HPE6-A78 Aruba Certified Network Security Associate Exam Question and Answers

a client that has a certificate issued by a trusted Certification Authority (CA)

a client that is not on the WIP blacklist

a client that has successfully authenticated to an authorized AP and passed encrypted traffic

a client that is on the WIP whitelist.

Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install

Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of enrolling and re-enrolling for certificate

Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.

Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

The role determines which authentication methods the user must pass to gain network access

The role determines which firewall policies and bandwidth contract apply to the clients traffic

The role determines which wireless networks (SSiDs) a user is permitted to access

The role determines which control plane ACL rules apply to the client's traffic

A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.

A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values

Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.

Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.

Assign the WLAN to a single new VLAN which is dedicated to wireless users

Use wireless user roles to assign the devices to different VLANs in the 100-150 range

Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.

Use wireless user roles to assign the devices to a range of new vlan IDs.

Disable Telnet and use TFTP instead.

Disable SSH and use https instead.

Disable Telnet and use SSH instead

Disable HTTPS and use SSH instead