HPE6-A78 試験問題を無料オンラインアクセス

Which correctly describes a way to deploy certificates to end-user devices?

• A.ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them
• B.ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
• C.ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain
• D.in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

What is a difference between passive and active endpoint classification?

• A.Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.
• B.Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.
• C.Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.
• D.Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

Refer to the exhibits.
An admin has created a WLAN that uses the settings shown in the exhibits (and has not otherwise adjusted the settings in the AAA profile). A client connects to the WLAN. Under which circumstances will a client receive the default role assignment?

• A.The client has attempted 802.1X authentication, but the MC could not contact the authentication server.
• B.The client has attempted 802.1X authentication, but failed to maintain a reliable connection, leading to a timeout error.
• C.The client has passed 802.1X authentication, and the authentication server did not send an Aruba-User-Role VSA.
• D.The client has passed 802.1X authentication, and the value in the Aruba-User-Role VSA matches a role on the MC.

You are checking the Security Dashboard in the Web UI for your AOS solution and see that Wireless Intrusion Prevention (WIP) has discovered a rogue radio operating in ad hoc mode with open security. What correctly describes a threat that the radio could pose?

• A.It could be attempting to conceal itself from detection by changing its BSSID and SSID frequently.
• B.It is flooding the air with many wireless frames in a likely attempt at a DoS attack.
• C.It could open a backdoor into the corporate LAN for unauthorized users.
• D.It is running in a non-standard 802.11 mode and could effectively jam the wireless signal.

What is a vulnerability of an unauthenticated Dime-Heliman exchange?

• A.A brute force attack can relatively quickly derive Diffie-Hellman private values if they are able to obtain public values
• B.Participants must agree on a passphrase in advance, which can limit the usefulness of Diffie- Hell man in practical contexts.
• C.A hacker can replace the public values exchanged by the legitimate peers and launch an MITM attack.
• D.Diffie-Hellman with elliptic curve values is no longer considered secure in modem networks, based on NIST recommendations.