최신HP Aruba Certified Network Security Associate - HPE6-A78무료샘플문제

A. it permits both of the packets

B. It drops the packet to 10.1.10.10 and permits the packet to 203.0.13.5.

C. It drops both of the packets

D. It permits the packet to 10.1.10.10 and drops the packet to 203 0.13.5

A. There is no need to locate the AP If the Aruba solution is properly configured to automatically contain it.

B. This is a serious security event, so you should always contain the AP immediately regardless of your company's specific policies.

C. For forensic purposes, you should copy out logs with relevant information, such as the time mat the AP was detected and the AP's MAC address.

D. You should receive permission before containing an AP. as this action could have legal Implications.

E. There is no need to locale the AP If you manually contain It.

A. Ask for the Syslog password and configure it on the switch.

B. Add categories (system-modules) at the global level.

C. Specify "warning" as the global level.

D. Configure logging as a debug destination.

A. It can respond to a client's DHCP Discover with different DHCP Offers and then analyze the responses to identify the client OS.

B. It can determine information such as the endpoint OS from the order of options listed in Option 55 of a DHCP Discover packet.

C. It can snoop DHCP traffic to register the clients' IP addresses. It then knows where to direct its HTTP requests to actively probe for information about the client.

D. It can alter the DHCP Offer to insert itself as a proxy gateway. It will then be inline in the traffic flow and can apply traffic analytics to classify clients.

A. CPPM can analyze settings such as TTL and time window size in endpoints' TCP traffic in order to fingerprint the OS.

B. CPPM can use Wireshark to actively probe devices, analyze their traffic patterns, and construct an endpoint profile.

C. CPPM can use SNMP to configure Aruba switches and mobility devices to mirror client traffic to CPPM for analysis.

D. CPPM can analyze settings such as TCP/UDP ports used for HTTP, DHCP, and DNS in endpoints' traffic to fingerprint the OS.

A. Installing CA-signed certificates on the APs

B. Configuring a PAPI key that matches on the APs and MCs

C. Approving the APs as authorized APs on the AP whitelist

D. Installing self-signed certificates on the APs

A. The hacker uses a combination of software and hardware to jam the RF band and prevent the client from connecting to any wireless networks.

B. The hacker connects a device to the same wireless network as the client and responds to the client's ARP requests with the hacker device's MAC address.

C. The hacker runs an NMap scan on the wireless client to find its MAC and IP address. The hacker then connects to another network and spoofs those addresses.

D. The hacker uses spear-phishing to probe for the IP addresses that the client is attempting to reach. The hacker device then spoofs those IP addresses.

A. It could open a backdoor into the corporate LAN for unauthorized users.

B. It is running in a non-standard 802.11 mode and could effectively jam the wireless signal.

C. It is flooding the air with many wireless frames in a likely attempt at a DoS attack.

D. It could be attempting to conceal itself from detection by changing its BSSID and SSID frequently.

A. PMF prevents hackers from capturing the traffic between APs and Mobility Controllers.

B. PMF ensures trial traffic between APs and Mobility Controllers (MCs) is encrypted.

C. PMF helps to protect APs and MCs from unauthorized management access by hackers.

D. PMF protects clients from DoS attacks based on forged de-authentication frames

A. In the MC UI's Diagnostics > Logs pages, add a "user-debug" log setting for the client's MAC address.

B. In the MC UI's Traffic Analytics dashboard, look for the client's IP address.

C. In the MC CLI, set up a control plane packet capture and filter for the client's IP address.

D. In the MC CLI, set up a data plane packet capture and filter for the client's MAC address.

A. A hacker eavesdrops on insecure communications, such as Remote Desktop Protocol (RDP), and discovers login credentials.

B. An attack exploits an operating system vulnerability and locks out users until they pay the ransom.

C. An email is used to impersonate a bank and trick users into entering their bank login information on a fake website page.

D. A user visits a website and downloads a file that contains a worm, which self-replicates throughout the network.

A. Your company should consider legal implications before you enable automatic containment or implement manual containment.

B. Because wireless containment has a lower risk of targeting legitimate neighbors than wired containment, it is recommended in most use cases.

C. Wireless containment only works against unauthorized wireless devices that connect to your corporate LAN, so it does not offer protection against Interfering APs.

D. It is best practice to implement automatic containment of unauthorized devices to eliminate the need to locate and remove them.

A. MAC address: d8:50:e6:f3:6d:a4; Client Classification: Authorized; AP Classification: Suspected Rogue

B. MAC address: d8:50:e6:f3:6e:60; Client Classification: Interfering; AP Classification: Interfering

C. MAC address: d8:50:e6:f3:6e:c5; Client Classification: Interfering; AP Classification: Neighbor

D. MAC address: d8:50:e6:f3:70:ab; Client Classification: Interfering; AP Classification: Suspected Rogue