Why might devices use a Diffie-Hellman exchange?

• A.to agree on a shared secret in a secure manner over an insecure network
• B.to obtain a digital certificate signed by a trusted Certification Authority
• C.to prove knowledge of a passphrase without transmitting the passphrase
• D.to signal that they want to use asymmetric encryption for future communications

Comment: *

Name: *

Email: *

Verification: *

A company has Aruba Mobility Controllers (MCs), Aruba campus APs, and ArubaOS-CX switches. The company plans to use ClearPass Policy Manager (CPPM) to classify endpoints by type. The company is contemplating the use of ClearPass's TCP fingerprinting capabilities.
What is a consideration for using those capabilities?

• A.ClearPass admins will need to provide the credentials of an API admin account to configure on Aruba devices.
• B.You will need to mirror traffic to one of CPPM's span ports from a device such as a core routing switch.
• C.ArubaOS-CX switches do not offer the support necessary for CPPM to use TCP fingerprinting on wired endpoints.
• D.TCP fingerprinting of wireless endpoints requires a third-party Mobility Device Management (MDM) solution.

Comment: *

Name: *

Email: *

Verification: *

A company has an ArubaOS controller-based solution with a WPA3-Enterprise WLAN. which authenticates wireless clients to Aruba ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication A user's Windows domain computer has had certificates installed on it However, the Networks and Connections window shows that authentication has tailed for the user. The Mobility Controllers (MC's) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can you look for deeper insight into why this authentication attempt is failing?

• A.the reports generated by Aruba ClearPass Insight
• B.the RADIUS events within the CPPM Event Viewer
• C.the Alerts tab in the authentication record in CPPM Access Tracker
• D.the packets captured on the MC control plane destined to UDP 1812

Comment: *

Name: *

Email: *

Verification: *

What is one benefit of enabling Enhanced Secure mode on an ArubaOS-Switch?

• A.Control Plane policing rate limits edge ports to mitigate DoS attacks on network servers.
• B.A self-signed certificate is automatically added to the switch trusted platform module (TPM).
• C.Insecure algorithms for protocol such as SSH are automatically disabled.
• D.All interfaces have 802.1X authentication enabled on them by default.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit, which shows the current network topology.

You are deploying a new wireless solution with an Aruba Mobility Master (MM). Aruba Mobility Controllers (MCs). and campus APs (CAPs). The solution will Include a WLAN that uses Tunnel for the forwarding mode and Implements WPA3-Enterprise security What is a guideline for setting up the vlan for wireless devices connected to the WLAN?

• A.Assign the WLAN to a single new VLAN which is dedicated to wireless users
• B.Use wireless user roles to assign the devices to different VLANs in the 100-150 range
• C.Assign the WLAN to a named VLAN which specified 100-150 as the range of IDs.
• D.Use wireless user roles to assign the devices to a range of new vlan IDs.

Comment: *

Name: *

Email: *

Verification: *