HPE6-A78 Exam - Topic 2 Question 71 Discussion

Actual exam question for HP's HPE6-A78 exam

Question #: 71
Topic #: 2

Refer to the exhibit.

You need to ensure that only management stations in subnet 192.168.1.0/24 can access the ArubaOS-Switches' CLI. Web Ul. and REST interfaces The company also wants to let managers use these stations to access other parts of the network What should you do?

AEstablish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

BSpecify 192.168.1.0.255.255.255.0 as authorized IP manager address

CConfigure the switch to listen for these protocols on OOBM only.

DSpecify vlan 100 as the management vlan for the switches.

Show Suggested Answer

Suggested Answer: A

by Cary at Jan 09, 2025, 01:42 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Agustin

3 months ago

B is the most straightforward solution for management access.

upvoted 0 times

...

Lorean

3 months ago

C is definitely not the way to go for this scenario.

upvoted 0 times

...

Tina

3 months ago

Surprised that D is even an option here.

upvoted 0 times

...

Lizbeth

4 months ago

I disagree, A could work too if configured properly.

upvoted 0 times

...

Tammara

4 months ago

Option B seems like the right choice for restricting access.

upvoted 0 times

...

Francisca

4 months ago

I vaguely remember that using OOBM could help with management traffic, but I’m not confident if that’s the right answer for this question.

upvoted 0 times

...

Luis

4 months ago

Control Plane Policing sounds familiar, but I can't recall if it directly applies to management access like in this scenario.

upvoted 0 times

...

Skye

4 months ago

I think we practiced a similar question where we had to configure management access. I feel like specifying a VLAN could be important, but I'm not certain if that's the right approach now.

upvoted 0 times

...

Leota

5 months ago

I remember something about restricting access based on IP addresses, but I'm not sure if option B is the best choice here.

upvoted 0 times

...

Bev

5 months ago

This seems straightforward. I'll go with option B and specify the 192.168.1.0/24 subnet as the authorized IP manager address. That should do the trick.

upvoted 0 times

...

Arlene

5 months ago

Okay, the key here is to only allow management stations in the 192.168.1.0/24 subnet to access the CLI, web UI, and REST interfaces. I think option A is the way to go - using Control Plane Policing to select that specific traffic.

upvoted 0 times

...

Caitlin

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to review my notes on access control and management VLANs to see which option best fits the requirements.

upvoted 0 times

...

Avery

5 months ago

This looks like a network security question. I'll need to carefully read through the options and think about how to restrict access to the management interfaces while still allowing access to other parts of the network.

upvoted 0 times

...

Alishia

10 months ago

D might work, but it's a bit overkill. Why create a separate management VLAN when we can just restrict access to the relevant protocols and interfaces?

upvoted 0 times

...

Buddy

10 months ago

Ha! I bet the designers of this exam question are having a good laugh at the expense of the poor candidates who choose C. Listening for protocols on OOBM? That's just asking for trouble!

upvoted 0 times

Karan

8 months ago

User 3: I think so too. B seems like the safest option for restricting access.

upvoted 0 times

...

Ashleigh

9 months ago

User 2: Yeah, it's a tricky question. I think the correct answer is B.

upvoted 0 times

...

Santos

9 months ago

User 1: I agree, choosing C would definitely cause some issues.

upvoted 0 times

...

Lilli

10 months ago

B doesn't seem right. Specifying the IP address range like that is a bit old-school, and we should really be using a subnet mask instead.

upvoted 0 times

Anna

9 months ago

D) Specify vlan 100 as the management vlan for the switches.

upvoted 0 times

...

Stevie

9 months ago

B) Specify 192.168.1.0.255.255.255.0 as authorized IP manager address

upvoted 0 times

...

Audria

9 months ago

C) Configure the switch to listen for these protocols on OOBM only.

upvoted 0 times

...

Kaycee

10 months ago

A) Establish a Control Plane Policing class that selects traffic from 192.168 1.0/24.

upvoted 0 times

...

Mindy

10 months ago

A is definitely the way to go. Establishing a Control Plane Policing class to select traffic from the 192.168.1.0/24 subnet is the most straightforward and secure approach.

upvoted 0 times

...