[2022] Pass HP HPE6-A78 Exam Updated 62 Questions [Q31-Q52]

4/5 - (1 vote)

[2022] Pass HP HPE6-A78 Exam Updated 62 Questions

Get 2022 Updated Free HP HPE6-A78 Exam Questions and Answer

HP HPE6-A78 Exam Syllabus Topics:

Topic	Details
Topic 1	Collect and monitor historical network pattern data Describe firewall (PEF), dynamic segmentation, RBAC, AppRF
Topic 2	Explain common security protocols and their use cases Compare endpoint classifications methods
Topic 3	Compare and contrast wired LAN methodologies Explain the purpose and methods of a packet capture
Topic 4	Explain attack stages and kill chain Identify the difference between a threat and a vulnerability
Topic 5	Compare and contrast wireless LAN methodologies Describe user roles and policy enforcement
Topic 6	Identify and evaluate discovered endpoints Describe common security threats

NO.31 Which is a correct description of a stage in the Lockheed Martin kill chain?

In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.

In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.

In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.

In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.

NO.32 What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

WPA3-Personai prevents eavesdropping on other users’ wireless traffic by a user who knows the passphrase for the WLAN.

WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

WPA3-Personal is more complicated to deploy because it requires a backend authentication server

NO.33 Refer to the exhibit.

You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?

that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized

that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM

that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM

that the MC has valid admin credentials configured on it for logging into the CPPM

NO.34 You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker What is something you can do to look for the records?

Make sure that CPPM cluster settings are configured to show Access-Rejects

Verify that you are logged in to the CPPM Ul with read-write, not read-only, access

Click Edit in Access viewer and make sure that the correct servers are selected.

Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

NO.35 Refer to the exhibit.

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP What Is the proper way to configure the switches to meet these requirements?

On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

On Switch-2, make ports connected to employee devices trusted ports for ARP protection

On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

NO.36 A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:

The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

WPA3-Personal and MAC-Auth

Captive portal and WPA3-Personai

Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

Opportunistic Wireless Encryption (OWE) and WPA3-Personal

NO.37 Which correctly describes a way to deploy certificates to end-user devices?

ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

NO.38 What is one practice that can help you to maintain a digital chain or custody In your network?

Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

NO.39 Refer to the exhibit.

Device A is establishing an HTTPS session with the Arubapedia web sue using Chrome. The Arubapedia web server sends the certificate shown in the exhibit What does the browser do as part of vacating the web server certificate?

It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate’s signature.

It uses the public key in the DigCert root CA certificate to check the certificate signature

It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate’s signature.

It uses the private key in the Arubapedia web site’s certificate to check that certificate’s signature

NO.40 What is a guideline for managing local certificates on an ArubaOS-Switch?

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

NO.41 What is a vulnerability of an unauthenticated Dime-Heliman exchange?

A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

NO.42 Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers’ roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

Change the local user role to read-only

Clear the MSCHAP check box

Disable local authentication

Change the default role to “guest-provisioning”

NO.43 Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches’ CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?

Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

Specify 192.168.1.0.255.255.255.0 as authorized IP manager address

Configure the switch to listen for these protocols on OOBM only.

Specify vlan 100 as the management vlan for the switches.

NO.44 You have been instructed to look in the ArubaOS Security Dashboard’s client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers Which client fits this description?

MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering

MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor

MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering

MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

NO.45 You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC).
What should you do to enhance security for control channel communications between the switches and the MC?

Create one UBT zone for control traffic and a second UBT zone for clients.

Configure a long, random PAPI security key that matches on the switches and the MC.

install certificates on the switches, and make sure that CPsec is enabled on the MC

Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

NO.46 What is a correct guideline for the management protocols that you should use on ArubaOS-Switches?

Disable Telnet and use TFTP instead.

Disable SSH and use https instead.

Disable Telnet and use SSH instead

Disable HTTPS and use SSH instead

NO.47 What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

You want the MC to analyze wireless clients’ traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

NO.48 A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user’s Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC’s) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

the reports generated by Aruba ClearPass Insight

the RADIUS events within the CPPM Event Viewer

the Alerts tab in the authentication record in CPPM Access Tracker

the packets captured on the MC control plane destined to UDP 1812

NO.49 Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?

The AP Is connected to your LAN because It is transmitting wireless traffic with your network’s default gateway’s MAC address as a source MAC Because it does not belong to the company, it is a rogue

The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company’s wireless services, so It is a rogue

The AP has been detected as launching a DoS attack against your company’s default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

NO.50 You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs What is one approach that you can take to find the relevant logs?

Add the “-C and *-c port-access” options to the “show logging” command.

Configure a logging Tiller for the “port-access” category, and apply that filter globally.

Enable debugging for “portaccess” to move the relevant logs to a buffer.

Specify a logging facility that selects for “port-access” messages.

NO.51 A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps.
What is one benefit of adding Aruba Airwave from the perspective of forensics?

Airwave can provide more advanced authentication and access control services for the AmbaOS solution

Airwave retains information about the network for much longer periods than ArubaOS solution

Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution

AirWave enables low level debugging on the devices across the ArubaOS solution

NO.52 What is one way that Control Plane Security (CPsec) enhances security for me network?

It protects wireless clients’ traffic tunneled between APs and Mobility Controllers, from eavesdropping

It prevents Denial of Service (DoS) attacks against Mobility Controllers’ (MCs”) control plane.

It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).

It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

Verified HPE6-A78 exam dumps Q&As with Correct 62 Questions and Answers: https://www.troytecdumps.com/HPE6-A78-troytec-exam-dumps.html

High-quality Troytec review files

[2022] Pass HP HPE6-A78 Exam Updated 62 Questions [Q31-Q52]

HP HPE6-A78 Exam Syllabus Topics:

troytecdumps

Leave a Reply Cancel reply

HP HPE6-A78 Exam Syllabus Topics:

Related Posts

[2026] Use Real HP Dumps – 100% Free HPE7-A01 Exam Dumps [Q45-Q59]

HPE6-A90 Dumps PDF – HPE6-A90 Real Exam Questions Answers [Q34-Q49]

Quality HPE7-A11 PDF Dumps – HPE7-A11 Exam Questions [Q42-Q66]

troytecdumps

Leave a Reply Cancel reply