HPE6-A84 by HP Valid Free Exam Practice Test

Question 1

A customer wants CPPM to authenticate non-802.1X-capable devices. An admin has created the service shown in the exhibits below:

What is one recommendation to improve security?

A. Enabling caching of posture and roles B. Creating and using a custom MAC-Auth authentication method C. Using Active Directory as the authentication source D. Adding an enforcement policy rule that denies access to endpoints with the Conflict flaq

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

A company has Aruba gateways and wants to start implementing gateway IDS/IPS. The customer has selected Block for the Fail Strategy.
What might you recommend to help minimize unexpected outages caused by using this particular fall strategy?

A. Making sure that the gateways have formed a cluster and operate in default gateway mode B. Enabling alerts and email notifications for events related to gateway IPS engine utilization and errors C. Configuring a relatively high threshold for the gateway threat count alerts D. Setting the IDS or IPS policy to the least restrictive option, Lenient

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

You have been given this certificate to install on a ClearPass server for the RADIUS/EAP and RadSec usages.
What is one issue?

A. The certificate does not have an IP subject alternative name B. The certificate uses a fully qualified the '.local" domain name. C. The certificate does not have a URI subject alternative name D. The certificate has a wildcard in the subject common name.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

A customer's admins have added RF Protect licenses and enabled WIDS for a customer's AOS 8-based solution. The customer wants to use the built-in capabilities of APs without deploying dedicated air monitors (AMs). Admins tested rogue AP detection by connecting an unauthorized wireless AP to a switch. The rogue AP was not detected even after several hours.
What is one point about which you should ask?

A. Whether admins set at least one radio on each AP to air monitor mode B. Whether APs' switch ports support all the VLANs that are accessible at the edge C. Whether admins enabled wireless containment D. Whether the customer is using non-standard Wi-Fi channels in the deployment

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

A company has Aruba gateways that are Implementing gateway IDS/IPS in IDS mode. The customer complains that admins are receiving too frequent of repeat email notifications for the same threat. The threat itself might be one that the admins should investigate, but the customer does not want the email notification to repeat as often.
Which setting should you adjust in Aruba Central?

A. Alert duration and threshold settings B. Report scheduling settings C. The IDS policy setting (strict, medium, or lenient) D. The allowlist settings in the IDS policy

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

The customer needs a way for users to enroll new wired clients in Intune. The clients should have limited access that only lets them enroll and receive certificates. You plan to set up these rights in an AOS-CX role named "provision." The customer's security team dictates that you must limit these clients' Internet access to only the necessary sites. Your switch software supports IPv4 and IPv6 addresses for the rules applied in the "provision" role.
What should you recommend?

A. Configuring the "provision" role as a downloadable user role (DUR) in CPPM B. Assigning the "provision" role to a VLAN and then setting up the rules within a Layer 2 access control list (ACL) C. Enabling tunneling to the MCs on the "provision" role and then setting up the privileges on the MCs D. Configuring the rules for the "provision" role with IPv6 addresses, which tend to be more stable

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

HP Aruba Certified Network Security Expert Written - HPE6-A84 Exam Practice Test