Free HP HPE6-A78 Practice Exam Questions and Answers 2026

Start Learning with the Newest and 100% Free HPE6-A78 Exam Dumps Questions

Page: 1 / 34

Total 170 Questions | Updated On: Apr 03, 2026

Add To Cart

Question 1

What is a difference between passive and active endpoint classification?

A : Passive classification refers exclusively to MAC OUI-based classification, while active classification refers to any other classification method.

B : Passive classification classifies endpoints based on entries in dictionaries, while active classification uses admin-defined rules to classify endpoints.

C : Passive classification is only suitable for profiling endpoints in small business environments, while enterprises should use active classification exclusively.

D : Passive classification analyzes traffic that endpoints send as part of their normal functions; active classification involves sending requests to endpoints.

Answer: D

Question 2

What is one way that Control Plane Security (CPSec) enhances security for the network?

A : It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

B : It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs') control plane.

C : It protects wireless clients' traffic, tunneled between APs and Mobility Controllers, from eavesdropping.

D : It prevents access from unauthorized IP addresses to critical services, such as SSH, on Mobility Controllers (MCs).

Answer: A

Question 3

What is a benefit or using network aliases in ArubaOS firewall policies?

A : You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.

B : You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall

C : You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update

D : You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Answer: C

Question 4

A company has an HPE Aruba Networking Instant AP cluster. A Windows 10 client is attempting to connect to a WLAN that enforces WPA3-Enterprise with authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). CPPM is configured to require EAP-TLS. The client authentication fails. In the record for this client's authentication attempt on CPPM, you see this alert. What is one thing that you check to resolve this issue?

A : Whether EAP-TLS is enabled in the AAA Profile settings for the WLAN on the IAP cluster

B : Whether the client has a valid certificate installed on it to let it support EAP-TLS

C : Whether EAP-TLS is enabled in the SSID Profile settings for the WLAN on the IAP cluster

D : Whether the client has a third-party 802.1X supplicant, as Windows 10 does not support EAP-TLS

Answer: B

Question 5

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-Switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. This company is using only CPPM and no other ClearPass solutions. The ClearPass admins tell you that they want to use HTTP User-Agent strings to help classify endpoints. What should you do as a part of configuring the ArubaOS-Switches to support this requirement?

A : Create a device fingerprinting policy that includes HTTP, and apply the policy to edge ports.

B : Create remote mirrors that collect traffic on edge ports, and mirror it to CPPM's IP address.

C : Configure CPPM as the sFlow collector, and make sure that sFlow is enabled on edge ports.

D : Connect the switches to CPPM's span ports, and set up mirroring of HTTP traffic on the switches.

Answer: C

Page: 1 / 34

Total 170 Questions | Updated On: Apr 03, 2026

Add To Cart