[Aug 24, 2023] Get Up-To-Date Real Exam Questions for HPE6-A78 with New Materials
Updated HPE6-A78 Certification Exam Sample Questions
NEW QUESTION # 29
You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP
- A. Avoid using external manager authentication tor the Web UI.
- B. Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.
- C. Change the default 4343 port tor the web UI to TCP 443.
- D. Install a CA-signed certificate to use for the Web UI server certificate.
Answer: D
NEW QUESTION # 30
How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?
- A. The firewall applies thee rules in policies associated with the client's user role.
- B. The firewall applies the rules in policies associated with the client's wlan
- C. The firewall applies every rule that includes the client's IP address as the source or destination.
- D. The firewall applies every rule that includes the dent's IP address as the source.
Answer: D
NEW QUESTION # 31
Refer to the exhibit.
How can you use the thumbprint?
- A. Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations
- B. When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring
- C. Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort
- D. install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.
Answer: B
NEW QUESTION # 32
What is an example or phishing?
- A. An attacker lures clients to connect to a software-based AP that is using a legitimate SSID.
- B. An attacker checks a user's password by using trying millions of potential passwords.
- C. An attacker sends emails posing as a service team member to get users to disclose their passwords.
- D. An attacker sends TCP messages to many different ports to discover which ports are open.
Answer: C
NEW QUESTION # 33
From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?
- A. ClearPass Onboard
- B. ClearPass OnGuard
- C. ClearPass Access Tracker
- D. ClearPass Guest
Answer: B
NEW QUESTION # 34
You are managing an Aruba Mobility Controller (MC). What is a reason for adding a "Log Settings" definition in the ArubaOS Diagnostics > System > Log Settings page?
- A. Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory
- B. Configuring the MC to generate logs for a particular event category and level, but only for a specific user or AP.
- C. Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level
- D. Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers
Answer: C
NEW QUESTION # 35
Refer to the exhibit.
You are deploying a new ArubaOS Mobility Controller (MC), which is enforcing authentication to Aruba ClearPass Policy Manager (CPPM). The authentication is not working correctly, and you find the error shown In the exhibit in the CPPM Event Viewer.
What should you check?
- A. that the MC has valid admin credentials configured on it for logging into the CPPM
- B. that the MC has been added as a domain machine on the Active Directory domain with which CPPM is synchronized
- C. that the IP address that the MC is using to reach CPPM matches the one defined for the device on CPPM
- D. that the snared secret configured for the CPPM authentication server matches the one defined for the device on CPPM
Answer: C
NEW QUESTION # 36
Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?
- A. the match method
- B. the detecting devices
- C. the match type
- D. the confidence level
Answer: A
NEW QUESTION # 37
What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?
- A. It resides on-prem and is responsible for running active SNMP and Nmap scans
- B. It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors
- C. It resides on-prem and provides the span port to which traffic is mirrored for deep analytics.
- D. It resides in the cloud and manages licensing and configuration for Collectors
Answer: B
NEW QUESTION # 38
An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?
- A. RADIUS only
- B. DHCP, DNS and RADIUS only
- C. EAP only
- D. DHCP, DNS, and EAP only
Answer: C
NEW QUESTION # 39
You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs What is one approach that you can take to find the relevant logs?
- A. Configure a logging Tiller for the "port-access" category, and apply that filter globally.
- B. Specify a logging facility that selects for "port-access" messages.
- C. Enable debugging for "portaccess" to move the relevant logs to a buffer.
- D. Add the "-C and *-c port-access" options to the "show logging" command.
Answer: D
NEW QUESTION # 40
What is one way that Control Plane Security (CPsec) enhances security for me network?
- A. It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).
- B. It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs") control plane.
- C. It protects wireless clients' traffic tunneled between APs and Mobility Controllers, from eavesdropping
- D. It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.
Answer: C
NEW QUESTION # 41
You have detected a Rogue AP using the Security Dashboard Which two actions should you take in responding to this event? (Select two)
- A. This is a serious security event, so you should always contain the AP immediately regardless of your company's specific policies.
- B. You should receive permission before containing an AP. as this action could have legal Implications.
- C. There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.
- D. There is no need to locale the AP If you manually contain It.
- E. For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP's MAC address.
Answer: A,E
NEW QUESTION # 42
What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?
- A. it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.
- B. it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.
- C. it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.
- D. it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks
Answer: C
NEW QUESTION # 43
You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC).
What should you do to enhance security for control channel communications between the switches and the MC?
- A. install certificates on the switches, and make sure that CPsec is enabled on the MC
- B. Create one UBT zone for control traffic and a second UBT zone for clients.
- C. Configure a long, random PAPI security key that matches on the switches and the MC.
- D. Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.
Answer: A
NEW QUESTION # 44
What is a benefit or Protected Management Frames (PMF). sometimes called Management Frame Protection (MFP)?
- A. PMF prevents hackers from capturing the traffic between APs and Mobility Controllers.
- B. PMF helps to protect APs and MCs from unauthorized management access by hackers.
- C. PMF protects clients from DoS attacks based on forged de-authentication frames
- D. PMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.
Answer: B
NEW QUESTION # 45
Refer to the exhibit.
You have set up a RADIUS server on an ArubaOS Mobility Controller (MC) when you created a WLAN named "MyEmployees .You now want to enable the MC to accept change of authorization (CoA) messages from this server for wireless sessions on this WLAN.
What Is a part of the setup on the MC?
- A. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.
- B. Configure a ClearPass username and password in the MyEmployees AAA profile.
- C. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.
- D. Enable the dynamic authorization setting in the "clearpass" authentication server settings.
Answer: A
NEW QUESTION # 46
Refer to the exhibit.
This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?
- A. Change the local user role to read-only
- B. Change the default role to "guest-provisioning"
- C. Clear the MSCHAP check box
- D. Disable local authentication
Answer: B
NEW QUESTION # 47
Which is a correct description of a stage in the Lockheed Martin kill chain?
- A. In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.
- B. In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.
- C. In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.
- D. In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.
Answer: C
NEW QUESTION # 48
What is an Authorized client as defined by ArubaOS Wireless Intrusion Prevention System (WIP)?
- A. a client that is not on the WIP blacklist
- B. a client that has a certificate issued by a trusted Certification Authority (CA)
- C. a client that is on the WIP whitelist.
- D. a client that has successfully authenticated to an authorized AP and passed encrypted traffic
Answer: D
NEW QUESTION # 49
What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?
- A. A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device
- B. A DDoS attack originates from external devices, while a DoS attack originates from internal devices
- C. A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device
- D. A DoS attack targets one server, a DDoS attack targets all the clients that use a server
Answer: B
NEW QUESTION # 50
What is a benefit or using network aliases in ArubaOS firewall policies?
- A. You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.
- B. You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall
- C. You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update
- D. You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.
Answer: D
NEW QUESTION # 51
What are the roles of 802.1X authenticators and authentication servers?
- A. The authenticator is a RADIUS client and the authentication server is a RADIUS server.
- B. The authenticator supports only EAP, while the authentication server supports only RADIUS.
- C. The authenticator stores the user account database, while the server stores access policies.
- D. The authenticator makes access decisions and the server communicates them to the supplicant.
Answer: D
NEW QUESTION # 52
......
HP HPE6-A78 certification exam is an essential credential for network security professionals who work with Aruba products and solutions. It demonstrates a candidate's knowledge and expertise in network security and provides an important foundation for career advancement in this field.
HPE6-A78 Study Guide Cover to Cover as Literally: https://www.getvalidtest.com/HPE6-A78-exam.html
Get Unlimited Access to HPE6-A78 Certification Exam Cert Guide: https://drive.google.com/open?id=1AYIxsN33wrWp5ckzXaDk4uqC_B2py4qq