Download Free HPE6-A78 Questions and Answers To Assess Yourself

test2022-03-17T06:20:21+00:00

Preparing for HPE6-A78 Exam? Aruba Certified Network Security Associate Exam (HPE6-A78) validates candidates’ knowledge, skills, and ability to describe common security threats and vulnerabilities.Our HPE6-A78 practice questions are based on actual exam questions and will help you get the necessary knowledge to pass the HPE6-A78 exam. Our HPE6-A78 questions and answers make your preparation process simply because they are designed to help you pass your HPE6-A78 exam on the first try.

Take a free HPE6-A78 practice exam right now to see how prepared you are!

Page 1 of 2

1. Refer to the exhibit.

How can you use the thumbprint?

Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

2. An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port. The 802 1X supplicant on a connected client has not yet completed authentication.

Which type of traffic does the authenticator accept from the client?

EAP only

DHCP, DNS and RADIUS only

RADIUS only

DHCP, DNS, and EAP only

3. What is an example or phishing?

An attacker sends TCP messages to many different ports to discover which ports are open.

An attacker checks a user’s password by using trying millions of potential passwords.

An attacker lures clients to connect to a software-based AP that is using a legitimate SSI

An attacker sends emails posing as a service team member to get users to disclose their passwords.

4. Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security.

What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

Assign the WLAN to a single new VLAN which is dedicated to wireless users

Use wireless user roles to assign the devices to different VLANs in the 100-150 range

Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

Use wireless user roles to assign the devices to a range of new vlan IDs.

5. What is a benefit of deploying Aruba ClearPass Device insight?

Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)

visibility into devices' 802.1X supplicant settings and automated certificate deployment

Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining

Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

6. What is one of the roles of the network access server (NAS) in the AAA framewonx?

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

It negotiates with each user's device to determine which EAP method is used for authentication

It enforces access to network services and sends accounting information to the AAA server

It determines which resources authenticated users are allowed to access and monitors each users session

7. CORRECT TEXT

What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

8. Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces. The company also wants to let managers use these stations to access other parts of the network.

What should you do?

Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

Specify 192.168.1.0.255.255.255.0 as authorized IP manager address

Configure the switch to listen for these protocols on OOBM only.

Specify vlan 100 as the management vlan for the switches.

9. What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?

A DDoS attack originates from external devices, while a DoS attack originates from internal devices

A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device

A DoS attack targets one server, a DDoS attack targets all the clients that use a server

A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

10. What is a benefit of Opportunistic Wireless Encryption (OWE)?

It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN

It offers more control over who can connect to the wireless network when compared with WPA2-Personal

It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

Page 2 of 2

11. You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC) .

What should you do to enhance security for control channel communications between the switches and the MC?

Create one UBT zone for control traffic and a second UBT zone for clients.

Configure a long, random PAPI security key that matches on the switches and the M

install certificates on the switches, and make sure that CPsec is enabled on the MC

Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

12. What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

13. What is a guideline for managing local certificates on an ArubaOS-Switch?

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

14. What is a benefit or Protected Management Frames (PMF). sometimes called Management Frame Protection (MFP)?

PMF helps to protect APs and MCs from unauthorized management access by hackers.

PMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.

PMF prevents hackers from capturing the traffic between APs and Mobility Controllers.

PMF protects clients from DoS attacks based on forged de-authentication frames

15. Which correctly describes a way to deploy certificates to end-user devices?

ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates