HPE6-A78 Practice Test

What is a use case for implementing RadSec instead of RADIUS?

A. A university wants to protect communications between the students' devices and the network access server.

B. A corporation wants to implement EAP-TLS to authenticate wireless users at their main office.

C. A school district wants to protect messages sent between RADIUS clients and servers over an untrusted network.

D. A organization wants to strengthen the encryption used to protect RADIUS communications without increasing complexity.

What is one of the roles of the network access server (NAS) in the AAA framewonx?

A. It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

B. It negotiates with each user's device to determine which EAP method is used for authentication

C. It enforces access to network services and sends accounting information to the AAA server

D. It determines which resources authenticated users are allowed to access and monitors each users session

Which scenario requires the Aruba Mobility Controller to use a Server Certificate?

A. Obtain downloadable user roles (DURs) from ClearPass.

B. Synchronize its clock with an NTP server that requires authentication.

C. Use RadSec for enforcing 802.1X authentication to ClearPass.

D. Use RADIUS for enforcing 802.1X authentication to ClearPass.

A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.

What are the licensing requirements for the MC?

A. one AP license per-switch

B. one PEF license per-switch

C. one PEF license per-switch. and one WCC license per-switch

D. one AP license per-switch. and one PEF license per-switch

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

A. Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B. if you create the CSR and public/private Keypair offline, create a matching private key online on the M

C. Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D. Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.