HPE6-A78

Review 60 HPE6-A78 practice questions with answer explanations and community insights.

Question 1

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from ClearPass Onboard. The infrastructure devices authenticate clients to ClearPass Policy Manager (CPPM). The company wants to start profiling clients to take their device type into account in their access rights.What is a role that ClearPass Onboard should play in this plan?

  1. sharing information with the profiler
  2. determining the correct access level for clients
  3. assigning clients to their device categories
  4. enforcing access control decisions

Question 2

A user attempts to connect to an SSID configured on an AOS-8 mobility architecture with Mobility Controllers (MCs) and APs. The SSID enforces WPA3-Enterprise security and uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as the authentication server. The WLAN has initial role, logon, and 802.1 X default role, guest.A user attempts to connect to the SSID, and CPPM sends an Access-Accept with an Aruba-User-Role VSA of "contractor," which exists on the MC.What does the MC do?

  1. Applies the rules in the contractor role and guest role
  2. Applies the rules in the contractor role and the logon role
  3. Applies the rules in the contractor role
  4. Applies the rules in the logon role, then guest role, and the contractor role

Question 3

You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS + server. When an admin authenticates, CPPM sends a response with:* Aruba-Admin-Role = auditors* TACACS+ privilege level = 1What happens to the user?

  1. The user receives auditors access.
  2. The user receives administrators access.
  3. The user receives no access.
  4. The user receives operators access.

Question 4

What is one benefit of enabling Enhanced Secure mode on an AOS-CX switch?

  1. All interfaces have 802.1X authentication enabled on them by default.
  2. A self-signed certificate is automatically added to the switch trusted platform module (TPM).
  3. Users are prevented from accessing the switch software shell.
  4. A default access list is applied to the switch’s control plane.

Question 5

A client is connected to a Mobility Controller (MC). These firewall rules apply to this client’s role: ipv4 any any svc-dhcp permit ipv4 user 10.1.5.20 svc-dns permit ipv4 user 10.1.1.0 255.255.255.0 https permit ipv4 user 10.1.0.0 255.255.0.0 https deny_opt ipv4 user any any permitWhat correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall:10.1.20.110.1.5.20

  1. Both packets are permitted.
  2. Both packets are denied.
  3. The first packet is denied, and the second is permitted.
  4. The first packet is permitted, and the second is denied.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.