Question 1

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Options :

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B :

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C :

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D :

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Question 2

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D

Question 3

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 4

What is one way that Control Plane Security (CPSec) enhances security for the network?

Options :

A : It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

B : It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

C : It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

D :

It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).

Answer: A

Question 5

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Confidently Practice Online with Free HPE6-A78 Exam Cram

Buying Options: