2022 HPE6-A78 Question Bank Free PDF Download Recently Updated Questions [Q26-Q40]

18Jun 2022 by admin No Comments

4.2/5 - (4 votes)

2022 HPE6-A78 Question Bank: Free PDF Download Recently Updated Questions

HPE6-A78 Certification Exam Dumps with 62 Practice Test Questions

HP HPE6-A78 Exam Syllabus Topics:

Topic	Details
Topic 1	Compare and contrast wired LAN methodologies Explain the purpose and methods of a packet capture
Topic 2	Explain social engineering and defense Describe PKI components
Topic 3	Disable insecure protocols and follow best practices for implement secure management protocols such as SSH, HTTPS
Topic 4	Describe and deploy basic user roles for wireless users Define and deploy basic user roles for wired users
Topic 5	View and acknowledge WIPS and WIDS, alarms Troubleshoot with access tracker
Topic 6	Explain attack stages and kill chain Identify the difference between a threat and a vulnerability

NO.26 How should admins deal with vulnerabilities that they find in their systems?

They should apply fixes, such as patches, to close the vulnerability before a hacker exploits it.

They should add the vulnerability to their Common Vulnerabilities and Exposures (CVE).

They should classify the vulnerability as malware. a DoS attack or a phishing attack.

They should notify the security team as soon as possible that the network has already been breached.

NO.27 Which is a correct description of a stage in the Lockheed Martin kill chain?

In the delivery stage, malware collects valuable data and delivers or exfilltrated it to the hacker.

In the reconnaissance stage, the hacker assesses the impact of the attack and how much information was exfilltrated.

In the weaponization stage, which occurs after malware has been delivered to a system, the malware executes Its function.

In the exploitation and installation phases, malware creates a backdoor into the infected system for the hacker.

NO.28 What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?

It resides in the cloud and manages licensing and configuration for Collectors

It resides on-prem and provides the span port to which traffic is mirrored for deep analytics.

It resides on-prem and is responsible for running active SNMP and Nmap scans

It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors

NO.29 Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

Assign the WLAN to a single new VLAN which is dedicated to wireless users

Use wireless user roles to assign the devices to different VLANs in the 100-150 range

Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

Use wireless user roles to assign the devices to a range of new vlan IDs.

NO.30 You have been asked to rind logs related to port authentication on an ArubaOS-CX switch for events logged in the past several hours But. you are having trouble searching through the logs What is one approach that you can take to find the relevant logs?

Add the “-C and *-c port-access” options to the “show logging” command.

Configure a logging Tiller for the “port-access” category, and apply that filter globally.

Enable debugging for “portaccess” to move the relevant logs to a buffer.

Specify a logging facility that selects for “port-access” messages.

NO.31 What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

applying firewall policies and deep packet inspection to wired clients

enhancing the security of communications from the access layer to the core with data encryption

securing the network infrastructure control plane by creating a virtual out-of-band-management network

simplifying network infrastructure management by using the MC to push configurations to the switches

NO.32 Refer to the exhibit.

Device A is establishing an HTTPS session with the Arubapedia web sue using Chrome. The Arubapedia web server sends the certificate shown in the exhibit What does the browser do as part of vacating the web server certificate?

It uses the public key in the DigCen SHA2 Secure Server CA certificate to check the certificate’s signature.

It uses the public key in the DigCert root CA certificate to check the certificate signature

It uses the private key in the DigiCert SHA2 Secure Server CA to check the certificate’s signature.

It uses the private key in the Arubapedia web site’s certificate to check that certificate’s signature

NO.33 Which correctly describes a way to deploy certificates to end-user devices?

ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

NO.34 A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps.
What is one benefit of adding Aruba Airwave from the perspective of forensics?

Airwave can provide more advanced authentication and access control services for the AmbaOS solution

Airwave retains information about the network for much longer periods than ArubaOS solution

Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution

AirWave enables low level debugging on the devices across the ArubaOS solution

NO.35 What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

NO.36 What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

WPA3-Personai prevents eavesdropping on other users’ wireless traffic by a user who knows the passphrase for the WLAN.

WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

WPA3-Personal is more complicated to deploy because it requires a backend authentication server

NO.37 You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)

users are logging in with the wrong usernames and passwords or invalid certificates.

Clients are configured to use a mismatched EAP method from the one In the CPPM service.

The RADIUS shared secret does not match between the switch and CPPM.

CPPM does not have a network device defined for the switch’s IP address.

Clients are not configured to trust the root CA certificate for CPPM’s RADIUS/EAP certificate.

NO.38 What correctly describes the Pairwise Master Key (PMK) in thee specified wireless security protocol?

In WPA3-Enterprise, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is unique per session and derived using Simultaneous Authentication of Equals.

In WPA3-Personal, the PMK is derived directly from the passphrase and is the same tor every session.

In WPA3-Personal, the PMK is the same for each session and is communicated to clients that authenticate

NO.39 An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication Which type of traffic does the authenticator accept from the client?

EAP only

DHCP, DNS and RADIUS only

RADIUS only

DHCP, DNS, and EAP only

NO.40 What is one practice that can help you to maintain a digital chain or custody In your network?

Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

Loading …

New HPE6-A78 Exam Dumps with High Passing Rate: https://www.practicematerial.com/HPE6-A78-exam-materials.html

HP HPE6-A78 Exam Syllabus Topics:

Leave a Reply Cancel reply