Online Access Free HPE6-A78 Exam Questions

A company has HPE Aruba Networking Mobility Controllers (MCs), campus APs, and AOS-CX switches. The company plans to use HPE Aruba Networking ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other HPE Aruba Networking ClearPass solutions.
The HPE Aruba Networking ClearPass admins tell you that they want to use HTTP User-Agent strings to help profile the endpoints.
What should you do as a part of setting up Mobility Controllers (MCs) to support this requirement?

• A.Create an IF-MAP profile, which specifies credentials for an API admin account on CPPM.
• B.Create control path mirrors to mirror HTTP traffic from clients to CPPM.
• C.Create a firewall whitelist rule that permits HTTP and CPPM's IP address.
• D.Create datapath mirrors that use the CPPM's IP address as the destination.

You have an AOS-8 architecture, consisting of a Mobility Conductor (MC) and Mobility Controllers (MCs). You want to monitor wireless clients' application usage in the Traffic Analysis dashboard. What is a requirement?

• A.Enabling logging on the users category on the MCs
• B.Discovering the mobility devices in HPE Aruba Networking Central
• C.Configuring packet capturing on the MCs' data plane
• D.Enabling firewall visibility and deep packet inspection (DPI) on the MCs

How can hackers implement a man-in-the-middle (MITM) attack against a wireless client?

• A.The hacker runs an NMap scan on the wireless client to find its MAC and IP address. The hacker then connects to another network and spoofs those addresses.
• B.The hacker uses a combination of software and hardware to jam the RF band and prevent the client from connecting to any wireless networks.
• C.The hacker connects a device to the same wireless network as the client and responds to the client's ARP requests with the hacker device's MAC address.
• D.The hacker uses spear-phishing to probe for the IP addresses that the client is attempting to reach. The hacker device then spoofs those IP addresses.

Refer to the exhibits.
A company has added a new user group. Users in the group try to connect to the WLAN and receive errors that the connection has no Internet access. The users cannot reach any resources. The first exhibit shows the record for one of the users who cannot connect. The second exhibit shows the role to which the AOS device assigned the user's client.
What is a likely problem?

• A.The AOS device does not have the correct RADIUS dictionaries installed on it to understand the Aruba-User-Role VSA.
• B.The clients rejected the server authentication on their side because they do not have the root CA for CPPM's RADIUS/EAP certificate.
• C.The role name that CPPM is sending does not match the role name configured on the AOS device.
• D.The AOS device has a server derivation rule configured on it that has overridden the role sent by CPPM.

The monitoring admin has asked you to set up an ArubaOS-Switch to meet these criteria:
* Send logs to a SIEM Syslog server at 10.4.13.15 at the standard UDP port (514)
* Send a log for all events at the "warning" level or above
The switch did not have any "logging" configuration on it. You then entered this command:
ArubaOS-Switch(config)# logging 10.4.13.15 udp
What should you do to finish configuring to the requirements?

• A.Specify "warning" as the global level.
• B.Ask for the Syslog password and configure it on the switch.
• C.Configure logging as a debug destination.
• D.Add categories (system-modules) at the global level.