About this exam
HPE6-A78 is the HP exam Aruba Certified Network Security Associate Exam.
Paid practice material for this exam is not available yet, but you can try its free sample questions.
- Exam code
- HPE6-A78
- Vendor
- HP
- Practice questions
- Not available yet
- Free sample questions
- 5
- Question bank last updated
- Not available yet
Try 2 sample questions
Taken from the free sample set for HPE6-A78.
Question 1
What is one of the roles of the network access server (NAS) in the AAA framewonx?
- AOption A:
It authenticates legitimate users and uses policies to determine which resources each user is allowed to access.
- BOption B:
It negotiates with each user ' s device to determine which EAP method is used for authentication
- COption C:
It enforces access to network services and sends accounting information to the AAA serve
- DOption D:
It determines which resources authenticated users are allowed to access and monitors each users session
Show answer and explanation
Correct answer: C
In the AAA (Authentication, Authorization, and Accounting) framework, the role of the Network Access Server (NAS) is to act as a gateway that enforces access to network
services and sends accounting information to the AAA server. The NAS initially requests authentication information from the user and then passes that information to the
AAA server. It also enforces the access policies as provided by the AAA server after authentication and provides accounting data to the AAA server based on user activity.
[References:, Technical literature on AAA protocols which often includes a description of the roles and responsibilities of a Network Access Server., Network security resources that discuss the
NAS function within the AAA framework., ]
Question 2
What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?
- AOption A:
EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.
- BOption B:
EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.
- COption C:
EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process
- DOption D:
EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.
Show answer and explanation
Correct answer: B
EAP-TLS and PEAP both provide secure authentication methods, but they differ in their requirements for client-side authentication. EAP-TLS requires both the client (supplicant) and the server to authenticate each other with certificates, thereby ensuring a very high level of security. On the other hand, PEAP requires a server-side certificate to create a secure tunnel and allows the client to authenticate using less stringent methods, such as a username and password, which are then protected by the tunnel. This makes PEAP more flexible in environments where client-side certificates are not feasible.
[References:, EAP-TLS and PEAP authentication protocols comparison., , ]
See all 5 free sample questions