HP Aruba Certified Network Security Associate - HPE6-A78 Exam Practice Test

A. ClearPass admins will need to provide the credentials of an API admin account to configure on Aruba devices.

B. You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.

C. TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

D. ArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

A. WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

B. WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

C. WPA3-Personal is more complicated to deploy because it requires a backend authentication server

D. WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.

A. to prove knowledge of a passphrase without transmitting the passphrase

B. to obtain a digital certificate signed by a trusted Certification Authority

C. to agree on a shared secret in a secure manner over an insecure network

D. to signal that they want to use asymmetric encryption for future communications

A. Add logging categories at the global level.

B. Configure logging as a debug destination.

C. Ask for the Syslog password and configure it on the switch.

D. Specify the "warning" severity level for the logging server.

A. A user authenticates successfully with 802.1 X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employeel." The client's role is "guest."

B. A user fails 802.1X authentication. The client remains connected, but is assigned the "guest" role.

C. A user authenticates successfully with 802.1X, and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employeel." The client's role is "employeel."

D. A user authenticates successfully with 802.1X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employee." The client's role is "guest."

A. You want the MC to analyze wireless clients' traffic at a lower level, so that the AOS firewall can control Web traffic based on the destination URL.

B. The company wants to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

C. You want the MC to analyze wireless clients' traffic at a lower level, so that the AOS firewall can control the traffic based on application.

D. The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

A. Renew CPPM's RADIUS/EAP certificate.

B. Check connectivity between CPPM and a backend directory server.

C. Check CPPM Event Viewer.

D. Reset the user credentials.

A. It uses the public key in the DigCert root CA certificate to check the certificate signature

B. It uses the private key in the Arubapedia web site's certificate to check that certificate's signature

C. It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate's signature.

D. It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate's signature.

A. what are the first steps that a company can take to implement micro-segmentation in their environment

B. which data should be routinely logged, where logs should be forwarded, and which logs should be archived

C. which type of EAP method is most secure for authenticating wired and wireless users with 802.1

D. to which resources should various users be allowed access, based on their identity and the identity of their clients

A. Accepting and enforcing CoA messages

B. Assigning clients to their device categories

C. Enforcing access control decisions

D. Helping to forward profiling information to the component responsible for profiling

A. You should use an Air Monitor (AM) to capture the packets in the air.

B. You should capture the traffic on the MC dataplane to obtain unencrypted traffic.

C. You should capture the traffic on the AP, so that the capture is as close to the source as possible.

D. You should mirror traffic from the switch port that connects to the AP out on a port connected to a packet analyzer.

A. The packets captured on the MC control plane destined to UDP 1812

B. The RADIUS events within the CPPM Event Viewer

C. The Alerts tab in the authentication record in CPPM Access Tracker

D. The reports generated by HPE Aruba Networking ClearPass Insight

A. The firewall applies every rule that includes the client's IP address as the source or destination.

B. The firewall applies every rule that includes the client's IP address as the source.

C. The firewall applies the rules in policies associated with the client's WLAN.

D. The firewall applies the rules in policies associated with the client's user role.

A. Ensure that all network infrastructure devices use RADIUS rather than TACACS+ to authenticate managers.

B. Enable packet capturing on Instant AP or Mobility Controller (MC) controlpath on an ongoing basis.

C. Ensure that all network infrastructure devices receive a valid clock using authenticated NTP.

D. Enable packet capturing on Instant AP or Mobility Controller (MC) datapath on an ongoing basis.