personal WLAN.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #4

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

A. the detecting devices

B. the confidence level

C. the match method

D. the match type

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

A company has a WLAN that uses Tunnel forwarding mode and WPA3-Enterprise security, supported by an Aruba Mobility Controller (MC) and campus APs (CAPs). You have been asked to capture packets from a wireless client connected to this WLAN and submit the packets to the security team.
What is a guideline for this capture?

A. You should mirror traffic from the switch port that connects to the AP out on a port connected to a packet analyzer.

B. You should use an Air Monitor (AM) to capture the packets in the air.

C. You should capture the traffic on the MC dataplane to obtain unencrypted traffic.

D. You should capture the traffic on the AP, so that the capture is as close to the source as possible.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

Which is a correct description of a Public Key Infrastructure (PKI)?

A. Root Certification Authorities (CAs) primarily sign certificates, and Intermediate Certification Authorities (CAs) primarily validate signatures.

B. A user must manually choose to trust a root Certification Authority (CA) certificate, or the root CA certificate must be installed on the device as trusted.

C. A user must manually choose to trust intermediate and end-entity certificates, or those certificates must be installed on the device as trusted in advance.

D. A device uses Intermediate Certification Authorities (CAs) to enable it to trust root CAs that are different from the root CA that signed its own certificate.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

You have been instructed to look in the ArubaOS Security Dashboard's client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers Which client fits this description?

A. MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering

B. MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor

C. MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

D. MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #8

A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:

The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

A. WPA3-Personal and MAC-Auth

B. Opportunistic Wireless Encryption (OWE) and WPA3-Personal

C. Captive portal and WPA3-Personai

D. Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #9

What is one difference between EAP-Tunneled Layer Security (EAP-TLS) and Protected EAP (PEAP)?

A. EAP-TLS requires the supplicant to authenticate with a certificate, but PEAP allows the supplicant to use a username and password.

B. EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of its process.

C. EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

D. EAP-TLS creates a TLS tunnel for transmitting user credentials securely, while PEAP protects user credentials with TKIP encryption.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

A. The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue

B. The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

C. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue

D. The AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #11

Refer to the exhibit.

A diem is connected to an ArubaOS Mobility Controller. The exhibit snows all Tour firewall rules that apply to this diem What correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall
10.1 10.10
203.0.13.5

A. It drops the packet to 10.1.10.10 and permits the packet to 203.0.13.5.

B. it permits both of the packets

C. It permits the packet to 10.1.10.10 and drops the packet to 203 0.13.5

D. It drops both of the packets

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #12

How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

A. The firewall applies every rule that includes the dent's IP address as the source.

B. The firewall applies thee rules in policies associated with the client's user role.

C. The firewall applies the rules in policies associated with the client's wlan

D. The firewall applies every rule that includes the client's IP address as the source or destination.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #13

Refer to the exhibit, which shows the settings on the company's MCs.
- Mobility Controller
Dashboard General Admin AirWave CPSec Certificates
Configuration
WLANs v Control Plane Security
Roles & Policies Enable CP Sec
Access Points Enable auto cert provisioning:
You have deployed about 100 new Aruba 335-APs. What is required for the APs to become managed?

A. configuring a PAPI key that matches on the APs and MCs

B. approving the APs as authorized APs on the AP whitelist

C. installing self-signed certificates on the APs

D. installing CA-signed certificates on the APs

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #14

From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

A. ClearPass Onboard

B. ClearPass Access Tracker

C. ClearPass Guest

D. ClearPass OnGuard

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #15

Refer to the exhibit.
A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert.
What is one thing that you check to resolve this issue?

A. Whether the client has a valid certificate installed on it to let it support EAP-TLS

B. Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

C. Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D. Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

HP HPE6-A78 Actual Free Exam Questions & Community Discussion

Download Free HP HPE6-A78 Demo