HPE6-A78 Free Practice Test

An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication
Which type of traffic does the authenticator accept from the client?

1. A. EAP only
2. B. DHCP, DNS and RADIUS only
3. C. RADIUS only
4. D. DHCP, DNS, and EAP only

Correct Answer: A

Which correctly describes a way to deploy certificates to end-user devices?

1. A. ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
2. B. ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them
3. C. ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
4. D. in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

Correct Answer: A

You have an Aruba Mobility Controller (MC). for which you are already using Aruba ClearPass Policy Manager (CPPM) to authenticate access to the Web Ul with usernames and passwords You now want to enable managers to use certificates to log in to the Web Ul CPPM will continue to act as the external server to check the names in managers' certificates and tell the MC the managers' correct rote
in addition to enabling certificate authentication. what is a step that you should complete on the MC?

1. A. Verify that the MC has the correct certificates, and add RadSec to the RADIUS server configuration for CPPM
2. B. install all of the managers' certificates on the MC as OCSP Responder certificates
3. C. Verify that the MC trusts CPPM's HTTPS certificate by uploading a trusted CA certificate Also, configure a CPPM username and password on the MC
4. D. Create a local admin account mat uses certificates in the account, specify the correct trusted CA certificate and external authentication

Correct Answer: A

What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial or service attack (DoS)?

1. A. A DDoS attack originates from external devices, while a DoS attack originates from internal devices
2. B. A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device
3. C. A DoS attack targets one server, a DDoS attack targets all the clients that use a server
4. D. A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

Correct Answer: A

Refer to the exhibit.

How can you use the thumbprint?

1. A. Install this thumbprint on management stations to use as two-factor authentication along with managerusernames and passwords, this will ensure managers connect from valid stations
2. B. Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort
3. C. When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring
4. D. install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

Correct Answer: C