HPE6-A78 HP Exam Questions and Free Practice Test

Question 7

You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.
What is a good next step for troubleshooting?

A. Renew CPPM's RADIUS/EAP certificate

B. Reset the user credentials

C. Check CPPM Event viewer.

D. Check connectivity between CPPM and a backend directory server

Correct Answer:C

Question 8

What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

A. In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

B. In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

C. In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.

D. In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate

Correct Answer:A

Question 9

A company with 382 employees wants to deploy an open WLAN for guests. The company wants the experience to be as follows:
HPE6-A78 dumps exhibit
The company also wants to provide encryption for the network for devices mat are capable, you implement Tor the WLAN?
Which security options should

A. WPA3-Personal and MAC-Auth

B. Captive portal and WPA3-Personai

C. Captive portal and Opportunistic Wireless Encryption (OWE) in transition mode

D. Opportunistic Wireless Encryption (OWE) and WPA3-Personal

Correct Answer:C

Question 10

What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

A. The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.

B. The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.

C. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.

D. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

Correct Answer:C

Question 11

You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC). What should you do to enhance security for control channel communications between the switches and the MC?

A. Create one UBT zone for control traffic and a second UBT zone for clients.

B. Configure a long, random PAPI security key that matches on the switches and the MC.

C. install certificates on the switches, and make sure that CPsec is enabled on the MC

D. Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

Correct Answer:C

Question 12

You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP

A. Avoid using external manager authentication tor the Web UI.

B. Change the default 4343 port tor the web UI to TCP 443.

C. Install a CA-signed certificate to use for the Web UI server certificate.

D. Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

Correct Answer:C

START HPE6-A78 EXAM