HPE6-A78 Online Practice Questions and Answers

You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs. What is one approach that you can take to find the relevant logs?

A. Add the "-C and *-c port-access" options to the "show logging" command.

B. Configure a logging Tiller for the "port-access" category, and apply that filter globally.

C. Enable debugging for "portaccess" to move the relevant logs to a buffer.

D. Specify a logging facility that selects for "port-access" messages.

A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type The ClearPass admins tell you that they want to run Network scans as part of the solution.

What should you do to configure the infrastructure to support the scans?

A. Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

B. Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

C. Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.

D. Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI

BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table

The security team asks you to explain why this AP is classified as a rogue. What should you explain?

A. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue

B. The ap has a BSSID mat matches authorized client MAC addresses. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue

C. The AP has been detected as launching a DoS attack against your company's default gateway. This qualities it as a rogue which needs to be contained with wireless association frames immediately

D. The AP is spoofing a routers MAC address as its BSSID. This indicates mat, even though WIP cannot determine whether the AP is connected to your LAN. it is a rogue.

You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP?

A. Avoid using external manager authentication tor the Web UI.

B. Change the default 4343 port tor the web UI to TCP 443.

C. Install a CA-signed certificate to use for the Web UI server certificate.

D. Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

What is an example or phishing?

A. An attacker sends TCP messages to many different ports to discover which ports are open.

B. An attacker checks a user's password by using trying millions of potential passwords.

C. An attacker lures clients to connect to a software-based AP that is using a legitimate SSID.

D. An attacker sends emails posing as a service team member to get users to disclose their passwords.

A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps. What is one benefit of adding Aruba Airwave from the perspective of forensics?

A. Airwave can provide more advanced authentication and access control services for the AmbaOS solution

B. Airwave retains information about the network for much longer periods than ArubaOS solution

C. Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution

D. AirWave enables low level debugging on the devices across the ArubaOS solution

A. the match method

B. the detecting devices

C. the match type

D. the confidence level

An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication.

Which type of traffic does the authenticator accept from the client?

A. EAP only

B. DHCP, DNS and RADIUS only

C. RADIUS only

D. DHCP, DNS, and EAP only

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.

What are two possible problems that have this symptom? (Select two)

A. users are logging in with the wrong usernames and passwords or invalid certificates.

B. Clients are configured to use a mismatched EAP method from the one In the CPPM service.

C. The RADIUS shared secret does not match between the switch and CPPM.

D. CPPM does not have a network device defined for the switch's IP address.

E. Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

What is one way that Control Plane Security (CPsec) enhances security for me network?

A. It protects wireless clients' traffic tunneled between APs and Mobility Controllers, from eavesdropping

B. It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs") control plane.

C. It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).

D. It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.