Online HPE6-A78 Practice TestMore HP Products >

Free HP HPE6-A78 Exam Dumps Questions

HP HPE6-A78: Aruba Certified Network Security Associate Exam

- Get instant access to HPE6-A78 practice exam questions

- Get ready to pass the Aruba Certified Network Security Associate Exam exam right now using our HP HPE6-A78 exam package, which includes HP HPE6-A78 practice test plus an HP HPE6-A78 Exam Simulator.

- The best online HPE6-A78 exam study material and preparation tool is here.

4.5

(7020 ratings)

Question 1

What are the roles of 802.1X authenticators and authentication servers?

A. The authenticator stores the user account database, while the server stores access policies.

B. The authenticator supports only EAP, while the authentication server supports only RADIUS.

C. The authenticator is a RADIUS client and the authentication server is a RADIUS server.

D. The authenticator makes access decisions and the server communicates them to the supplicant.

Correct Answer:D

Question 2

Refer to the exhibit.
HPE6-A78 dumps exhibit
This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP
What Is the proper way to configure the switches to meet these requirements?

A. On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

B. On Switch-2, make ports connected to employee devices trusted ports for ARP protection

C. On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

D. On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

Correct Answer:D

Question 3

What is an example or phishing?

A. An attacker sends TCP messages to many different ports to discover which ports are open.

B. An attacker checks a user’s password by using trying millions of potential passwords.

C. An attacker lures clients to connect to a software-based AP that is using a legitimate SSID.

D. An attacker sends emails posing as a service team member to get users to disclose their passwords.

Correct Answer:D

Question 4

What is a difference between radius and TACACS+?

A. RADIUS combines the authentication and authorization process while TACACS+ separates them.

B. RADIUS uses TCP for Its connection protocol, while TACACS+ uses UDP tor its connection protocol.

C. RADIUS encrypts the complete packet, white TACACS+ only offers partial encryption.

D. RADIUS uses Attribute Value Pairs (AVPs) in its messages, while TACACS+ does not use them.

Correct Answer:A

Question 5

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

A. it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

B. it runs an NMap scan on the wireless client to And the clients MAC and IP addres

C. The hacker then connects to another network and spoofs those addresses.

D. it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

E. it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

Correct Answer:D

Question 6

Refer to the exhibit, which shows the current network topology.
HPE6-A78 dumps exhibit
You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security
What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

A. Assign the WLAN to a single new VLAN which is dedicated to wireless users

B. Use wireless user roles to assign the devices to different VLANs in the 100-150 range

C. Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

D. Use wireless user roles to assign the devices to a range of new vlan IDs.

Correct Answer:B

START HPE6-A78 EXAM