HPE6-A78 시험 - HP실제시험문제와 답 - 60문항

Question No : 1

You have been instructed to look in the ArubaOS Security Dashboard's client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers
Which client fits this description?

A.MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering
B.MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor
C.MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering
D.MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

정답:

Question No : 2

You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access Tracker
What is something you can do to look for the records?

A.Make sure that CPPM cluster settings are configured to show Access-Rejects
B.Verify that you are logged in to the CPPM Ul with read-write, not read-only, access
C.Click Edit in Access viewer and make sure that the correct servers are selected.
D.Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

정답:

Question No : 3

A company with 382 employees wants to deploy an open WLAN for guests.
The company wants the experience to be as follows:

The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

A.WPA3-Personal and MAC-Auth
B.Captive portal and WPA3-Personai
C.Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode
D.Opportunistic Wireless Encryption (OWE) and WPA3-Personal

정답:

Question No : 4

Refer to the exhibit.

HP-HPE6-A7827_1

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn- 2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP
What Is the proper way to configure the switches to meet these requirements?

A.On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.
B.On Switch-2, make ports connected to employee devices trusted ports for ARP protection
C.On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection
D.On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

정답:

Question No : 5

Refer to the exhibit.

HP-HPE6-A7826_1

Device A is establishing an HTTPS session with the Arubapedia web sue using Chrome.
The Arubapedia web server sends the certificate shown in the exhibit
What does the browser do as part of vacating the web server certificate?

A.It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate's signature.
B.It uses the public key in the DigCert root CA certificate to check the certificate signature
C.It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate's signature.
D.It uses the private key in the Arubapedia web site's certificate to check that certificate's signature

정답:

Question No : 6

Refer to the exhibit.

HP-HPE6-A7825_1

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs
Which setting should you change to follow Aruba best security practices?

A.Change the local user role to read-only
B.Clear the MSCHAP check box
C.Disable local authentication
D.Change the default role to "guest-provisioning"

정답:

Question No : 7

You are managing an Aruba Mobility Controller (MC) .
What is a reason for adding a "Log Settings" definition in the ArubaOS Diagnostics > System > Log Settings page?

A.Configuring the Syslog server settings for the server to which the MC forwards logs for a particular category and level
B.Configuring the MC to generate logs for a particular event category and level, but only for a specific user or A
C.Configuring a filter that you can apply to a defined Syslog server in order to filter events by subcategory
D.Configuring the log facility and log format that the MC will use for forwarding logs to all Syslog servers

정답:

Question No : 8

What is a benefit or Protected Management Frames (PMF). sometimes called Management Frame Protection (MFP)?

A.PMF helps to protect APs and MCs from unauthorized management access by hackers.
B.PMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.
C.PMF prevents hackers from capturing the traffic between APs and Mobility Controllers.
D.PMF protects clients from DoS attacks based on forged de-authentication frames

정답:

Question No : 9

A company has Aruba Mobility Controllers (MCs). Aruba campus APs. and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The ClearPass admins tell you that they want to run Network scans as part of the solution
What should you do to configure the infrastructure to support the scans?

A.Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate
B.Create device fingerprinting profiles on the ArubaOS-Switches that include SNM
C.and apply the profiles to edge ports
D.Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.
E.Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

정답:

Question No : 10

What are the roles of 802.1X authenticators and authentication servers?

A.The authenticator stores the user account database, while the server stores access policies.
B.The authenticator supports only EAP, while the authentication server supports only RADIU
C.The authenticator is a RADIUS client and the authentication server is a RADIUS server.
D.The authenticator makes access decisions and the server communicates them to the supplicant.

정답:

Question No : 11

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)

A.users are logging in with the wrong usernames and passwords or invalid certificates.
B.Clients are configured to use a mismatched EAP method from the one In the CPPM service.
C.The RADIUS shared secret does not match between the switch and CPP
D.CPPM does not have a network device defined for the switch's IP address.
E.Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

정답:

Question No : 12

You are deploying an Aruba Mobility Controller (MC) .
What is a best practice for setting up secure management access to the ArubaOS Web UP?

A.Avoid using external manager authentication tor the Web U
B.Change the default 4343 port tor the web UI to TCP 443.
C.Install a CA-signed certificate to use for the Web UI server certificate.
D.Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

정답:

Question No : 13

A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?

A.one AP license per-switch
B.one PEF license per-switch
C.one PEF license per-switch. and one WCC license per-switch
D.one AP license per-switch. and one PEF license per-switch

정답:

Question No : 14

CORRECT TEXT
How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

A.The firewall applies every rule that includes the dent's IP address as the source.
B.The firewall applies the rules in policies associated with the client's wlan
C.The firewall applies thee rules in policies associated with the client's user role.
D.The firewall applies every rule that includes the client's IP address as the source or destination.

정답:

Question No : 15

What is a benefit of deploying Aruba ClearPass Device insight?

A.Highly accurate endpoint classification for environments with many devices types, including Internet of Things (loT)
B.visibility into devices' 802.1X supplicant settings and automated certificate deployment
C.Agent-based analysts of devices' security settings and health status, with the ability to implement quarantining
D.Simpler troubleshooting of ClearPass solutions across an environment with multiple ClearPass Policy Managers

정답:

HP HPE6-A78 시험