HP Aruba Certified Network Security Associate - HPE6-A78 Free Exam Questions

A. Configure a ClearPass username and password in the MyEmployees AAA profile.

B. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.

C. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.

D. Enable the dynamic authorization setting in the "clearpass" authentication server settings.

A. This approach cannot work because the ArubaOS-CX switches do not support TACACS+.

B. This approach will work, but will need to be adjusted later if you want to assign managers to the default auditors group.

C. This approach cannot work because the ArubaOS-CX switches do not accept standard TACACS+ privilege levels.

D. This approach will work to assign admins to the default "administrators" group, but not to the default "operators" group.

A. Rootkits can help hackers gain elevated access to a system and often actively conceal themselves from detection.

B. Worms are usually delivered in spear-phishing attacks and require users to open and run a file.

C. Malvertising can only infect a system if the user encounters the malware on an untrustworthy site.

D. A Trojan is any type of malware that replicates itself and spreads to other systems automatically.

A. EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

B. EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

C. EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

D. EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

A. Configuring a PAPI key that matches on the APs and MCs

B. Approving the APs as authorized APs on the AP whitelist

C. Installing CA-signed certificates on the APs

D. Installing self-signed certificates on the APs

A. A user fails 802.1X authentication. The client remains connected, but is assigned the "guest" role.

B. A user authenticates successfully with 802.1X, and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employeel." The client's role is "employeel."

C. A user authenticates successfully with 802.1X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employee." The client's role is "guest."

D. A user authenticates successfully with 802.1 X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employeel." The client's role is "guest."

A. Install a CA-signed certificate to use for the Web UI server certificate.

B. Avoid using external manager authentication tor the Web UI.

C. Change the default 4343 port tor the web UI to TCP 443.

D. Make sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

A. It negotiates with each user's device to determine which EAP method is used for authentication.

B. It determines which resources authenticated users are allowed to access and monitors each user's session.

C. It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

D. It enforces access to network services and sends accounting information to the AAA server.

A. Create remote mirrors on the ArubaOS-Swrtches that collect traffic on edge ports, and mirror it to CPPM's IP address.

B. Create device fingerprinting profiles on the ArubaOS-Switches that include SNMP. and apply the profiles to edge ports

C. Create a TA profile on the ArubaOS-Switches with the root CA certificate for ClearPass's HTTPS certificate

D. Create SNMPv3 users on ArubaOS-CX switches, and make sure that the credentials match those configured on CPPM

A. what are the first steps that a company can take to implement micro-segmentation in their environment

B. which data should be routinely logged, where logs should be forwarded, and which logs should be archived

C. to which resources should various users be allowed access, based on their identity and the identity of their clients

D. which type of EAP method is most secure for authenticating wired and wireless users with 802.1