HPE6-A78 Practice Test

You have an Aruba solution with multiple Mobility Controllers (MCs) and campus APs. You want to deploy a WPA3-Enterprise WLAN and authenticate users to Aruba ClearPass Policy Manager (CPPM) with EAP-TLS.

What is a guideline for ensuring a successful deployment?

A. Avoid enabling CNSA mode on the WLAN, which requires the internal MC RADIUS server.

B. Ensure that clients trust the root CA for the MCs’ Server Certificates.

C. Educate users in selecting strong passwords with at least 8 characters.

D. Deploy certificates to clients, signed by a CA that CPPM trusts.

What is an Authorized client as defined by ArubaOS Wireless Intrusion Prevention System (WIP)?

A. a client that has a certificate issued by a trusted Certification Authority (CA)

B. a client that is not on the WIP blacklist

C. a client that has successfully authenticated to an authorized AP and passed encrypted traffic

D. a client that is on the WIP whitelist.

What is one way that WPA3-Enterprise enhances security when compared to WPA2-Enterprise?

A. WPA3-Enterprise implements the more secure simultaneous authentication of equals (SAE), while WPA2-Enterprise uses 802.1X.

B. WPA3-Enterprise provides built-in mechanisms that can deploy user certificates to authorized end-user devices.

C. WPA3-Enterprise uses Diffie-Hellman in order to authenticate clients, while WPA2-Enterprise uses 802.1X authentication.

D. WPA3-Enterprise can operate in CNSA mode, which mandates that the 802.11 association uses secure algorithms.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs), and campus APs (CAPs). The solution will include a WLAN that uses Tunnel for the forwarding mode and WPA3-Enterprise for the security option.

You have decided to assign the WLAN to VLAN 301, a new VLAN. A pair of core routing switches will act as the default router for wireless user traffic.

Which links need to carry VLAN 301?

A. only links in the campus LAN to ensure seamless roaming

B. only links between MC ports and the core routing switches

C. only links on the path between APs and the core routing switches

D. only links on the path between APs and the MC

You have been instructed to look in the ArubaOS Security Dashboard's client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers

Which client fits this description?

A. MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering

B. MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor

C. MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering

D. MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue