HP HPE6-A84 Aruba Certified Network Security Expert Written Exam Exam Practice Test Questions

• Question 1

  You are designing an Aruba ClearPass Policy Manager (CPPM) solution for a customer. You learn that the customer has a Palo Alto firewall that filters traffic between clients in the campus and the data center.Which integration can you suggest?

  • Sending Syslogs from the firewall to CPPM to signal CPPM to change the authentication status for misbehaving clients
  • Importing clients' MAC addresses to configure known clients for MAC authentication more quickly
  • Establishing a double layer of authentication at both the campus edge and the data center DMZ
  • Importing the firewall's rules to program downloadable user roles for AOS-CX switches more quickly

  Show Answer Answer: A Next

• Question 2

  A customer has an AOS 10-based mobility solution, which authenticates clients to Aruba ClearPass Policy Manager (CPPM). The customer has some wireless devices that support WPA2 in personal mode only.How can you meet these devices’ needs but improve security?

  • Use MPSK on the WLAN to which the devices connect.
  • Configure WIDS policies that apply extra monitoring to these particular devices.
  • Connect these devices to the same WLAN to which 802.1X-capable clients connect, using MAC- Auth fallback.
  • Enable dynamic authorization (RFC 3576) in the AAA profile for the devices.

  Show Answer Answer: A Next

• Question 3

  A company has Aruba gateways and wants to start implementing gateway IDS/IPS. The customer has selected Block for the Fail Strategy.What might you recommend to help minimize unexpected outages caused by using this particular fall strategy?

  • Configuring a relatively high threshold for the gateway threat count alerts
  • Making sure that the gateways have formed a cluster and operate in default gateway mode
  • Setting the IDS or IPS policy to the least restrictive option, Lenient
  • Enabling alerts and email notifications for events related to gateway IPS engine utilization and errors

  Show Answer Answer: D Next

• Question 4

  A company has Aruba gateways that are Implementing gateway IDS/IPS in IDS mode. The customer complains that admins are receiving too frequent of repeat email notifications for the same threat. The threat itself might be one that the admins should investigate, but the customer does not want the email notification to repeat as often.Which setting should you adjust in Aruba Central?

  • Report scheduling settings
  • Alert duration and threshold settings
  • The IDS policy setting (strict, medium, or lenient)
  • The allowlist settings in the IDS policy

  Show Answer Answer: B Next

• Question 5

  What is a common characteristic of a beacon between a compromised device and a command and control server?

  • Use of IPv6 addressing instead of IPv4 addressing
  • Lack of encryption
  • Use of less common protocols such as SNAP
  • Periodic transmission of small, identically sized packets

  Show Answer Answer: D Next