VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

HPE Aruba Networking Certified Associate - Network Security Free Sample Questions

Description

Covers common security threats and vulnerabilities, security protocols and PKI components, WIPS and WIDS alarm monitoring, attack stages and the kill chain, and log collection for investigations.

12 free sample questions156 in the full practice test

Try simulator

HPE6-A78 Sample Questions

  1. Question 1

    Intermediate

    Protect and Defend · Describe firewall (PEF), dynamic segmentation, RBAC, AppRF

    A network administrator is designing a Dynamic Segmentation solution for a branch office using Aruba AOS-CX switches and Aruba Gateways. The goal is to tunnel specific user traffic back to the Gateway for centralized Policy Enforcement Firewall (PEF) inspection while keeping other traffic local. Which architecture component allows the switch to establish this tunnel dynamically based on the user's role assignment from ClearPass?

    Answer and explanation

    Correct answer: B

    User-Based Tunneling (UBT) is the feature on AOS-CX switches that allows traffic to be tunneled to a Gateway based on the user role assigned by ClearPass. This enables centralized policy enforcement (PEF) for specific users or devices.

    graph LR Client((Client)) -->|Access| Switch[AOS-CX Switch] Switch -->|GRE Tunnel| GW[Aruba Gateway] GW -->|PEF Inspection| Core[Core Network] Switch -.->|Local Traffic| Core

  2. Question 2

    Intermediate

    Protect and Defend · Compare and contrast wireless LAN methodologies

    An organization requires a wireless security standard that provides forward secrecy and protection against offline dictionary attacks for personal devices that cannot support 802.1X. Which security method should be deployed to meet these requirements?

    Answer and explanation

    Correct answer: C

    WPA3-Personal uses Simultaneous Authentication of Equals (SAE) instead of the 4-way handshake used in WPA2. SAE provides forward secrecy (if a key is compromised later, past sessions remain secure) and is resistant to offline dictionary attacks.

  3. Question 3

    Intermediate

    Analyze · Troubleshoot with access tracker

    While troubleshooting an authentication issue in ClearPass Access Tracker, an administrator sees a request status of 'Timeout'. The Access Tracker details show no response from the authentication source. What is the most likely cause of this error?

    Answer and explanation

    Correct answer: B

    A 'Timeout' status in Access Tracker typically indicates that ClearPass received the RADIUS request but timed out waiting for a response from the configured Authentication Source (e.g., Active Directory/LDAP) or an external RADIUS token server.

  4. Question 4

    BeginnerMultiple answers

    Protect and Defend · Describe best practices to protect network infrastructure devices

    Which of the following actions are considered best practices for hardening the management plane of an Aruba AOS-CX switch? (Select TWO)

    Answer and explanation

    Correct answers: A, D

    Disabling unused interfaces prevents unauthorized physical connections to the network infrastructure.

    Using a dedicated management VRF (Virtual Routing and Forwarding) isolates management traffic from data plane traffic, preventing user traffic from reaching management interfaces.

  5. Question 5

    Beginner

    Protect and Defend · Disable insecure protocols and implement secure management

    True or False: Control Plane Security (CPsec) on Aruba Mobility Controllers uses IPsec to secure traffic between the controller and the Access Points (APs).

    Answer and explanation

    Correct answer: A

    This is True. CPsec (Control Plane Security) establishes an IPsec tunnel between the Mobility Controller and the APs to encrypt control plane traffic, preventing interception or tampering of management data.

  6. Question 6

    Beginner

    Analyze · Explain attack stages and kill chain

    A security analyst observes a sequence of events where an attacker scans the network for open ports, identifies a vulnerable service, and then sends a malicious payload to compromise a server. According to the Cyber Kill Chain model, the act of sending the payload corresponds to which stage?

    Answer and explanation

    Correct answer: C

    The Delivery stage involves transmitting the weaponized object (payload) to the target environment. Scanning is Reconnaissance; exploiting the vulnerability happens after Delivery (Exploitation).

    flowchart LR Recon[1. Reconnaissance] --> Weapon[2. Weaponization] Weapon --> Deliver[3. Delivery] Deliver --> Exploit[4. Exploitation] Exploit --> Install[5. Installation] Install --> C2[6. C2] C2 --> Action[7. Actions on Obj] style Deliver fill:#f96,stroke:#333,stroke-width:2px

Register free for 6 more questions

Or unlock all 156 HPE6-A78 questions with explanations, timed mode and flashcards.

Related practice tests

All Aruba practice exams