HP HPE6-A78 Value Pack (Frequently Bought Together)

How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?

• A. The firewall applies every rule that includes the dent's IP address as the source.
• B. The firewall applies the rules in policies associated with the client's wlan
• C. The firewall applies every rule that includes the client's IP address as the source or destination.
• D. The firewall applies thee rules in policies associated with the client's user role.

What is symmetric encryption?

• A. It simultaneously creates ciphertext and a same-size MAC.
• B. It uses the same key to encrypt plaintext as to decrypt ciphertext.
• C. It uses a Key that is double the size of the message which it encrypts.
• D. It any form of encryption mat ensures that thee ciphertext Is the same length as the plaintext.

You have been authorized to use containment to respond to rogue APs detected by ArubaOS Wireless Intrusion Prevention (WIP). What is a consideration for using tarpit containment versus traditional wireless containment?

• A. Tarpit containment does not require an RF Protect license to function, while traditional wireless containment does.
• B. Rather than target all clients connected to rogue APs, tarpit containment targets only authorized clients that are connected to a rogue AP, reducing the chance of negative effects on neighbors.
• C. Tarpit containment forms associations with clients to enable more effective containment with fewer disassociation frames than traditional wireless containment.
• D. Rather than function wirelessly, tarpit containment sends ARP frames over the wired network to poison rogue APs ARP tables and prevent them from transmitting on the wired network.

Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

• A. Assign the WLAN to a single new VLAN which is dedicated to wireless users
• B. Use wireless user roles to assign the devices to different VLANs in the 100-150 range
• C. Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.
• D. Use wireless user roles to assign the devices to a range of new vlan IDs.

What is a consideration for using MAC authentication (MAC-Auth) to secure a wired or wireless connection?

• A. As a Layer 2 authentication method, MAC-Auth cannot be used to authenticate devices to an external authentication server.
• B. Headless devices, such as Internet of Things (loT) devices, must be configured in advance to support MAC-Auth.
• C. MAC-Auth can add a degree of security to an open WLAN by enabling the generation of a PMK to encrypt traffic.
• D. It is very easy for hackers to spoof their MAC addresses and get around MAC authentication.