Question 1

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 2

What is one way that Control Plane Security (CPSec) enhances security for the network?

Options :

A : It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

B : It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

C : It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

D :

It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).

Answer: A

Question 3

A company has HPE Aruba Networking Mobility Controllers (MCs), HPE Aruba Networking campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities. What is a consideration for using those capabilities?

Options :

A : You will need to mirror traffic to one of CPPM’s span ports from a device such as a core routing switch.

B :

ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

C :

AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

D :

TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Answer: A

Question 4

What is the purpose of an Enrollment over Secure Transport (EST) server?

Options :

A : It acts as an intermediate Certification Authority (CA) that signs end-entity certificates.

B : It helps admins to avoid expired certificates with less management effort.

C : It provides a secure central repository for private keys associated with devices' digital certif-icates.

D : It provides a more secure alternative to private CAs at less cost than a public CA.

Answer: B

Question 5

What is a guideline for creating certificate signing requests (CSRs) and deploying server Certificates on ArubaOS Mobility Controllers (MCs)?

Options :

A : Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B :

if you create the CSR and public/private Keypair offline, create a matching private key online on the MC.

C :

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D :

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

Answer: C

Free HPE6-A78 Mock Exam – Practice Online Confidently

Buying Options: