Question 1

What is the purpose of an Enrollment over Secure Transport (EST) server?

Options :

A : It acts as an intermediate Certification Authority (CA) that signs end-entity certificates.

B : It helps admins to avoid expired certificates with less management effort.

C : It provides a secure central repository for private keys associated with devices' digital certif-icates.

D : It provides a more secure alternative to private CAs at less cost than a public CA.

Answer: B

Question 2

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 3

Which attack is an example of social engineering?

Options :

A :

An email is used to impersonate a bank and trick users into entering their bank login information on a fake website page.

B : An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

C :

A hacker eavesdrops on insecure communications, such as Remote Desktop Protocol (RDP), and discovers login credentials.

D :

A user visits a website and downloads a file that contains a worm, which self-replicates throughout the network.

Answer: A

Question 4

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

Options :

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C

Question 5

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Options :

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B :

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C :

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D :

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Confidently Practice Online with Free HPE6-A78 Exam Cram

Buying Options: