HPE6-A78 無料問題集「HP Aruba Certified Network Security Associate」

（A）whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

（B）whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

（C）whether the client has a third-party 802.1 X supplicant, as Windows 10 does not support EAP-TLS

（D）whether the client has a valid certificate installed on it to let it support EAP-TLS

（A）Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

（B）Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

（C）Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

（D）Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

（A）A university wants to protect communications between the students' devices and the network access server.

（B）A corporation wants to implement EAP-TLS to authenticate wireless users at their main office.

（C）A organization wants to strengthen the encryption used to protect RADIUS communications without increasing complexity.

（D）A school district wants to protect messages sent between RADIUS clients and servers over an untrusted network.

（A）the reports generated by Aruba ClearPass Insight

（B）the packets captured on the MC control plane destined to UDP 1812

（C）the Alerts tab in the authentication record in CPPM Access Tracker

（D）the RADIUS events within the CPPM Event Viewer

（A）authenticated

（B）general-access

（C）guest

（D）logon

（A）Use wireless user roles to assign the devices to a range of new vlan IDs.

（B）Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

（C）Use wireless user roles to assign the devices to different VLANs in the 100-150 range

（D）Assign the WLAN to a single new VLAN which is dedicated to wireless users

（A）The packets captured on the MC control plane destined to UDP 1812

（B）The RADIUS events within the CPPM Event Viewer

（C）The reports generated by HPE Aruba Networking ClearPass Insight

（D）The Alerts tab in the authentication record in CPPM Access Tracker

（A）Because wireless containment has a lower risk of targeting legitimate neighbors than wired containment, it is recommended in most use cases.

（B）Wireless containment only works against unauthorized wireless devices that connect to your corporate LAN, so it does not offer protection against Interfering APs.

（C）It is best practice to implement automatic containment of unauthorized devices to eliminate the need to locate and remove them.

（D）Your company should consider legal implications before you enable automatic containment or implement manual containment.

（A）A DDoS attack targets multiple devices, while a DoS Is designed to Incapacitate only one device

（B）A DDoS attack is launched from multiple devices, while a DoS attack is launched from a single device

（C）A DoS attack targets one server, a DDoS attack targets all the clients that use a server

（D）A DDoS attack originates from external devices, while a DoS attack originates from internal devices

（A）AOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.

（B）You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.

（C）ClearPass admins will need to provide the credentials of an API admin account to configure on HPE Aruba Networking devices.

（D）TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

（A）The confidence level

（B）The detecting devices

（C）The match type

（D）The match method

（A）securing the network infrastructure control plane by creating a virtual out-of-band-management network

（B）simplifying network infrastructure management by using the MC to push configurations to the switches

（C）applying firewall policies and deep packet inspection to wired clients

（D）enhancing the security of communications from the access layer to the core with data encryption