Question 1

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

Options :

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C

Question 2

A company has HPE Aruba Networking Mobility Controllers (MCs), HPE Aruba Networking campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities. What is a consideration for using those capabilities?

Options :

A : You will need to mirror traffic to one of CPPM’s span ports from a device such as a core routing switch.

B :

ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

C :

AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

D :

TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Answer: A

Question 3

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients’ application usage in the Traffic Analysis dashboard. What is a requirement?

Options :

A : Configuring packet capturing on the MCs’ data plane

B : Enabling logging on the users category on the MCs

C : Discovering the mobility devices in HPE Aruba Networking Central

D : Enabling firewall visibility and deep packet inspection (DPI) on the MCs

Answer: D

Question 4

What is a benefit or using network aliases in ArubaOS firewall policies?

Options :

A :

You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.

B :

You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall

C : You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update

D : You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Answer: C

Question 5

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514)

Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning"The switch did not have any "logging" configuration on it. You then entered this command: AOS-CX(config)# logging 10.4.13.15 tcp vrf defaultWhat should you do to finish configuring to the requirements?

Options :

A : Specify the "warning" severity level for the logging server.

B : Add logging categories at the global level.

C : Ask for the Syslog password and configure it on the switch.

D : Configure logging as a debug destination.

Answer: A

Free HPE6-A78 Mock Exam – Practice Online Confidently

Buying Options: