HPE6-A78 by HP Actual Free Exam Q&As

Question 1

From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

A. ClearPass OnGuard B. ClearPass Onboard C. ClearPass Access Tracker D. ClearPass Guest

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

You have enabled 802.1X authentication on an AOS-CX switch, including on port 1/1/1. That port has these port-access roles configured on it:
Fallback role = roleA
Auth role = roleB
Critical role = roleC
No other port-access roles are configured on the port. A client connects to that port. The user succeeds authentication, and CPPM does not send an Aruba-User-Role VSA.
What role does the client receive?

A. The client is denied access. B. The client receives roleA. C. The client receives roleB. D. The client receives roleC.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

You are setting up an Aruba mobility solution which includes a Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs) for a university. The university plans to enforce WPA2-Enterprise for all users' connections. The university wants to apply one set of access control rules to faculty users' traffic and a different set of rules to students' traffic.
What is the best approach for applying the correct rules to each group?

A. Create two roles, a "faculty" role and a "student" role. Apply firewall policies with the correct rules for each group to each role. B. Create two VLANs, one for faculty and one for students. Apply firewall policies with the correct rules for each group to each VLAN. C. Create two VLANs, one for faculty and one for students. Create one set of firewall access control rules that specify faculty IP addresses for the source and a second set of rules that specify the student IP addresses for the source. Apply the rules to the WLAN. D. Create two WLANs, one for faculty and one for students. Apply firewall policies with the correct rules for each group to each WLAN.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

You need to deploy an Aruba instant AP where users can physically reach It. What are two recommended options for enhancing security for management access to the AP? (Select two )

A. Disable Its console ports B. Place a Tamper Evident Label (TELS) over its console port C. Disable the Web Ul. D. Configure WPA3-Enterpnse security on the AP E. install a CA-signed certificate

Discussion 0

Correct Answer: C,E Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

What is social engineering?

A. Hackers use employees to circumvent network security and gather the information they need to launch an attack. B. Hackers use Artificial Intelligence (Al) to mimic a user's online behavior so they can infiltrate a network and launch an attack. C. Hackers spoof the source IP address in their communications so they appear to be a legitimate user. D. Hackers intercept traffic between two users, eavesdrop on their messages, and pretend to be one or both users.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

A company has HPE Aruba Networking Mobility Controllers (MCs), HPE Aruba Networking campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.
What is a consideration for using those capabilities?

A. AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints. B. ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices. C. You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch. D. TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Refer to the exhibits.
An admin has created a WLAN that uses the settings shown in the exhibits (and has not otherwise adjusted the settings in the AAA profile). A client connects to the WLAN. Under which circumstances will a client receive the default role assignment?

A. The client has attempted 802.1X authentication, but the MC could not contact the authentication server. B. The client has attempted 802.1X authentication, but failed to maintain a reliable connection, leading to a timeout error. C. The client has passed 802.1X authentication, and the authentication server did not send an Aruba-User-Role VSA. D. The client has passed 802.1X authentication, and the value in the Aruba-User-Role VSA matches a role on the MC.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

How can hackers implement a man-in-the-middle (MITM) attack against a wireless client?

A. The hacker runs an NMap scan on the wireless client to find its MAC and IP address. The hacker then connects to another network and spoofs those addresses. B. The hacker uses a combination of software and hardware to jam the RF band and prevent the client from connecting to any wireless networks. C. The hacker uses spear-phishing to probe for the IP addresses that the client is attempting to reach. The hacker device then spoofs those IP addresses. D. The hacker connects a device to the same wireless network as the client and responds to the client's ARP requests with the hacker device's MAC address.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?

A. that the MC has valid admin credentials configured on it for logging into the CPPM B. that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM C. that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized D. that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

You have deployed a new HPE Aruba Networking Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.1X authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). When you test connecting the client to the WLAN, the test fails. You check ClearPass Access Tracker and cannot find a record of the authentication attempt. You ping from the MC to CPPM, and the ping is successful.
What is a good next step for troubleshooting?

A. Reset the user credentials. B. Renew CPPM's RADIUS/EAP certificate. C. Check CPPM Event Viewer. D. Check connectivity between CPPM and a backend directory server.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 11

Which is a correct description of a Public Key Infrastructure (PKI)?

A. A user must manually choose to trust a root Certification Authority (CA) certificate, or the root CA certificate must be installed on the device as trusted. B. A device uses Intermediate Certification Authorities (CAs) to enable it to trust root CAs that are different from the root CA that signed its own certificate. C. A user must manually choose to trust intermediate and end-entity certificates, or those certificates must be installed on the device as trusted in advance. D. Root Certification Authorities (CAs) primarily sign certificates, and Intermediate Certification Authorities (CAs) primarily validate signatures.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 12

A company has an ArubaOS solution. The company wants to prevent users assigned to the "user_group1" role from using gaming and peer-to-peer applications.
What is the recommended approach for these requirements?

A. Create service aliases for the TCP ports associated with gaming and peer-to-per applications, and use those aliases in access control rules for the "user_group" rules. B. Create ALGs for the gaming and peer-to-peer applications, and deny the "user_group1" role on the ALGs. C. Make sure DPI is enabled, and add application rules that deny gaming and peer-to-peer applications to the "user_groupr role. D. Add access control rules to the "user_group1" role, which deny HTTP/HTTPS traffic to IP addresses associated with gaming and peer-to-peer applications.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

HP Aruba Certified Network Security Associate - HPE6-A78 Exam Practice Test