Real Exam Questions HPE6-A78 Dumps Exam Questions in here [Oct-2022]
Get Latest Oct-2022 Conduct effective penetration tests using HPE6-A78
HP HPE6-A78 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 17
A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps.
What is one benefit of adding Aruba Airwave from the perspective of forensics?
- A. Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution
- B. AirWave enables low level debugging on the devices across the ArubaOS solution
- C. Airwave can provide more advanced authentication and access control services for the AmbaOS solution
- D. Airwave retains information about the network for much longer periods than ArubaOS solution
Answer: A
NEW QUESTION 18
What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?
- A. In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate
- B. In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.
- C. In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.
- D. In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.
Answer: D
NEW QUESTION 19
A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution What should you do to configure the infrastructure to support the scans?
- A. Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM
- B. Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports
- C. Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.
- D. Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate
Answer: B
NEW QUESTION 20
What is one practice that can help you to maintain a digital chain or custody In your network?
- A. Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.
- B. Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis
- C. Ensure that all network infrastructure devices receive a valid clock using authenticated NTP
- D. Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers
Answer: B
NEW QUESTION 21
You have detected a Rogue AP using the Security Dashboard Which two actions should you take in responding to this event? (Select two)
- A. You should receive permission before containing an AP. as this action could have legal Implications.
- B. There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.
- C. This is a serious security event, so you should always contain the AP immediately regardless of your company's specific policies.
- D. There is no need to locale the AP If you manually contain It.
- E. For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP's MAC address.
Answer: C,E
NEW QUESTION 22
What are some functions of an AruDaOS user role?
- A. The role determines which authentication methods the user must pass to gain network access
- B. The role determines which wireless networks (SSiDs) a user is permitted to access
- C. The role determines which control plane ACL rules apply to the client's traffic
- D. The role determines which firewall policies and bandwidth contract apply to the clients traffic
Answer: A
NEW QUESTION 23
An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?
- A. DHCP, DNS, and EAP only
- B. EAP only
- C. DHCP, DNS and RADIUS only
- D. RADIUS only
Answer: B
NEW QUESTION 24
You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?
- A. Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.
- B. Make sure that CPPM cluster settings are configured to show Access-Rejects
- C. Verify that you are logged in to the CPPM Ul with read-write, not read-only, access
- D. Click Edit in Access viewer and make sure that the correct servers are selected.
Answer: B
NEW QUESTION 25
Which correctly describes a way to deploy certificates to end-user devices?
- A. in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates
- B. ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
- C. ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them
- D. ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
Answer: B
NEW QUESTION 26
How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?
- A. The firewall applies every rule that includes the dent's IP address as the source.
- B. The firewall applies every rule that includes the client's IP address as the source or destination.
- C. The firewall applies the rules in policies associated with the client's wlan
- D. The firewall applies thee rules in policies associated with the client's user role.
Answer: A
NEW QUESTION 27
You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)
- A. CPPM does not have a network device defined for the switch's IP address.
- B. Clients are configured to use a mismatched EAP method from the one In the CPPM service.
- C. users are logging in with the wrong usernames and passwords or invalid certificates.
- D. The RADIUS shared secret does not match between the switch and CPPM.
- E. Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.
Answer: C,E
NEW QUESTION 28
What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?
- A. A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device
- B. A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device
- C. A DoS attack targets one server, a DDoS attack targets all the clients that use a server
- D. A DDoS attack originates from external devices, while a DoS attack originates from internal devices
Answer: D
NEW QUESTION 29
What are the roles of 802.1X authenticators and authentication servers?
- A. The authenticator is a RADIUS client and the authentication server is a RADIUS server.
- B. The authenticator supports only EAP, while the authentication server supports only RADIUS.
- C. The authenticator makes access decisions and the server communicates them to the supplicant.
- D. The authenticator stores the user account database, while the server stores access policies.
Answer: C
NEW QUESTION 30
How should admins deal with vulnerabilities that they find in their systems?
- A. They should notify the security team as soon as possible that the network has already been breached.
- B. They should classify the vulnerability as malware. a DoS attack or a phishing attack.
- C. They should add the vulnerability to their Common Vulnerabilities and Exposures (CVE).
- D. They should apply fixes, such as patches, to close the vulnerability before a hacker exploits it.
Answer: D
NEW QUESTION 31
A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:
The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should
- A. Captive portal and WPA3-Personai
- B. WPA3-Personal and MAC-Auth
- C. Opportunistic Wireless Encryption (OWE) and WPA3-Personal
- D. Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode
Answer: D
NEW QUESTION 32
A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI).
This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?
- A. one AP license per-switch
- B. one PEF license per-switch
- C. one AP license per-switch. and one PEF license per-switch
- D. one PEF license per-switch. and one WCC license per-switch
Answer: C
NEW QUESTION 33
What is symmetric encryption?
- A. It any form of encryption mat ensures that thee ciphertext Is the same length as the plaintext.
- B. It simultaneously creates ciphertext and a same-size MAC.
- C. It uses the same key to encrypt plaintext as to decrypt ciphertext.
- D. It uses a Key that is double the size of the message which it encrypts.
Answer: C
NEW QUESTION 34
Refer to the exhibit.
You have set up a RADIUS server on an ArubaOS Mobility Controller (MC) when you created a WLAN named "MyEmployees .You now want to enable the MC to accept change of authorization (CoA) messages from this server for wireless sessions on this WLAN.
What Is a part of the setup on the MC?
- A. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.
- B. Enable the dynamic authorization setting in the "clearpass" authentication server settings.
- C. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.
- D. Configure a ClearPass username and password in the MyEmployees AAA profile.
Answer: C
NEW QUESTION 35
What is a benefit of deploying Aruba ClearPass Device insight?
- A. Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining
- B. visibility into devices' 802.1X supplicant settings and automated certificate deployment
- C. Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)
- D. Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers
Answer: B
NEW QUESTION 36
What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?
- A. WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters
- B. WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.
- C. WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password
- D. WPA3-Personal is more complicated to deploy because it requires a backend authentication server
Answer: C
NEW QUESTION 37
......
Authentic Best resources for HPE6-A78 Online Practice Exam: https://passleader.briandumpsprep.com/HPE6-A78-prep-exam-braindumps.html
