HP HPE6-A78 Exam Practice Test Instant Access

Question 1

What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

AWPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

BWPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.

CWPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

DWPA3-Personal is more complicated to deploy because it requires a backend authentication server

Answer : A

Question 2

Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security

What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

AAssign the WLAN to a single new VLAN which is dedicated to wireless users

BUse wireless user roles to assign the devices to different VLANs in the 100-150 range

CAssign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

DUse wireless user roles to assign the devices to a range of new vlan IDs.

Answer : B

Question 3

What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

AEAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

BEAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

CEAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

DEAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

Answer : B

Question 4

You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP

AAvoid using external manager authentication tor the Web UI.

BChange the default 4343 port tor the web UI to TCP 443.

CInstall a CA-signed certificate to use for the Web UI server certificate.

DMake sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

Answer : C

Question 5

How should admins deal with vulnerabilities that they find in their systems?

AThey should apply fixes, such as patches, to close the vulnerability before a hacker exploits it.

BThey should add the vulnerability to their Common Vulnerabilities and Exposures (CVE).

CThey should classify the vulnerability as malware. a DoS attack or a phishing attack.

DThey should notify the security team as soon as possible that the network has already been breached.

Answer : A

Question 6

Which correctly describes a way to deploy certificates to end-user devices?

AClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

BClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

CClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

Din a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

Answer : A

Question 7

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

Ait uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

Bit runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

Cit examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

Dit uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

Answer : D

HPE6-A78 Aruba Certified Network Security Associate Exam Practice Test