HP Aruba Certified Network Security Associate - HPE6-A78무료 덤프문제 풀어보기

A. Install this thumbprint on management stations to use as two-factor authentication along with manager usernames and passwords, this will ensure managers connect from valid stations

B. When you first connect to the switch with SSH from a management station, make sure that the thumbprint matches to ensure that a man-in-t he-mid die (MITM) attack is not occurring

C. install this thumbprint on management stations the stations can then authenticate with the thumbprint instead of admins having to enter usernames and passwords.

D. Copy the thumbprint to other Aruba switches to establish a consistent SSH Key for all switches this will enable managers to connect to the switches securely with less effort

A. Only links on the path between APs and the MC

B. All links in the campus LAN to ensure seamless roaming

C. Only links on the path between APs and the core routing switches

D. Only links between MC ports and the core routing switches

A. The AP is an AP that belongs to your solution. However, the ArubaOS has detected that it is behaving suspiciously. It might have been compromised, so it is classified as a suspected rogue.

B. The AP has been detected using multiple MAC addresses. This indicates that the AP is spoofing its MAC address, which qualifies it as a suspected rogue.

C. The AP is probably connected to your LAN because it has a BSSID that is close to a MAC address that has been detected in your LAN. Because it does not belong to the company, it is a suspected rogue.

D. The AP has a BSSID that is close to your authorized APs' BSSIDs. This indicates that the AP might be spoofing the corporate SSID and attempting to lure clients to it, making the AP a suspected rogue.

A. You should use an Air Monitor (AM) to capture the packets in the air.

B. You should mirror traffic from the switch port that connects to the AP out on a port connected to a packet analyzer.

C. You should capture the traffic on the AP, so that the capture is as close to the source as possible.

D. You should capture the traffic on the MC dataplane to obtain unencrypted traffic.

A. Ensure that all network infrastructure devices receive a valid clock using authenticated NTP.

B. Ensure that all network infrastructure devices use RADIUS rather than TACACS+ to authenticate managers.

C. Enable packet capturing on Instant AP or Mobility Controller (MC) controlpath on an ongoing basis.

D. Enable packet capturing on Instant AP or Mobility Controller (MC) datapath on an ongoing basis.

A. As a Layer 2 authentication method, MAC-Auth cannot be used to authenticate devices to an external authentication server.

B. It is very easy for hackers to spoof their MAC addresses and get around MAC authentication.

C. MAC-Auth can add a degree of security to an open WLAN by enabling the generation of a PMK to encrypt traffic.

D. Headless devices, such as Internet of Things (loT) devices, must be configured in advance to support MAC-Auth.

A. Make sure DPI is enabled, and add application rules that deny gaming and peer-to-peer applications to the "user_groupr role.

B. Add access control rules to the "user_group1" role, which deny HTTP/HTTPS traffic to IP addresses associated with gaming and peer-to-peer applications.

C. Create ALGs for the gaming and peer-to-peer applications, and deny the "user_group1" role on the ALGs.

D. Create service aliases for the TCP ports associated with gaming and peer-to-per applications, and use those aliases in access control rules for the "user_group" rules.

A. Install the root CA associated with the 10 5.5.5 server's certificate as a Trusted CA certificate.

B. Create a dynamic authorization, or RFC 3576, server with the 10.5.5.5 address and correct shared secret.

C. Configure a ClearPass username and password in the MyEmployees AAA profile.

D. Enable the dynamic authorization setting in the "clearpass" authentication server settings.

A. Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install.

B. Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificates.

C. Understand that the switch must use the same certificate for all usages, such as its HTTPS server and RadSec client.

D. Create a self-signed certificate online on the switch because AOS-CX switches do not support CA-signed certificates.

A. It makes encryption algorithms more secure by ensuring that same plaintext and key can produce different ciphertext.

B. It enables the conversion of asymmetric keys into keys that are suitable for symmetric encryption.

C. It enables programs to convert easily-remembered passphrases to keys of a correct length.

D. It helps parties to negotiate the keys and algorithms used to secure data before data transmission.

A. Accepting and enforcing CoA messages

B. Assigning clients to their device categories

C. Helping to forward profiling information to the component responsible for profiling

D. Enforcing access control decisions