Free HP HPE6-A78 Exam Dumps Questions & Answers

A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?

• A.  one PEF license per-switch. and one WCC license per-switch
• B.  one PEF license per-switch
• C.  one AP license per-switch
• D.  one AP license per-switch. and one PEF license per-switch

How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

• A.  The firewall applies thee rules in policies associated with the client's user role.
• B.  The firewall applies the rules in policies associated with the client's wlan
• C.  The firewall applies every rule that includes the dent's IP address as the source.
• D.  The firewall applies every rule that includes the client's IP address as the source or destination.

A company has a WLAN that uses Tunnel forwarding mode and WPA3-Enterprise security, supported by an Aruba Mobility Controller (MC) and campus APs (CAPs). You have been asked to capture packets from a wireless client connected to this WLAN and submit the packets to the security team.
What is a guideline for this capture?

• A.  You should capture the traffic on the MC dataplane to obtain unencrypted traffic.
• B.  You should capture the traffic on the AP, so that the capture is as close to the source as possible.
• C.  You should use an Air Monitor (AM) to capture the packets in the air.
• D.  You should mirror traffic from the switch port that connects to the AP out on a port connected to a packet analyzer.

Your AOS solution has detected a rogue AP with Wireless Intrusion Prevention (WIP). Which information about the detected radio can best help you to locate the rogue device?

• A.  The detecting devices
• B.  The match method
• C.  The confidence level
• D.  The match type

What is one thing can you determine from the exhibits?

• A.  CPPM first assigned the client to a role based on the user's identity. Then, it discovered that the client had an invalid category, so it sent a CoA to blacklist the client.
• B.  CPPM was never able to determine a device category for this device, so you need to check settings in the network infrastructure to ensure they support CPPM's endpoint classification.
• C.  CPPM sent a CoA message to the client to prompt the client to submit information that CPPM can use to profile it.
• D.  CPPM originally assigned the client to a role for non-profiled devices. It sent a CoA to the authenticator after it categorized the device.