Question 1

What is one way that Control Plane Security (CPSec) enhances security for the network?

Options :

A : It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

B : It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

C : It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

D :

It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).

Answer: A

Question 2

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D

Question 3

Which attack is an example of social engineering?

Options :

A :

An email is used to impersonate a bank and trick users into entering their bank login information on a fake website page.

B : An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

C :

A hacker eavesdrops on insecure communications, such as Remote Desktop Protocol (RDP), and discovers login credentials.

D :

A user visits a website and downloads a file that contains a worm, which self-replicates throughout the network.

Answer: A

Question 4

Your ArubaoS solution has detected a rogue AP with Wireless intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

Options :

A : the match method

B : the detecting devices

C : the match type

D : the confidence level

Answer: B

Question 5

What is a guideline for managing local certificates on an ArubaOS-Switch?

Options :

A :

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

B :

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

C :

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

D : Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CAsigned certificates.

Answer: A

Confidently Practice Online with Free HPE6-A78 Exam Cram

Buying Options: