HPE6-A78 Sample Questions & Answers
Protecting and defending against threats makes up most of the test, built on common vulnerabilities, security protocols and PKI, well ahead of analyzing WIPS and WIDS alarms and the kill chain, and the smallest portion on log collection for investigations.
Launch the full HPE6-A78 simulator →Showing 6 of 12 free samples.
- Question 1BeginnerSelect 2
Protect and Defend · Describe best practices to protect network infrastructure devices
Which of the following actions are considered best practices for hardening the management plane of an Aruba AOS-CX switch? (Select TWO)
Show answer & explanation
Correct answers: A, D
Disabling unused interfaces prevents unauthorized physical connections to the network infrastructure.
Using a dedicated management VRF (Virtual Routing and Forwarding) isolates management traffic from data plane traffic, preventing user traffic from reaching management interfaces.
- Question 2Beginner
Protect and Defend · Disable insecure protocols and implement secure management
True or False: Control Plane Security (CPsec) on Aruba Mobility Controllers uses IPsec to secure traffic between the controller and the Access Points (APs).
Show answer & explanation
Correct answer: A
This is True. CPsec (Control Plane Security) establishes an IPsec tunnel between the Mobility Controller and the APs to encrypt control plane traffic, preventing interception or tampering of management data.
- Question 3Beginner
Analyze · Explain attack stages and kill chain
A security analyst observes a sequence of events where an attacker scans the network for open ports, identifies a vulnerable service, and then sends a malicious payload to compromise a server. According to the Cyber Kill Chain model, the act of sending the payload corresponds to which stage?
Show answer & explanation
Correct answer: C
The Delivery stage involves transmitting the weaponized object (payload) to the target environment. Scanning is Reconnaissance; exploiting the vulnerability happens after Delivery (Exploitation).
flowchart LR Recon[1. Reconnaissance] --> Weapon[2. Weaponization] Weapon --> Deliver[3. Delivery] Deliver --> Exploit[4. Exploitation] Exploit --> Install[5. Installation] Install --> C2[6. C2] C2 --> Action[7. Actions on Obj] style Deliver fill:#f96,stroke:#333,stroke-width:2px - Question 4Intermediate
Protect and Defend · Common security protocols and use cases
In an 802.1X authentication implementation using EAP-TLS, which of the following certificates are MANDATORY for successful authentication?
Show answer & explanation
Correct answer: C
EAP-TLS (Transport Layer Security) requires mutual authentication. The server must present a certificate to the client to prove its identity, and the client must present a valid certificate to the server to authenticate.
- Question 5Beginner
Investigate · Chain of custody
When initiating a forensic investigation involving digital evidence from a network breach, what is the primary purpose of establishing a Chain of Custody?
Show answer & explanation
Correct answer: D
Chain of Custody is the chronological documentation or paper trail that records the sequence of custody, control, transfer, analysis, and disposition of physical or electronic evidence. It is essential for proving in court that the evidence has not been altered.
- Question 6Advanced
Protect and Defend · User roles and policy enforcement
In an Aruba Mobility Controller environment, multiple methods can assign a user role to a client. If a client connects and multiple assignment methods are applicable, which of the following has the HIGHEST priority?
Show answer & explanation
Correct answer: C
In ArubaOS role derivation, server-derived roles (sent via RADIUS Vendor Specific Attributes) typically have the highest priority, overriding user derivation rules and default roles.
Ready for the real thing?
The full HPE6-A78 simulator has every exam-style question, timed mode, and instant scoring.