Free HP HPE6-A78 Practice Questions & Answers 2026 Part1

Question #1

You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS + server. When an admin authenticates, CPPM sends a response with:* Aruba-Admin-Role = auditors* TACACS+ privilege level = 1What happens to the user?

A. he user receives auditors access

B. he user receives administrators access

C. he user receives no access

D. he user receives operators access

View answer

Correct Answer: A

Question #2

You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANs enforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connecting the client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt You ping from the MC to CPPM. and the ping is successful.What is a good next step for troubleshooting?

A. enew CPPM's RADIUS/EAP certificate

B. eset the user credentials

C. heck CPPM Event viewer

D. heck connectivity between CPPM and a backend directory server

View answer

Correct Answer: C

Question #3

What is an example of active endpoint classification?

A. WMI scans

B. DHCP fingerprinting

C. MAC OUI based classification

D. TCP fingerprinting

View answer

Correct Answer: A

Question #4

A user attempts to connect to an SSID configured on an AOS-8 mobility architecture with Mobility Controllers (MCs) and APs. The SSID enforces WPA3-Enterprise security and uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as the authentication server. The WLAN has initial role, logon, and 802.1 X default role, guest.A user attempts to connect to the SSID, and CPPM sends an Access-Accept with an Aruba-User-Role VSA of "contractor," which exists on the MC.What does the MC do?

A. Applies the rules in the contractor role and guest role

B. Applies the rules in the contractor role and the logon role

C. Applies the rules in the contractor role

D. Applies the rules in the logon role, then guest role, and the contractor role

View answer

Correct Answer: C

Question #5

Which correctly describes a way to deploy certificates to end-user devices?

A. learPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

B. learPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

C. learPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

D. n a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

View answer

Correct Answer: A

Question #6

You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS + server. When an admin authenticates, CPPM sends a response with:* Aruba-Admin-Role = auditors* TACACS+ privilege level = 1What happens to the user?

A. The user receives auditors access

B. The user receives administrators access

C. The user receives no access

D. The user receives operators access

View answer

Correct Answer: A

Question #7

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from ClearPass Onboard. The infrastructure devices authenticate clients to ClearPass Policy Manager (CPPM). The company wants to start profiling clients to take their device type into account in their access rights.What is a role that ClearPass Onboard should play in this plan?

A. haring information with the profiler

B. etermining the correct access level for clients

C. ssigning clients to their device categories

D. nforcing access control decisions

View answer

Correct Answer: A

Question #8

You have an Aruba Mobility Controller (MC) that is locked in a closet. What is another step that Aruba recommends to protect the MC from unauthorized access?

A. Use local authentication rather than external authentication to authenticate admins

B. Change the password recovery password

C. Set the local admin password to a long random value that is unknown or locked up securely

D. Disable local authentication of administrators entirely

View answer

Correct Answer: B

Question #9

An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from ClearPass Onboard. The infrastructure devices authenticate clients to ClearPass Policy Manager (CPPM). The company wants to start profiling clients to take their device type into account in their access rights.What is a role that ClearPass Onboard should play in this plan?

A. sharing information with the profiler

B. determining the correct access level for clients

C. assigning clients to their device categories

D. enforcing access control decisions

View answer

Correct Answer: A

Question #10

How does the AOS firewall determine which rules to apply to a specific client's traffic?

A. he firewall applies every rule that includes the client's IP address as the source or destination

B. he firewall applies the rules in policies associated with the client's user role

C. he firewall applies the rules in policies associated with the client's WLAN

D. he firewall applies every rule that includes the client's IP address as the source

View answer

Correct Answer: B

Question #11

What is one way a noneypot can be used to launch a man-in-the-middle (MITM) attack to wirelessclients?

A. t uses a combination or software and hardware to jam the RF band and prevent the client from connecting to any wireless networks

B. t runs an NMap scan on the wireless client to And the clients MAC and IP address

C. t examines wireless clients' probes and broadcasts the SSlDs in the probes, so that wireless clients will connect to it automatically

D. t uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force clients to connect to the hacker's wireless network instead

View answer

Correct Answer: C

Question #12

Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP:SSID = PublicWiFiBSSID = a8:bd:27:12:34:56Match method = Plus oneMatch method = Eth-Wired-Mac-TableThe security team asks you to explain why this AP is classified as a rogue. What should you explain?

A. he AP has been detected using multiple MAC addresses

B. he AP is probably connected to your LAN because it has a BSSID that is close to a MAC address that has been detected in your LAN

C. he AP has a BSSID that is close to your authorized APs' BSSIDs

D. he AP is an AP that belongs to your solution

View answer

Correct Answer: B

Question #13

You have an HPE Aruba Networking Mobility Controller (MC) that is locked in a closet. What is another step that HPE Aruba Networking recommends to protect the MC from unauthorized access?

A. hange the password recovery password

B. se local authentication rather than external authentication to authenticate admins

C. et the local admin password to a long random value that is unknown or locked up securely

D. isable local authentication of administrators entirely

View answer

Correct Answer: C

Question #14

You have deployed a new Aruba Mobility Controller (MC) and campus APs (CAPs). One of the WLANsenforces 802.IX authentication lo Aruba ClearPass Policy Manager {CPPM) When you test connectingthe client to the WLAN. the test falls You check Aruba ClearPass Access Tracker and cannot find arecord of the authentication attempt You ping from the MC to CPPM. and the ping is successful.What is a good next step for troubleshooting?

A. enew CPPM's RADIUS/EAP certificate

B. eset the user credentials

C. heck CPPM Event viewer

D. heck connectivity between CPPM and a backend directory server

View answer

Correct Answer: C

Question #15

Which attack is an example of social engineering?

A. An email is used to impersonate a bank and trick users into entering their bank login information on a fake website page

B. An attack exploits an operating system vulnerability and locks out users until they pay the ransom

C. A hacker eavesdrops on insecure communications, such as Remote Desktop Protocol (RDP), and discovers login credentials

D. A user visits a website and downloads a file that contains a worm, which self-replicates throughout the network

View answer

Correct Answer: A

Question #16

Which correctly describes a way to deploy certificates to end-user devices?

A. ClearPass Onboard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

B. ClearPass Device Insight can automatically discover end-user devices and deploy the proper certificates to them

C. ClearPass OnGuard can help to deploy certificates to end-user devices, whether or not they are members of a Windows domain

D. in a Windows domain, domain group policy objects (GPOs) can automatically install computer, but not user certificates

View answer

Correct Answer: A

Question #17

What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?

A. It resides in the cloud and manages licensing and configuration for Collectors

B. It resides on - prem and provides the span port to which traffic is mirrored for deep analytics

C. It resides on - prem and is responsible for running active SNMP and Nmap scans

D. It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors

View answer

Correct Answer: D

Question #18

Which endpoint classification capabilities do Aruba network infrastructure devices have on their own without ClearPass solutions?

A. rubaOS-Switches can use DHCP fingerprints to construct detailed endpoint profiles

B. rubaOS-CX switches can use a combination of active and passive methods to assign roles to clients

C. rubaOS devices can use a combination of DHCP fingerprints, HTTP User-Agent strings, and Nmap to construct endpoint profiles

D. rubaOS devices (controllers and lAPs) can use DHCP fingerprints to assign roles to clients

View answer

Correct Answer: D

Question #19

What purpose does an initialization vector (IV) serve for encryption?

A. It helps parties to negotiate the keys and algorithms used to secure data before data transmission

B. It makes encryption algorithms more secure by ensuring that same plaintext and key can produce different ciphertext

C. It enables programs to convert easily-remembered passphrases to keys of a correct length

D. It enables the conversion of asymmetric keys into keys that are suitable for symmetric encryption

View answer

Correct Answer: B

Question #20

What is a difference between passive and active endpoint classification?

A. Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method

B. Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints

C. Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively

D. Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free HP HPE6-A78 Practice Questions & Answers 2026 Part1 | Aruba Certified

View The Updated Aruba Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free HP HPE6-A78 Practice Questions & Answers 2026 Part1 | Aruba Certified

View The Updated Aruba Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now