HP HPE6-A78 Quiz 1 Topic 6 Questions 1-5

Question: 1

What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

AEAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.

BEAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.

CEAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process

DEAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

Show Answer

Question: 2

What is a benefit or Protected Management Frames (PMF). sometimes called Management Frame Protection (MFP)?

APMF helps to protect APs and MCs from unauthorized management access by hackers.

BPMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.

CPMF prevents hackers from capturing the traffic between APs and Mobility Controllers.

DPMF protects clients from DoS attacks based on forged de-authentication frames

Show Answer

Question: 3

What is one way that Control Plane Security (CPsec) enhances security for me network?

AIt protects wireless clients' traffic tunneled between APs and Mobility Controllers, from eavesdropping

BIt prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

CIt prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).

DIt protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

Show Answer

Question: 4

You are deploying an Aruba Mobility Controller (MC). What is a best practice for setting up secure management access to the ArubaOS Web UP

AAvoid using external manager authentication tor the Web UI.

BChange the default 4343 port tor the web UI to TCP 443.

CInstall a CA-signed certificate to use for the Web UI server certificate.

DMake sure to enable HTTPS for the Web UI and select the self-signed certificate Installed in the factory.

Show Answer

Question: 5

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.

What are two possible problems that have this symptom? (Select two)

Ausers are logging in with the wrong usernames and passwords or invalid certificates.

BClients are configured to use a mismatched EAP method from the one In the CPPM service.

CThe RADIUS shared secret does not match between the switch and CPPM.

DCPPM does not have a network device defined for the switch's IP address.

EClients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

Show Answer

HP HPE6-A78 Quiz:1 Topic:6 Questions:1-5