Latest HP HPE6-A78 Actual Free Exam Questions & Community Discussion, Page 6

Question #76

Refer to the exhibit, which shows the settings on the company's MCs.
You have deployed about 100 new HPE Aruba Networking 335 APs. What is required for the APs to become managed?

A. Installing CA-signed certificates on the APs

B. Installing self-signed certificates on the APs

C. Approving the APs as authorized APs on the AP whitelist

D. Configuring a PAPI key that matches on the APs and MCs

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #77

What is one way a honeypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

A. It uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

B. It uses a combination of software and hardware to jam the RF band and prevent the client from connecting to any wireless networks.

C. It examines wireless clients' probes and broadcasts the SSIDs in the probes, so that wireless clients will connect to it automatically.

D. It runs an NMap scan on the wireless client to find the client's MAC and IP address. The hacker then connects to another network and spoofs those addresses.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #78

You have been instructed to look in an AOS Security Dashboard's client list. Your goal is to find clients that belong to the company and have connected to devices that might belong to hackers.
Which client fits this description?

A. MAC address: d8:50:e6:f3:6e:60; Client Classification: Interfering; AP Classification: Interfering

B. MAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Suspected Rogue

C. MAC address: d8:50:e6:f3:6d:a4; Client Classification: Authorized; AP Classification: Suspected Rogue

D. MAC address: d8:50:e6:f3:6e:c5; Client Classification: Interfering; AP Classification: Neighbor

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #79

What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

A. WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.

B. WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

C. WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

D. WPA3-Personal is more complicated to deploy because it requires a backend authentication server

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #80

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)

A. users are logging in with the wrong usernames and passwords or invalid certificates.

B. Clients are configured to use a mismatched EAP method from the one In the CPPM service.

C. Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

D. The RADIUS shared secret does not match between the switch and CPPM.

E. CPPM does not have a network device defined for the switch's IP address.

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #81

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.
What is a consideration for using those capabilities?

A. ArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

B. ClearPass admins will need to provide the credentials of an API admin account to configure on Aruba devices.

C. You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.

D. TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #82

What purpose does an initialization vector (IV) serve for encryption?

A. It helps parties to negotiate the keys and algorithms used to secure data before data transmission.

B. It enables the conversion of asymmetric keys into keys that are suitable for symmetric encryption.

C. It makes encryption algorithms more secure by ensuring that same plaintext and key can produce different ciphertext.

D. It enables programs to convert easily-remembered passphrases to keys of a correct length.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #83

What purpose does an initialization vector (IV) serve for encryption?

A. It helps parties to negotiate the keys and algorithms used to secure data before data transmission.

B. It enables the conversion of asymmetric keys into keys that are suitable for symmetric encryption.

C. It makes encryption algorithms more secure by ensuring that the same plaintext and key can produce different ciphertext.

D. It enables programs to convert easily-remembered passphrases to keys of a correct length.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #84

A user is having trouble connecting to an AP managed by a standalone Mobility Controller (MC). What can you do to get detailed logs and debugs for that user's client?

A. In the MC UI's Traffic Analytics dashboard, look for the client's IP address.

B. In the MC CLI, set up a data plane packet capture and filter for the client's MAC address.

C. In the MC UI's Diagnostics > Logs pages, add a "user-debug" log setting for the client's MAC address.

D. In the MC CLI, set up a control plane packet capture and filter for the client's IP address.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #85

A company with 465 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:
Guests select the WLAN and connect without having to enter a password.
Guests are redirected to a welcome web page and log in.
The company also wants to provide encryption for the network for devices that are capable. Which security options should you implement for the WLAN?

A. WPA3-Personal and MAC-Auth

B. Opportunistic Wireless Encryption (OWE) and WPA3-Personal

C. Captive portal and WPA3-Personal

D. Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #86

What is an Authorized client, as defined by AOS Wireless Intrusion Prevention System (WIP)?

A. A client that is NOT on the WIP blacklist

B. A client that has a certificate issued by a trusted Certification Authority (CA)

C. A client that has successfully authenticated to an authorized AP and passed encrypted traffic

D. A client that is on the WIP whitelist

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #87

How should admins deal with vulnerabilities that they find in their systems?

A. They should add the vulnerability to their Common Vulnerabilities and Exposures (CVE).

B. They should classify the vulnerability as malware. a DoS attack or a phishing attack.

C. They should apply fixes, such as patches, to close the vulnerability before a hacker exploits it.

D. They should notify the security team as soon as possible that the network has already been breached.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #88

Refer to the exhibit.

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP What Is the proper way to configure the switches to meet these requirements?

A. On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

B. On Switch-2, make ports connected to employee devices trusted ports for ARP protection

C. On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

D. On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #89

The monitoring admin has asked you to set up an ArubaOS-Switch to meet these criteria:
* Send logs to a SIEM Syslog server at 10.4.13.15 at the standard UDP port (514)
* Send a log for all events at the "warning" level or above
The switch did not have any "logging" configuration on it. You then entered this command:
ArubaOS-Switch(config)# logging 10.4.13.15 udp
What should you do to finish configuring to the requirements?

A. Specify "warning" as the global level.

B. Ask for the Syslog password and configure it on the switch.

C. Configure logging as a debug destination.

D. Add categories (system-modules) at the global level.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #90

Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?

A. Configure the switch to listen for these protocols on OOBM only.

B. Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

C. Specify 192.168.1.0.255.255.255.0 as authorized IP manager address

D. Specify vlan 100 as the management vlan for the switches.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

HP HPE6-A78 Actual Free Exam Questions & Community Discussion

Download Free HP HPE6-A78 Demo