Online Access Free HPE6-A78 Practice Test

Device A is contacting https://arubapedia.arubanetworks.com. The web server sends a certificate chain. What does the browser do as part of validating the web server certificate?

• A.It makes sure the certificate has a DNS SAN that matches arubapedia.arubanetworks.com
• B.It makes sure that the public key in the certificate matches a private key stored on DeviceA.
• C.It makes sure that the public key in the certificate matches DeviceA's private HTTPS key.
• D.It makes sure that the key in the certificate matches the key that DeviceA uses for HTTPS.

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

• A.it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks
• B.it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.
• C.it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.
• D.it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

Your company policies require you to encrypt logs between network infrastructure devices and Syslog servers. What should you do to meet these requirements on an ArubaOS-CX switch?

• A.Specify the Syslog server with the UDP option and then add an CPsec tunnel that selects Syslog.
• B.Specify a priv key with the Syslog settings that matches a priv key on the Syslog server.
• C.Specify the Syslog server with the TLS option and make sure the switch has a valid certificate.
• D.Set up RadSec and then enable Syslog as a protocol carried by the RadSec tunnel.

What is one way that Control Plane Security (CPSec) enhances security for the network?

• A.It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.
• B.It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.
• C.It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).
• D.It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

You are deploying a new wireless solution with an HPE Aruba Networking Mobility Master (MM), Mobility Controllers (MCs), and campus APs (CAPs). The solution will include a WLAN that uses Tunnel for the forwarding mode and WPA3-Enterprise for the security option.
You have decided to assign the WLAN to VLAN 301, a new VLAN. A pair of core routing switches will act as the default router for wireless user traffic.
Which links need to carry VLAN 301?

• A.Only links on the path between APs and the MC
• B.Only links between MC ports and the core routing switches
• C.All links in the campus LAN to ensure seamless roaming
• D.Only links on the path between APs and the core routing switches