Question 1

What is one way that Control Plane Security (CPSec) enhances security for the network?

Options :

A : It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

B : It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

C : It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

D :

It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).

Answer: A

Question 2

What is a difference between passive and active endpoint classification?

Options :

A :

Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B :

Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C :

Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D :

Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D

Question 3

What is a benefit of Opportunistic Wireless Encryption (OWE)?

Options :

A :

It allows both WPA2-capable and WPA3-capable clients to authenticate to the same WPA-Personal WLAN.

B :

It offers more control over who can connect to the wireless network when compared with WPA2- Personal.

C :

It allows anyone to connect, but provides better protection against eavesdropping than a traditional open network.

D :

It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MITM) attacks.

Answer: C

Question 4

What distinguishes a Distributed Denial of Service (DDoS) attack from a traditional Denial of Service (DoS) attack?

Options :

A : A DDoS attack originates from external devices, while a DoS attack originates from internal devices.

B : A DoS attack targets one server; a DDoS attack targets all the clients that use a server.

C : A DDoS attack targets multiple devices, while a DoS is designed to incapacitate only one device.

D : A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device.

Answer: D

Question 5

What is the purpose of an Enrollment over Secure Transport (EST) server?

Options :

A : It acts as an intermediate Certification Authority (CA) that signs end-entity certificates.

B : It helps admins to avoid expired certificates with less management effort.

C : It provides a secure central repository for private keys associated with devices' digital certif-icates.

D : It provides a more secure alternative to private CAs at less cost than a public CA.

Answer: B

Free HPE6-A78 Mock Exam – Practice Online Confidently

Buying Options: