HPE6-A78 Exam Questions and Answers

QUESTION: 17

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks
it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.
it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.
it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

Answer(s): C

Explanation:

A honeypot can be used to launch a Man-in-the-Middle (MITM) attack on wireless clients by examining wireless clients' probe requests and then broadcasting the SSIDs in those probes. Clients with those SSIDs in their preferred network list may then automatically connect to the honeypot, believing it to be a legitimate network. Once the client is connected to the attacker's honeypot, the attacker can intercept, monitor, or manipulate the client's traffic, effectively executing a MITM attack.

Reveal Solution Next Question

QUESTION: 18

Which correctly describes a way to deploy certificates to end-user devices?

ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them
ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

Answer(s): A

Explanation:

ClearPass Onboard is part of the Aruba ClearPass suite and it provides a mechanism to deploy certificates to end-user devices, regardless of whether or not they are members of a Windows domain. ClearPass Onboard facilitates the configuration and provisioning of network settings and security, including the delivery and installation of certificates to ensure secure network access. This capability enables a bring-your-own-device (BYOD) environment where devices can be securely managed and provided with the necessary certificates for network authentication.

Reveal Solution Next Question

QUESTION: 19

You have been instructed to look in the ArubaOS Security Dashboard's client list Your goal is to find clients mat belong to the company and have connected to devices that might belong to hackers Which client fits this description?

MAC address d8:50:e6:f3;6d;a4; Client Classification Authorized; AP Classification, interfering
MAC address d8:50:e6 f3;6e;c5; Client Classification Interfering. AP Classification Neighbor
MAC address d8:50:e6:f3;6e;60; Client Classification Interfering. AP Classification Interfering
MAC address d8:50:e6:f3;TO;ab; Client Classification Interfering. AP Classification Rogue

Answer(s): D

Explanation:

In the context of the ArubaOS Security Dashboard, if the goal is to find company clients that have connected to devices potentially operated by hackers, you would look for a client that is classified as 'Interfering' (indicating a security threat) while being connected to an 'AP Classification: Rogue'. A rogue AP is one that is not under the control of network administrators and is considered malicious or a security threat. Therefore, the client fitting this description is:
MAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Rogue

Reveal Solution Next Question

QUESTION: 20

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.
What are two possible problems that have this symptom? (Select two)

users are logging in with the wrong usernames and passwords or invalid certificates.
Clients are configured to use a mismatched EAP method from the one In the CPPM service.
The RADIUS shared secret does not match between the switch and CPPM.
CPPM does not have a network device defined for the switch's IP address.
Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

Answer(s): C,D

Explanation:

If clients cannot authenticate and there is no record of the authentication attempt in Aruba ClearPass Access Tracker, two possible problems that could cause this symptom are:
The RADIUS shared secret does not match between the switch and CPPM. This mismatch would prevent the switch and CPPM from successfully communicating, so authentication attempts would fail, and no record would appear in Access Tracker.
CPPM does not have a network device profile defined for the switch's IP address. Without a network device profile, CPPM would not recognize authentication attempts coming from the switch and would not process them, resulting in no logs in Access Tracker.
The other options are incorrect because:

Users logging in with the wrong credentials would still generate an attempt record in Access Tracker. Clients configured to use a mismatched EAP method would also generate an attempt record in Access Tracker.
Clients not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate might fail authentication, but the attempt would still be logged in Access Tracker.

Reveal Solution Next Question

QUESTION: 21

An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authentication
Which type of traffic does the authenticator accept from the client?

EAP only
DHCP, DNS and RADIUS only
RADIUS only
DHCP, DNS, and EAP only

Answer(s): A

Explanation:

For an ArubaOS-CX switch enforcing 802.1X on a port without any fallback options or port-access roles configured, and where the supplicant on the connected client has not completed authentication, the only type of traffic the authenticator accepts from the client is EAP (Extensible Authentication Protocol). EAP is a universal authentication framework used in 802.1X for message exchange during the authentication process. The switch allows EAP packets because they are necessary for the client and the authentication server to perform the authentication process. This is standard behavior for 802.1X authenticators, which is to permit EAP traffic to pass through even before authentication is successful to facilitate the authentication exchange. This information is supported by the IEEE 802.1X standard and ArubaOS-CX security configuration guides.

Reveal Solution Next Question

QUESTION: 22

Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

Change the local user role to read-only
Clear the MSCHAP check box
Disable local authentication
Change the default role to "guest-provisioning"

Answer(s): C

Explanation:

For following Aruba best security practices, the setting you should change is to disable local authentication.
When integrating with an external RADIUS server like ClearPass Policy Manager (CPPM) for authenticating administrative access to the Mobility Controller (MC), it is a best practice to rely on the external server rather than the local user database. This practice not only centralizes the management of user roles and access but also enhances security by leveraging CPPM's advanced authentication mechanisms.
:
Aruba Networks official best practice documentation, which recommends centralized authentication for administrative access.
Security standards and guidelines that promote the use of external RADIUS servers for authentication purposes.

Reveal Solution Next Question

QUESTION: 23

From which solution can ClearPass Policy Manager (CPPM) receive detailed information about client device type OS and status?

ClearPass Onboard
ClearPass Access Tracker
ClearPass OnGuard
ClearPass Guest

Answer(s): C

Explanation:

ClearPass Policy Manager (CPPM) can receive detailed information about client device type, OS, and status from ClearPass OnGuard. ClearPass OnGuard is part of the ClearPass suite and provides posture assessment and endpoint health checks. It gathers detailed information on the status and security posture of devices trying to connect to the network, such as whether antivirus software is up to date, which operating system is running, and other details that characterize the device's compliance with the network's security policies.
:
Aruba ClearPass product documentation that details the capabilities of ClearPass OnGuard. Network security resources that describe endpoint health checks and the importance of device posture assessment for access control.

Reveal Solution Next Question

QUESTION: 24

How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

The firewall applies every rule that includes the dent's IP address as the source.
The firewall applies the rules in policies associated with the client's wlan
The firewall applies thee rules in policies associated with the client's user role.
The firewall applies every rule that includes the client's IP address as the source or destination.

Answer(s): C

Explanation:

The ArubaOS firewall determines which rules to apply to a specific client's traffic based on the rules in policies associated with the client's user role. User roles are a fundamental part of ArubaOS and the firewall policies they encompass. These roles contain policies that dictate permissions and restrictions for network traffic.
When a client authenticates, it is assigned a role, and the firewall enforces the rules defined within that role for the client's traffic.
:

ArubaOS firewall and user role configuration guides that explain the role-based access control and firewall policy enforcement.
Industry best practices for network access control that advocate for role-based enforcement mechanisms.

Reveal Solution Next Question

HP HPE6-A78 Exam (page: 3) HP Aruba Certified Network Security Associate Exam Updated on: 25-Dec-2025

QUESTION: 17

Explanation:

QUESTION: 18

Explanation:

QUESTION: 19

Explanation:

QUESTION: 20

Explanation:

QUESTION: 21

Explanation:

QUESTION: 22

Explanation:

QUESTION: 23

Explanation:

QUESTION: 24

Explanation:

HP HPE6-A78 Exam (page: 3)
HP Aruba Certified Network Security Associate Exam
Updated on: 25-Dec-2025