Free HPE6-A78 Exam Dumps

Question 11

Refer to the exhibit.
HPE6-A78 dumps exhibit
This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP
What Is the proper way to configure the switches to meet these requirements?

A. On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.
B. On Switch-2, make ports connected to employee devices trusted ports for ARP protection
C. On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection
D. On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

Correct Answer:D

Question 12

Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP
SSID = PubllcWiFI BSSID = a8M27 12 34:56
Match method = Exact match
Match type = Eth-GW-wired-Mac-Table
The security team asks you to explain why this AP is classified as a rogue. What should you explain?

A. The AP Is connected to your LAN because It is transmitting wireless traffic with your network's default gateway's MAC address as a source MAC Because it does not belong to the company, it is a rogue
B. The ap has a BSSID mat matches authorized client MAC addresse
C. This indicates that the AP is spoofing the MAC address to gam unauthorized access to your company's wireless services, so It is a rogue
D. The AP has been detected as launching a DoS attack against your company's default gatewa
E. This qualities it as a rogue which needs to be contained with wireless association frames immediately
F. The AP is spoofing a routers MAC address as its BSSI
G. This indicates mat, even though WIP cannot determine whether the AP is connected to your LA
H. it is a rogue.

Correct Answer:D

Question 13

You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.
What is a good next step for troubleshooting?

A. Renew CPPM's RADIUS/EAP certificate
B. Reset the user credentials
C. Check CPPM Event viewer.
D. Check connectivity between CPPM and a backend directory server

Correct Answer:C

Question 14

What are the roles of 802.1X authenticators and authentication servers?

A. The authenticator stores the user account database, while the server stores access policies.
B. The authenticator supports only EAP, while the authentication server supports only RADIUS.
C. The authenticator is a RADIUS client and the authentication server is a RADIUS server.
D. The authenticator makes access decisions and the server communicates them to the supplicant.

Correct Answer:D

Question 15

What is a benefit of Opportunistic Wireless Encryption (OWE)?

A. It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN
B. It offers more control over who can connect to the wireless network when compared with WPA2-Personal
C. It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network
D. It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

Correct Answer:C