Free HP HPE6-A78 Exam Questions

Question 1

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 2

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 3

What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?

A : WPA3-Perscn3i is more secure against password leaking Because all users nave their own username and password

B : WPA3-Personai prevents eavesdropping on other users' wireless traffic by a user who knows the passphrase for the WLAN.

C : WPA3-Personai is more resistant to passphrase cracking Because it requires passphrases to be at least 12 characters

D : WPA3-Personal is more complicated to deploy because it requires a backend authentication server

Answer: B

Question 4

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B : if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C : Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D : Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Question 5

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C