HPE6-A78 Braindumps Real Exam Updated on Jul 01, 2022 with 62 Questions [Q29-Q48]

5/5 - (1 vote)

HPE6-A78 Braindumps Real Exam Updated on Jul 01, 2022 with 62 Questions

Latest HPE6-A78 PDF Dumps & Real Tests Free Updated Today

NEW QUESTION 29
Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?

that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized

that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM

that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM

that the MC has valid admin credentials configured on it for logging into the CPPM

NEW QUESTION 30
You are managing an Aruba Mobility Controller (MC). What is a reason for adding a “Log Settings” definition in the ArubaOS Diagnostics > System > Log Settings page?

Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level

Configuring the MC to generate logs for a particular event category and level, but only for a specific user or AP.

Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory

Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers

NEW QUESTION 31
Refer to the exhibit.

How can you use the thumbprint?

Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

NEW QUESTION 32
You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs What is one approach that you can take to find the relevant logs?

Add the “-C and *-c port-access” options to the “show logging” command.

Configure a logging Tiller for the “port-access” category, and apply that filter globally.

Enable debugging for “portaccess” to move the relevant logs to a buffer.

Specify a logging facility that selects for “port-access” messages.

NEW QUESTION 33
What are some functions of an AruDaOS user role?

The role determines which authentication methods the user must pass to gain network access

The role determines which firewall policies and bandwidth contract apply to the clients traffic

The role determines which wireless networks (SSiDs) a user is permitted to access

The role determines which control plane ACL rules apply to the client’s traffic

NEW QUESTION 34
From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

ClearPass Onboard

ClearPass Access Tracker

ClearPass OnGuard

ClearPass Guest

NEW QUESTION 35
Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers’ roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

Change the local user role to read-only

Clear the MSCHAP check box

Disable local authentication

Change the default role to “guest-provisioning”

NEW QUESTION 36
What is a benefit of deploying Aruba ClearPass Device insight?

Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)

visibility into devices’ 802.1X supplicant settings and automated certificate deployment

Agent-based analysts of devices’ security settings and health status, with the ability to implement quarantining

Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

NEW QUESTION 37
Refer to the exhibit.

A diem is connected to an ArubaOS Mobility Controller. The exhibit snows all Tour firewall rules that apply to this diem What correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall
10.1 10.10
203.0.13.5

It drops both of the packets

It permits the packet to 10.1.10.10 and drops the packet to 203 0.13.5

it permits both of the packets

It drops the packet to 10.1.10.10 and permits the packet to 203.0.13.5.

NEW QUESTION 38
You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?

Make sure that CPPM cluster settings are configured to show Access-Rejects

Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

Click Edit in Access viewer and make sure that the correct servers are selected.

Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

NEW QUESTION 39
Refer to the exhibit.

Device A is establishing an HTTPS session with the Arubapedia web sue using Chrome. The Arubapedia web server sends the certificate shown in the exhibit What does the browser do as part of vacating the web server certificate?

It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate’s signature.

It uses the public key in the DigCert root CA certificate to check the certificate signature

It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate’s signature.

It uses the private key in the Arubapedia web site’s certificate to check that certificate’s signature

NEW QUESTION 40
What is one of the roles of the network access server (NAS) in the AAA framewonx?

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

It negotiates with each user’s device to determine which EAP method is used for authentication

It enforces access to network services and sends accounting information to the AAA server

It determines which resources authenticated users are allowed to access and monitors each users session

NEW QUESTION 41
What is one practice that can help you to maintain a digital chain or custody In your network?

Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

NEW QUESTION 42
What is a guideline for managing local certificates on an ArubaOS-Switch?

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

NEW QUESTION 43
Which is a correct description of a stage in the Lockheed Martin kill chain?

In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.

In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.

In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.

In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.

NEW QUESTION 44
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

NEW QUESTION 45
Refer to the exhibit.

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP What Is the proper way to configure the switches to meet these requirements?

On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

On Switch-2, make ports connected to employee devices trusted ports for ARP protection

On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

NEW QUESTION 46
A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user’s Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC’s) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

the reports generated by Aruba ClearPass Insight

the RADIUS events within the CPPM Event Viewer

the Alerts tab in the authentication record in CPPM Access Tracker

the packets captured on the MC control plane destined to UDP 1812

NEW QUESTION 47
What is one way that Control Plane Security (CPsec) enhances security for me network?

It protects wireless clients’ traffic tunneled between APs and Mobility Controllers, from eavesdropping

It prevents Denial of Service (DoS) attacks against Mobility Controllers’ (MCs”) control plane.

It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).

It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

NEW QUESTION 48
What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

HPE6-A78 Dumps With 100% Verified Q&As – Pass Guarantee or Full Refund: https://www.actualcollection.com/HPE6-A78-exam-questions.html

Leave a comment Cancel reply