← Back to exam page

HPE6-A78 – Aruba Certified Network Security Associate Exam

Loading demo links...

Showing 4–6 of 8 questions

Question 4

What is one practice that can help you to maintain a digital chain or custody In your network?

Select an option, then click Submit answer.

  • ○

    Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis
  • ○

    Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.
  • ○

    Ensure that all network infrastructure devices receive a valid clock using authenticated NTP
  • ○

    Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers
Question 5

Refer to the exhibit.

This company has ArubaOS-Switches. The exhibit shows one access layer switch, Swllcn-2. as an example, but the campus actually has more switches. The company wants to slop any internal users from exploiting ARP

What Is the proper way to configure the switches to meet these requirements?

Select an option, then click Submit answer.

  • ○

    On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.
  • ○

    On Switch-2, make ports connected to employee devices trusted ports for ARP protection
  • ○

    On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection
  • ○

    On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network
Question 6

What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

Select an option, then click Submit answer.

  • ○

    WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password
  • ○

    WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.
  • ○

    WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters
  • ○

    WPA3-Personal is more complicated to deploy because it requires a backend authentication server