Question 1

What is a benefit or using network aliases in ArubaOS firewall policies?

Options :

A :

You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.

B :

You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall

C : You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update

D : You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Answer: C

Question 2

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

Options :

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 3

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

Options :

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C

Question 4

What is one benefit of a Trusted Platform Module (TPM) on an Aruba AP?

Options :

A : It enables secure boot, which detects if hackers corrupt the OS with malware.

B : It deploys the AP with enhanced security, which includes disabling the password recovery mechanism.

C :

It allows the AP to run in secure mode, which automatically enables CPsec and disables the console port.

D : It enables the AP to encrypt and decrypt 802.11 traffic locally, rather than at the MC.

Answer: A

Question 5

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Confidently Practice Online with Free HPE6-A78 Exam Cram

Buying Options: