Free HPE6-A78 Questions for HP Aruba Certified Network Security Associate HPE6-A78 Exam as PDF & Practice Test Engine

  • Exam Code/Number: HPE6-A78
  • Exam Name/Title: Aruba Certified Network Security Associate Exam
  • Certification Provider: HP
  • Corresponding Certification: Aruba ACNSA
  • Exam Questions: 170
  • Updated On: Aug 21, 2026
A company has an AOS controller-based solution with a WPA3-Enterprise WLAN, which authenticates wireless clients to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company has decided to use digital certificates for authentication. A user's Windows domain computer has had certificates installed on it. However, the Networks and Connections window shows that authentication has failed for the user. The Mobility Controller's (MC's) RADIUS events show that it is receiving Access-Rejects for the authentication attempt.
What is one place that you can look for deeper insight into why this authentication attempt is failing?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
What is one of the roles of the network access server (NAS) in the AAA framewonx?
Correct Answer: C Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
The first exhibit shows roles on the MC, listed in alphabetic order. The second and third exhibits show the configuration for a WLAN to which a client connects. Which description of the role assigned to a user under various circumstances is correct?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
This company has AOS-CX switches. The exhibit shows one access layer switch, Switch-2, as an example, but the campus actually has more switches. Switch-1 is a core switch that acts as the default router for end-user devices.
What is a correct way to configure the switches to protect against exploits from untrusted end-user devices?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Which correctly describes one of HPE Aruba Networking ClearPass Policy Manager's (CPPM's) device profiling methods?
Correct Answer: C Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
What is one way that WPA3-PerSonal enhances security when compared to WPA2-Personal?
Correct Answer: D Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
How does the ArubaOS firewall determine which rules to apply to a specific client's traffic?
Correct Answer: B Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Why might devices use a Diffie-Hellman exchange?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Refer to the exhibit.

You have set up a RADIUS server on an ArubaOS Mobility Controller (MC) when you created a WLAN named "MyEmployees .You now want to enable the MC to accept change of authorization (CoA) messages from this server for wireless sessions on this WLAN.
What Is a part of the setup on the MC?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
You need to set up Aruba network infrastructure devices for management with SNMP. The SNMP server has this SNMPv3 user configured on it: username: airwave auth algorithm: sha auth key: fyluqp18@S!9a priv algorithm: aes priv key: 761oxaiaoeu19& What correctly describes the setup on the infrastructure device?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Which is a correct description of a Public Key Infrastructure (PKI)?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:
Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514) Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning" The switch did not have any "logging" configuration on it. You then entered this command:
AOS-CX(config)# logging 10.4.13.15 tcp vrf default
What should you do to finish configuring to the requirements?
Correct Answer: B Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
Your Aruba Mobility Master-based solution has detected a rogue AP Among other information the ArubaOS Detected Radios page lists this Information for the AP SSID = PubllcWiFI BSSID = a8M27 12 34:56 Match method = Exact match Match type = Eth-GW-wired-Mac-Table The security team asks you to explain why this AP is classified as a rogue. What should you explain?
Correct Answer: A Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
How should admins deal with vulnerabilities that they find in their systems?
Correct Answer: C Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
A company is deploying ArubaOS-CX switches to support 135 employees, which will tunnel client traffic to an Aruba Mobility Controller (MC) for the MC to apply firewall policies and deep packet inspection (DPI). This MC will be dedicated to receiving traffic from the ArubaOS-CX switches.
What are the licensing requirements for the MC?
Correct Answer: D Vote an answer
Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).
0
0
0
10