Free Aruba Certified Network Security Associate Exam HPE6-A78 Exam Practice Test

A company has an Aruba solution with a Mobility Master (MM) Mobility Controllers (MCs) and campus Aps. What is one benefit of adding Aruba Airwave from the perspective of forensics?

• Airwave can provide more advanced authentication and access control services for the AmbaOS solution
• Airwave retains information about the network for much longer periods than ArubaOS solution
• Airwave is required to activate Wireless Intrusion Prevention (WIP) services on the ArubaOS solution
• AirWave enables low level debugging on the devices across the ArubaOS solution

What is a vulnerability of an unauthenticated Dime-Heliman exchange?

• A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.
• A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values
• Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.
• Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

• WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password
• WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.
• WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters
• WPA3-Personal is more complicated to deploy because it requires a backend authentication server

What is a benefit or using network aliases in ArubaOS firewall policies?

• You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.
• You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall
• You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update
• You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

• the match method
• the detecting devices
• the match type
• the confidence level

You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.What is a good next step for troubleshooting?

• Renew CPPM's RADIUS/EAP certificate
• Reset the user credentials
• Check CPPM Event viewer.
• Check connectivity between CPPM and a backend directory server

You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC). What should you do to enhance security for control channel communications between the switches and the MC?

• Create one UBT zone for control traffic and a second UBT zone for clients.
• Configure a long, random PAPI security key that matches on the switches and the MC.
• install certificates on the switches, and make sure that CPsec is enabled on the MC
• Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

• Create the CSR online using the MC Web Ul if your company requires you to archive the private key.
• if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.
• Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.
• Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.What are the licensing requirements for the MC?

• one AP license per-switch
• one PEF license per-switch
• one PEF license per-switch. and one WCC license per-switch
• one AP license per-switch. and one PEF license per-switch

What are the roles of 802.1X authenticators and authentication servers?

• The authenticator stores the user account database, while the server stores access policies.
• The authenticator supports only EAP, while the authentication server supports only RADIUS.
• The authenticator is a RADIUS client and the authentication server is a RADIUS server.
• The authenticator makes access decisions and the server communicates them to the supplicant.