HPE6-A78 無料問題集「HP Aruba Certified Network Security Associate」

（A）The firewall applies every rule that includes the client's IP address as the source or destination.

（B）The firewall applies the rules in policies associated with the client's user role.

（C）The firewall applies every rule that includes the client's IP address as the source.

（D）The firewall applies the rules in policies associated with the client's WLAN.

（A）Traffic is encrypted with AES and keys derived from a unique PMK per client.

（B）Traffic is encrypted with AES and keys derived from a PMK shared by all clients on the WLAN.

（C）Traffic is encrypted with TKIP and keys derived from a unique PMK per client.

（D）Traffic is encrypted with TKIP and keys derived from a PMK shared by all clients on the WLAN.

（A）it runs an NMap scan on the wireless client to And the clients MAC and IP address. The hacker then connects to another network and spoofs those addresses.

（B）it uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

（C）it uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead.

（D）it examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically.

（A）The RADIUS shared secret does not match between the switch and CPPM.

（B）users are logging in with the wrong usernames and passwords or invalid certificates.

（C）Clients are configured to use a mismatched EAP method from the one In the CPPM service.

（D）CPPM does not have a network device defined for the switch's IP address.

（E）Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

（A）The AP is an AP that belongs to your solution. However, the AOS has detected that it is behaving suspiciously. It might have been compromised, so it is classified as a suspected rogue.

（B）The AP has a BSSID that is close to your authorized APs' BSSIDs. This indicates that the AP might be spoofing the corporate SSID and attempting to lure clients to it, making the AP a suspected rogue.

（C）The AP is probably connected to your LAN because it has a BSSID that is close to a MAC address that has been detected in your LAN. Because it does not belong to the company, it is a suspected rogue.

（D）The AP has been detected using multiple MAC addresses. This indicates that the AP is spoofing its MAC address, which qualifies it as a suspected rogue.

（A）Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

（B）A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

（C）Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

（D）A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

（A）CNSA mode disabled with 256-bit keys

（B）CNSA mode enabled with 256-bit keys

（C）CNSA mode enabled with 128-bit keys

（D）CNSA mode disabled with 128-bit keys

（A）MAC address: d8:50:e6:f3:6e:c5; Client Classification: Interfering; AP Classification: Neighbor

（B）MAC address: d8:50:e6:f3:6d:a4; Client Classification: Authorized; AP Classification: Suspected Rogue

（C）MAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Suspected Rogue

（D）MAC address: d8:50:e6:f3:6e:60; Client Classification: Interfering; AP Classification: Interfering

（A）Configure the switch as a DHCP relay

（B）Add at least one LLDP option to the policy

（C）Add at least one DHCP option to the policy

（D）Apply the policy to edge ports

（A）the match method

（B）the detecting devices

（C）the match type

（D）the confidence level