Free HPE6-A78 – Aruba Certified Network Security Associate Exam Practice Test Question

Select all that apply, then click Submit answer.

• ○

  There is no need to locale the AP If you manually contain It.

• ○

  This is a serious security event, so you should always contain the AP immediately regardless of your company's specific policies.

• ○

  You should receive permission before containing an AP. as this action could have legal Implications.

• ○

  For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP's MAC address.

• ○

  There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.

Select all that apply, then click Submit answer.

• ○

  users are logging in with the wrong usernames and passwords or invalid certificates.

• ○

  Clients are configured to use a mismatched EAP method from the one In the CPPM service.

• ○

  The RADIUS shared secret does not match between the switch and CPPM.

• ○

  CPPM does not have a network device defined for the switch's IP address.

• ○

  Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

Select all that apply, then click Submit answer.

• ○

  Disable Its console ports

• ○

  Place a Tamper Evident Label (TELS) over its console port

• ○

  Disable the Web Ul.

• ○

  Configure WPA3-Enterpnse security on the AP

• ○

  install a CA-signed certificate

Select an option, then click Submit answer.

• ○

  Enable packet capturing on Instant AP or Moodily Controller (MC) datepath on an ongoing basis

• ○

  Enable packet capturing on Instant AP or Mobility Controller (MC) control path on an ongoing basis.

• ○

  Ensure that all network infrastructure devices receive a valid clock using authenticated NTP

• ○

  Ensure that all network Infrastructure devices use RADIUS rather than TACACS+ to authenticate managers

Select an option, then click Submit answer.

• ○

  On Switch-1, enable ARP protection globally, and enable ARP protection on ail VLANs.

• ○

  On Switch-2, make ports connected to employee devices trusted ports for ARP protection

• ○

  On Swltch-2, enable DHCP snooping globally and on VLAN 201 before enabling ARP protection

• ○

  On Swltch-2, configure static PP-to-MAC bindings for all end-user devices on the network

Select an option, then click Submit answer.

• ○

  WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

• ○

  WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.

• ○

  WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

• ○

  WPA3-Personal is more complicated to deploy because it requires a backend authentication server

Select an option, then click Submit answer.

• ○

  ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

• ○

  ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

• ○

  ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

• ○

  in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

Select an option, then click Submit answer.

• ○

  Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM

• ○

  install all of the managers' certificates on the MC as OCSP Responder certificates

• ○

  Verify that the MC trusts CPPM's HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC

• ○

  Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication