Aruba ACCP ACCP-V6.2 Questions & Answers

• Question 21:

  How is Authorization used in a Policy Service? Refer to the diagram below: A. It allows us to use attributes stored in databases in role mapping and Enforcement.

  

  B. It allows us to use attributes stored in databases in role mapping only, but not Enforcement.

  C. It allows us to use attributes stored in databases in Enforcement only, but not role mapping.

  D. It allows us to use attributes stored in external databases for Enforcement, but authorization does not use internal databases for reference.

  E. It allows us to use attributes stored in internal databases for Enforcement, but authorization does not use external databases for reference.

  Correct Answer: A

• Question 22:

  Refer to the screen capture below:

  

  Based on the Attribute configuration shown above, which of the following statements is true?

  A. Only the attribute values of department and memberOf can be used in role mapping policies.

  B. Only the attribute values of title, telephoneNumber, mail can be used in role mapping policies.

  C. Only the attribute values of company can be used in role mapping policies.

  D. The attribute values of department and memberOf are directly applied as ClearPass roles.

  E. The attribute values of department, title, memberOf, telephoneNumber, mail are directly applied as ClearPass roles.

  Correct Answer: D

• Question 23:

  Refer to the screen capture below:

  

  What does the Cache Timeout Value refer to?

  A. The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

  B. The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

  C. The amount of time the Policy Manager waits for a response from the Active Directory before sending a timeout message to the Network Access Device.

  D. The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

  E. The amount of time the Policy Manager caches the user's client certificate.

  Correct Answer: B

• Question 24:

  Which of the following statements is NOT true about the configuration of a generic LDAP server as an External Authentication Server in Clearpass?

  A. The bind DN can be in the administrator@domain format.

  B. The list of attributes fetched from an LDAP server can be customized.

  C. An LDAP Browser can be used to search the Base DN.

  D. Multiple LDAP servers cannot be configured as authentication sources.

  E. Generic LDAP servers can be used as authentication sources.

  Correct Answer: A

• Question 25:

  Refer to the screen capture below If a user from the department "QA" authenticates from a laptop running MAC OS X, what role is assigned to the user in Clearpass?

  

  A. iOS Device

  B. Remote Employee

  C. HR Local

  D. Guest

  E. Executive

  Correct Answer: D

• Question 26:

  Which of the following statements is NOT true about the configuration of Active Directory (AD) as an External Authentication Server in Clearpass?

  A. Clearpass should join the AD domain when PEAP and MSCHAPv2 are used as the authentication type.

  B. The bind DN for an AD can be in the administrator@domain format.

  C. Clearpass cannot be a member of more than one AD domain.

  D. The list of attributes fetched from the AD can be customized.

  E. Clearpass nodes in a cluster can join different AD domains.

  Correct Answer: C

• Question 27:

  Refer to the screen capture below If a user from the department "HR" connects on Monday using their Windows Laptop to a switch that belongs to the Device Group HQ, what role is assigned to the user in Clearpass?

  

  A. Executive

  B. HR Local

  C. Employee

  D. Guest

  E. Vendor

  Correct Answer: E

• Question 28:

  Refer to the screen capture below If a user from the department "HR" connects on Monday to a switch that belongs to the Device Group Remote NAD, what roles are assigned to the user in Clearpass? (Choose 2)

  

  A. Executive

  B. Remote Employee

  C. iOS Device

  D. Guest

  E. HR Local

  Correct Answer: BE

• Question 29:

  Which of the following ways are used by Clearpass to assign roles to the client? (Choose 2)

  A. Through a role mapping policy.

  B. Roles can be derived from the Aruba Network Access Device.

  C. From the attributes configured in Active Directory.

  D. From the attributes configured in a Network Access Device.

  E. From the server derivation rule in the Aruba Controller server group for the client.

  Correct Answer: AC

• Question 30:

  Refer to the screen capture below: If a user from the department "Product Management" connects on Monday to a NAD device that belongs to the Device Group HQ, what role is assigned to the user in Clearpass?

  

  A. Executive

  B. HR Local

  C. Employee

  D. Guest

  E. Linux Hosts

  Correct Answer: A