Free Access to HP.HPE6-A78.v2025-08-26.q105 with Valid Practice Test (Page 14)

Question 61

What is one way that Control Plane Security (CPsec) enhances security for me network?

A.It protects wireless clients' traffic tunneled between APs and Mobility Controllers, from eavesdropping
B.It prevents Denial of Service (DoS) attacks against Mobility Controllers' (MCs") control plane.
C.It prevents access from unauthorized IP addresses to critical services, such as SSH on Mobility Controllers (MCs).
D.It protects management traffic between APs and Mobility Controllers (MCs) from eavesdropping.

Question 62

What is a use case for tunneling traffic between an Aruba switch and an AruDa Mobility Controller (MC)?

A.applying firewall policies and deep packet inspection to wired clients
B.enhancing the security of communications from the access layer to the core with data encryption
C.securing the network infrastructure control plane by creating a virtual out-of-band-management network
D.simplifying network infrastructure management by using the MC to push configurations to the switches

Question 63

Your Aruba Mobility Master-based solution has detected a suspected rogue AP. Among other information, the ArubaOS Detected Radios page lists this information for the AP:
SSID = PublicWiFi
BSSID = a8:bd:27:12:34:56
Match method = Plus one
Match method = Eth-Wired-Mac-Table
The security team asks you to explain why this AP is classified as a rogue. What should you explain?

A.The AP has a BSSID that is close to your authorized APs' BSSIDs. This indicates that the AP might be spoofing the corporate SSID and attempting to lure clients to it, making the AP a suspected rogue.
B.The AP is probably connected to your LAN because it has a BSSID that is close to a MAC address that has been detected in your LAN. Because it does not belong to the company, it is a suspected rogue.
C.The AP has been detected using multiple MAC addresses. This indicates that the AP is spoofing its MAC address, which qualifies it as a suspected rogue.
D.The AP is an AP that belongs to your solution. However, the ArubaOS has detected that it is behaving suspiciously. It might have been compromised, so it is classified as a suspected rogue.

Question 64

What is a difference between radius and TACACS+?

A.RADIUS encrypts the complete packet, white TACACS+ only offers partial encryption.
B.RADIUS uses TCP for Its connection protocol, while TACACS+ uses UDP tor its connection protocol.
C.RADIUS uses Attribute Value Pairs (AVPs) in its messages, while TACACS+ does not use them.
D.RADIUS combines the authentication and authorization process while TACACS+ separates them.

Question 65