HP HPE6-A78 Aruba Certified Network Security Associate Exam Exam Practice Test Questions

• Question 1

  What is a benefit or using network aliases in ArubaOS firewall policies?

  • You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.
  • You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall
  • You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update
  • You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

  Show Answer Answer: A Next

• Question 2

  What is a correct guideline for the management protocols that you should use on ArubaOS-Switches?

  • Disable Telnet and use TFTP instead.
  • Disable SSH and use https instead.
  • Disable Telnet and use SSH instead
  • Disable HTTPS and use SSH instead

  Show Answer Answer: B Next

• Question 3

  An ArubaOS-CX switch enforces 802.1X on a port. No fan-through options or port-access roles are configured on the port The 802 1X supplicant on a connected client has not yet completed authenticationWhich type of traffic does the authenticator accept from the client?

  • EAP only
  • DHCP, DNS and RADIUS only
  • RADIUS only
  • DHCP, DNS, and EAP only

  Show Answer Answer: A Next

• Question 4

  You are troubleshooting an authentication issue for Aruba switches that enforce 802 IX10 a cluster of Aruba ClearPass Policy Manager (CPPMs) You know that CPPM Is receiving and processing the authentication requests because the Aruba switches are showing Access-Rejects in their statistics However, you cannot find the record tor the Access-Rejects in CPPM Access TrackerWhat is something you can do to look for the records?

  • Make sure that CPPM cluster settings are configured to show Access-Rejects
  • Verify that you are logged in to the CPPM Ul with read-write, not read-only, access
  • Click Edit in Access viewer and make sure that the correct servers are selected.
  • Go to the CPPM Event Viewer, because this is where RADIUS Access Rejects are stored.

  Show Answer Answer: A Next

• Question 5

  You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.What are two possible problems that have this symptom? (Select two)

  • Users are logging in with the wrong usernames and passwords or invalid certificates.
  • Clients are configured to use a mismatched EAP method from the one In the CPPM service.
  • The RADIUS shared secret does not match between the switch and CPPM.
  • CPPM does not have a network device defined for the switch's IP address.
  • Clients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

  Show Answer Answer: A, E Next