HP Exam HPE6-A78 Topic 4 Question 68 Discussion

Actual exam question for HP's HPE6-A78 exam

Question #: 68
Topic #: 4

You are configuring ArubaOS-CX switches to tunnel client traffic to an Aruba Mobility Controller (MC). What should you do to enhance security for control channel communications between the switches and the MC?

ACreate one UBT zone for control traffic and a second UBT zone for clients.

BConfigure a long, random PAPI security key that matches on the switches and the MC.

Cinstall certificates on the switches, and make sure that CPsec is enabled on the MC

DMake sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

Show Suggested Answer

Suggested Answer: C

by Emile at Oct 24, 2024, 06:17 PM

Limited Time Offer

25%

Off

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Franklyn

1 months ago

D seems like the safest bet to me. Isolating that control traffic to a dedicated interface is a smart move.

upvoted 0 times

...

Sophia

1 months ago

Hey, I heard they use those PAPI keys on the Death Star to control the tractor beams. Guess that's one way to 'enhance security'!

upvoted 0 times

Novella

14 days ago

C) install certificates on the switches, and make sure that CPsec is enabled on the MC

upvoted 0 times

...

Carey

17 days ago

B) Configure a long, random PAPI security key that matches on the switches and the MC.

upvoted 0 times

...

Jin

20 days ago

A) Create one UBT zone for control traffic and a second UBT zone for clients.

upvoted 0 times

...

Adolph

1 months ago

I'd go with B. A long, random PAPI key is a nice simple solution. Keeps things secure without too much hassle.

upvoted 0 times

Ivette

14 days ago

D) Make sure that the UBT client vlan is assigned to the interface on which the switches reach the MC and only that interface.

upvoted 0 times

...

Gracie

16 days ago

A) Create one UBT zone for control traffic and a second UBT zone for clients.

upvoted 0 times

...

Hannah

25 days ago

C) install certificates on the switches, and make sure that CPsec is enabled on the MC

upvoted 0 times

...

Kirby

29 days ago

B) Configure a long, random PAPI security key that matches on the switches and the MC.

upvoted 0 times

...

Shawnta

1 months ago

I agree with Ira, installing certificates and enabling CPsec seems like the most secure option.

upvoted 0 times

...

Ira

2 months ago

I think option C is the best choice for enhancing security.

upvoted 0 times

...

Laticia

2 months ago

Option C looks like the way to go. Certificates and CPsec will really lock down that control channel. Gotta love that security!

upvoted 0 times

Francene

1 months ago

Agreed, it's always better to be safe than sorry when it comes to protecting sensitive data.

upvoted 0 times

...

Truman

1 months ago

Definitely, security is key when it comes to network communications.

upvoted 0 times

...

Sueann

1 months ago

Option C looks like the way to go. Certificates and CPsec will really lock down that control channel. Gotta love that security!

upvoted 0 times

...