Free Aruba Certified Network Security Associate Exam HPE6-A78 Exam Practice Test

You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC). What should you do to enhance security for control channel communications between the switches and the MC?

• Create one UBT zone for control traffic and a second UBT zone for clients.
• Configure a long, random PAPI security key that matches on the switches and the MC.
• install certificates on the switches, and make sure that CPsec is enabled on the MC
• Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?

• A DDoS attack originates from external devices, while a DoS attack originates from internal devices
• A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device
• A DoS attack targets one server, a DDoS attack targets all the clients that use a server
• A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

• ClearPass Onboard
• ClearPass Access Tracker
• ClearPass OnGuard
• ClearPass Guest

What are the roles of 802.1X authenticators and authentication servers?

• The authenticator stores the user account database, while the server stores access policies.
• The authenticator supports only EAP, while the authentication server supports only RADIUS.
• The authenticator is a RADIUS client and the authentication server is a RADIUS server.
• The authenticator makes access decisions and the server communicates them to the supplicant.

What are some functions of an AruDaOS user role?

• The role determines which authentication methods the user must pass to gain network access
• The role determines which firewall policies and bandwidth contract apply to the clients traffic
• The role determines which wireless networks (SSiDs) a user is permitted to access
• The role determines which control plane ACL rules apply to the client's traffic

An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authenticationWhich type of traffic does the authenticator accept from the client?

• EAP only
• DHCP, DNS and RADIUS only
• RADIUS only
• DHCP, DNS, and EAP only

You have detected a Rogue AP using the Security Dashboard Which two actions should you take in responding to this event? (Select two)

• There is no need to locale the AP If you manually contain It.
• This is a serious security event, so you should always contain the AP immediately regardless of your company's specific policies.
• You should receive permission before containing an AP. as this action could have legal Implications.
• For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP's MAC address.
• There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

• the match method
• the detecting devices
• the match type
• the confidence level

What is a correct guideline for the management protocols that you should use on ArubaOS-Switches?

• Disable Telnet and use TFTP instead.
• Disable SSH and use https instead.
• Disable Telnet and use SSH instead
• Disable HTTPS and use SSH instead

You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP

• Avoid using external manager authentication tor the Web UI.
• Change the default 4343 port tor the web UI to TCP 443.
• Install a CA-signed certificate to use for the Web UI server certificate.
• Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.