HPE6-A84 by HP Actual Free Exam Questions And Answers

Question 1

Refer to the scenario.
A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster.
In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as
"Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also.
You want an easy way to communicate the information that an IoT client has used SSH to Aruba ClearPass Policy Manager (CPPM).
What step should you take?

A. On Central set up CPPM as a Webhook application.

B. On Central configure APs and gateways to use CPPM as the RADIUS accounting server.

C. On CPPM enable Device Insight integration.

D. On CPPM create an Endpoint Context Server that points to the Central API.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

You are configuring gateway IDS/IPS settings in Aruba Central.
For which reason would you set the Fail Strategy to Bypass?

A. To permit traffic if the IPS engine falls to inspect It

B. To enable the gateway to honor the allowlist settings configured in IDS/IPS policies

C. To tell gateways to stop enforcing IDS/IPS policies if they lose connectivity to the Internet

D. To avoid wasting IPS engine resources on filtering traffic for unauthenticated clients

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Refer to the scenario.
A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster.
In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as
"Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also.
You want a fast way to find a list of all the IoT clients that have used SSH.
What step can you take?

A. Run a search for SSH traffic and loT client IDs in Aruba ClearPass Policy Manager's (CPPM's) accounting information.

B. Use Central's Live Events monitoring tool to detect which clients meet the desired criteria.

C. Use Central's Gateway IDS/IPS Security Dashboard to search for SSH events and sources.

D. Create and apply a Central client profile tag that selects the SSH application and the clients' category.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

You are reviewing an endpoint entry in ClearPass Policy Manager (CPPM) Endpoints Repository.
What is a good sign that someone has been trying to gain unauthorized access to the network?

A. The entry shows a profile conflict of having a new profile of Computer for a profiled Printer.

B. The entry shows an Unknown status.

C. The entry lacks a hostname or includes a hostname with long seemingly random characters.

D. The entry shows multiple DHCP options under the fingerprints.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

A company has Aruba gateways and wants to start implementing gateway IDS/IPS. The customer has selected Block for the Fail Strategy.
What might you recommend to help minimize unexpected outages caused by using this particular fall strategy?

A. Setting the IDS or IPS policy to the least restrictive option, Lenient

B. Configuring a relatively high threshold for the gateway threat count alerts

C. Making sure that the gateways have formed a cluster and operate in default gateway mode

D. Enabling alerts and email notifications for events related to gateway IPS engine utilization and errors

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

A company has an Aruba ClearPass server at 10.47.47.8, FQDN radius.acnsxtest.local. This exhibit shows ClearPass Policy Manager's (CPPM's) settings for an Aruba Mobility Controller (MC).

The MC is already configured with RADIUS authentication settings for CPPM, and RADIUS requests between the MC and CPPM are working. A network admin enters and commits this command to enable dynamic authorization on the MC:
aaa rfc-3576-server 10.47.47.8
But when CPPM sends CoA requests to the MC, they are not working. This exhibit shows the RFC 3576 server statistics on the MC:

How could you fix this issue?

A. Configure the MC to obtain the time from a valid NTP server.

B. Change the UDP port in the MCs' RFC 3576 server config to 3799.

C. Make sure that CPPM is using an ArubaOS Wireless RADIUS CoA enforcement profile.

D. Enable RadSec on the MCs' RFC 3676 server config.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

HP Aruba Certified Network Security Expert Written - HPE6-A84 Exam Practice Test

Contact Us

Useful Links

Latest Updated