HP Aruba Certified Network Security Associate - HPE6-A78 Exam Practice Test

A. You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.

B. ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

C. AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

D. TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

A. You should mirror traffic from the switch port that connects to the AP out on a port connected to a packet analyzer.

B. You should capture the traffic on the AP, so that the capture is as close to the source as possible.

C. You should use an Air Monitor (AM) to capture the packets in the air.

D. You should capture the traffic on the MC dataplane to obtain unencrypted traffic.

A. A hacker eavesdrops on insecure communications, such as Remote Desktop Program (RDP). and discovers login credentials.

B. An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

C. An email Is used to impersonate a Dank and trick users into entering their bank login information on a fake website page.

D. A user visits a website and downloads a file that contains a worm, which sell-replicates throughout the network.

A. Tarpit containment does not require an RF Protect license to function, while traditional wireless containment does.

B. Tarpit containment forms associations with clients to enable more effective containment with fewer disassociation frames than traditional wireless containment.

C. Rather than function wirelessly, tarpit containment sends ARP frames over the wired network to poison rogue APs ARP tables and prevent them from transmitting on the wired network.

D. Rather than target all clients connected to rogue APs, tarpit containment targets only authorized clients that are connected to a rogue AP, reducing the chance of negative effects on neighbors.

A. The role determines which firewall policies and bandwidth contract apply to the clients traffic

B. The role determines which control plane ACL rules apply to the client's traffic

C. The role determines which authentication methods the user must pass to gain network access

D. The role determines which wireless networks (SSiDs) a user is permitted to access

A. Assign the WLAN to a single new VLAN which is dedicated to wireless users

B. Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

C. Use wireless user roles to assign the devices to a range of new vlan IDs.

D. Use wireless user roles to assign the devices to different VLANs in the 100-150 range

A. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.

B. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.

C. Configure a ClearPass username and password in the MyEmployees AAA profile.

D. Enable the dynamic authorization setting in the "clearpass" authentication server settings.

A. CPPM sent a CoA message to the client to prompt the client to submit information that CPPM can use to profile it.

B. CPPM originally assigned the client to a role for non-profiled devices. It sent a CoA to the authenticator after it categorized the device.

C. CPPM first assigned the client to a role based on the user's identity. Then, it discovered that the client had an invalid category, so it sent a CoA to blacklist the client.

D. CPPM was never able to determine a device category for this device, so you need to check settings in the network infrastructure to ensure they support CPPM's endpoint classification.

A. One PEF license per switch, and one WCC license per switch

B. One AP license per switch

C. One PEF license per switch

D. One AP license per switch, and one PEF license per switch

A. HPE Aruba Networking Central

B. HPE Aruba Networking ClearPass OnGuard

C. HPE Aruba Networking EdgeConnect SD-WAN

D. HPE Aruba Networking ClearPass Onboard