Aruba ACCP ACCP-V6.2 Questions & Answers

• Question 111:

  If a client's authentication is failing and there are no entries in the Clearpass's Access Tracker, which of the following is a possible reason for the authentication failure?

  A. The client used a wrong password.

  B. The user is not found in the database.

  C. The shared secret between Network Access Device and Clearpass does not match.

  D. The user account has expired.

  E. The user's certificate is invalid.

  Correct Answer: C

• Question 112:

  If the "Alerts" tab in an authentication session details tab in Access Tracker shows the following error message "Access denied by policy", what could be a possible cause for authentication failure?

  A. Implementation of an Enforcement Policy

  B. Implementation of a firewall policy

  C. Failure to categorize the request in a Clearpass service

  D. Implementation of a Posture Policy

  E. Failure to activate the enforcement policy

  Correct Answer: A

• Question 113:

  What information can we conclude from the above audit row detail? (Choose 2) A. radius01 was added as an authentication source.

  

  B. radius01 was deleted from the list of authentication sources.

  C. The policy service was moved to position number 3.

  D. The policy service was moved to position number 4.

  E. radius01 was moved to position number 4.

  Correct Answer: BD

• Question 114:

  What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

  A. To audit client authentications.

  B. To audit the network for PCI compliance.

  C. To display the entire configuration of the ClearPass Policy Manager.

  D. To display changes made to the ClearPass configuration.

  E. To display system events.

  Correct Answer: D

• Question 115:

  What information can we conclude from the following graph?

  

  A. This graph represents all authentication requests received by Clearpass in one year.

  B. This graph represents all authentication requests received by Clearpass in a day.

  C. The graph represents all authentication requests received by Clearpass in a month.

  D. Each bar represents total authentication requests per minute.

  E. Each bar represents total authentication requests per day.

  Correct Answer: E

• Question 116:

  Which of the following information is NOT required while building a Policy Service for 802.1X authentication?

  A. Network Access Device used

  B. Authentication Method used

  C. Authentication Source used

  D. Posture Token of the client

  E. Profiling information of the client

  Correct Answer: D

• Question 117:

  Which of the following components can use Active Directory authorization attributes for the decision-making process? (Choose 2)

  A. Role Mapping Policy

  B. Posture Policy

  C. Enforcement Policy

  D. Service Rules

  Correct Answer: AC

• Question 118:

  Which of the following options is the correct order of steps of a Policy Service request?

  1) Clearpass tests the request against Service Rules to select a Policy Service.

  2) Clearpass applies the Enforcement Policy.

  3) Negotiation of the Authentication Method occurs between the NAD and Clearpass.

  4) Clearpass sends the Enforcement Profile attributes to the NAD.

  5) NAD forwards authentication request to Clearpass.

  A. 1, 3, 2, 4, 5

  B. 5, 1, 3, 2, 4

  C. 5, 1, 3, 4, 2

  D. 1, 2, 3, 4, 5

  E. 2, 3, 4, 5, 1

  Correct Answer: B

• Question 119:

  Refer to the screen capture below: A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop. What Enforcement Profile is applied?

  

  A. WIRELESS_CAPTIVE_NETWORK

  B. WIRELESS_HANDHELD_NETWORK

  C. WIRELESS_GUEST_NETWORK

  D. WIRELESS_EMPLOYEE_NETWORK

  E. Deny Access

  Correct Answer: D

• Question 120:

  Which of the following components of a Policy Service is mandatory?

  A. Enforcement

  B. Posture

  C. Profiler

  D. Role Mapping Policy

  E. Authorization Source

  Correct Answer: A