Online Access Free HPE6-A84 Practice Test

Refer to the exhibit.

Which IP address should you record as a possibly compromised client?

• A.10.1.26.1
• B.10.1J.100
• C.10.254.1.21
• D.10.1.26.151

You need to install a certificate on a standalone Aruba Mobility Controller (MC). The MC will need to use the certificate for the Web UI and for implementing RadSec with Aruba ClearPass Policy Manager. You have been given a certificate with these settings:
Subject: CN=mc41.site94.example.com
* No SANs
* Issuer: CN=ca41.example.com
EKUs: Server Authentication, Client Authentication
What issue does this certificate have for the purposes for which the certificate is intended?

• A.It is issued by a private CA.
• B.It specifies domain info in the CN field instead of the DC field.
• C.It has conflicting EKUs.
• D.It lacks a DNS SAN.

Refer to the scenario.
A hospital has an AOS10 architecture that is managed by Aruba Central. The customer has deployed a pair of Aruba 9000 Series gateways with Security licenses at each clinic. The gateways implement IDS/IPS in IDS mode.
The Security Dashboard shows these several recent events with the same signature, as shown below:

Which step could give you valuable context about the incident?

• A.Find the Central client profile for the threat sources and note their category and family.
• B.View firewall sessions on the APs and record the threat sources' type and OS.
• C.View the RAPIDS Security Dashboard and see if the threat sources are listed as rogues.
• D.View the user-table on APs and record the threat sources' 802.11 settings.

You are designing an Aruba ClearPass Policy Manager (CPPM) solution for a customer. You learn that the customer has a Palo Alto firewall that filters traffic between clients in the campus and the data center.
Which integration can you suggest?

• A.Sending Syslogs from the firewall to CPPM to signal CPPM to change the authentication status for misbehaving clients
• B.Importing the firewall's rules to program downloadable user roles for AOS-CX switches more quickly
• C.Establishing a double layer of authentication at both the campus edge and the data center DMZ
• D.Importing clients' MAC addresses to configure known clients for MAC authentication more quickly

Refer to the scenario.
A customer has asked you to review their AOS-CX switches for potential vulnerabilities. The configuration for these switches is shown below:

What is one immediate remediation that you should recommend?

• A.Disabling Telnet
• B.Changing the switch's DNS server to the mgmt VRF
• C.Either disabling DHCPv4-snoopinq or leaving it enabled, but also enabling ARP inspection
• D.Setting the clock manually instead of using NTP