What is a benefit of Opportunistic Wireless Encryption (OWE)?

1. A. It allows both WPA2-capabie and WPA3-capable clients to authenticate to the same WPA-Personal WLAN
2. B. It offers more control over who can connect to the wireless network when compared with WPA2-Personal
3. C. It allows anyone lo connect, but provides better protection against eavesdropping than a traditional open network
4. D. It provides protection for wireless clients against both honeypot APs and man-in-the-middle (MUM) attacks

Correct Answer: C

Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?

1. A. Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.
2. B. Specify 192.168.1.0.255.255.255.0 as authorized IP manager address
3. C. Configure the switch to listen for these protocols on OOBM only.
4. D. Specify vlan 100 as the management vlan for the switches.

Correct Answer: A

What is a reason to set up a packet capture on an Aruba Mobility Controller (MC)?

1. A. The company wants to use ClearPass Policy Manager (CPPM) to profile devices and needs to receive HTTP User-Agent strings from the MC.
2. B. The security team believes that a wireless endpoint connected to the MC is launching an attack and wants to examine the traffic more closely.
3. C. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control the traffic I based on application.
4. D. You want the MC to analyze wireless clients' traffic at a lower level, so that the ArubaOS firewall can control Web traffic based on the destination URL.

Correct Answer: C

What role does the Aruba ClearPass Device Insight Analyzer play in the Device Insight architecture?

1. A. It resides in the cloud and manages licensing and configuration for Collectors
2. B. It resides on-prem and provides the span port to which traffic is mirrored for deep analytics.
3. C. It resides on-prem and is responsible for running active SNMP and Nmap scans
4. D. It resides In the cloud and applies machine learning and supervised crowdsourcing to metadata sent by Collectors

Correct Answer: D

What is a benefit or using network aliases in ArubaOS firewall policies?

1. A. You can associate a reputation score with the network alias to create rules that filler traffic based on reputation rather than IP.
2. B. You can use the aliases to translate client IP addresses to other IP addresses on the other side of the firewall
3. C. You can adjust the IP addresses in the aliases, and the rules using those aliases automatically update
4. D. You can use the aliases to conceal the true IP addresses of servers from potentially untrusted clients.

Correct Answer: A