HPE6-A78 Practice Exam Questions and Answers

A.  

Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

B.  

Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

C.  

When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

D.  

install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

A.  

A university wants to protect communications between the students' devices and the network access server.

B.  

A corporation wants to implement EAP-TLS to authenticate wireless users at their main office.

C.  

A school district wants to protect messages sent between RADIUS clients and servers over an untrusted network.

D.  

A organization wants to strengthen the encryption used to protect RADIUS communications without increasing complexity.

A.  

It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.

B.  

It negotiates with each user's device to determine which EAP method is used for authentication

C.  

It enforces access to network services and sends accounting information to the AAA server

D.  

It determines which resources authenticated users are allowed to access and monitors each users session

A.  

Obtain downloadable user roles (DURs) from ClearPass.

B.  

Synchronize its clock with an NTP server that requires authentication.

C.  

Use RadSec for enforcing 802.1X authentication to ClearPass.

D.  

Use RADIUS for enforcing 802.1X authentication to ClearPass.

A.  

A user fails 802.1X authentication. The client remains connected, but is assigned the "guest" role.

B.  

A user authenticates successfully with 802.1 X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employeel.” The client’s role is "guest."

C.  

A user authenticates successfully with 802.1X. and the RADIUS Access-Accept includes an Aruba-User-Role VSA set to "employee." The client’s role is "guest."

D.  

A user authenticates successfully with 802.1X, and the RADIUS Access-Accept includes an Aruba-User-RoleVSA set to "employeel." The client's role is "employeel."

A.  

one AP license per-switch

B.  

one PEF license per-switch

C.  

one PEF license per-switch. and one WCC license per-switch

D.  

one AP license per-switch. and one PEF license per-switch

A.  

Create the CSR online using the MC Web Ul if your company requires you to archive the private key.

B.  

if you create the CSR and public/private Keypair offline, create a matching private key online on the M

C.  

C.  

Create the CSR and public/private keypair offline If you want to install the same certificate on multiple MCs.

D.  

Generate the private key online, but the public key and CSR offline, to install the same certificate on multiple MCs.

A.  

The client has attempted 802 1X authentication, but the MC could not contact the authentication server

B.  

The client has attempted 802 1X authentication, but failed to maintain a reliable connection, leading to a timeout error

C.  

The client has passed 802 1X authentication, and the value in the Aruba-User-Role VSA matches a role on the MC

D.  

The client has passed 802 1X authentication and the authentication server did not send an Aruba-User-Role VSA

A.  

It helps parties to negotiate the keys and algorithms used to secure data before data transmission.

B.  

It makes encryption algorithms more secure by ensuring that same plaintext and key can produce different ciphertext.

C.  

It enables programs to convert easily-remembered passphrases to keys of a correct length.

D.  

It enables the conversion of asymmetric keys into keys that are suitable for symmetric encryption.

A.  

EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

B.  

EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

C.  

EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

D.  

EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.