Aruba ACCP ACCP-V6.2 Questions & Answers

• Question 31:

  In the screenshot shown here of the Local User repository in ClearPass, what Aruba User Role will be assigned to "mike" when he authenticates?

  

  A. [Employee]

  B. Employee

  C. mike

  D. We can't know this from the screenshot above

  E. john

  Correct Answer: D

• Question 32:

  Refer to the diagram below.

  

  In which of the following scenarios will ClearPass select the Policy Service named 'Test device group'?

  A. If an end user IP address is part of the device group HQ.

  B. If the IP address of the NAD device is part of the device group HQ.

  C. If the ClearPass IP address is part of the device group HQ.

  D. If the client's NAD IP address is part of the device group HQ.

  E. If the client's Network Authentication Distribution server's IP address belongs to device group HQ.

  Correct Answer: B

• Question 33:

  What must be configured to enable RADIUS authentication with Clearpass on a network access device (NAD)? (Choose 2)

  A. An NTP server needs to be set up on the NAD.

  B. A bind username and bind password must be provided.

  C. A shared secret must be configured on the Clearpass server and NAD.

  D. The Clearpass server must have the network device added as a valid NAD.

  E. The Clearpass server certificate must be installed on the NAD.

  Correct Answer: CD

• Question 34:

  Shown here is an Aruba Instant configuration screenshot What is the purpose of enabling the 'Dynamic RADIUS proxy' feature?

  

  A. The Instant AP will proxy all RADIUS Access-Requests sent to it from clients and will forward these to ClearPass.

  B. The Instant AP will send a RADIUS Access-Reject packet to other Instant APs in the cluster if credentials are incorrect, to reduce the number of RADIUS requests sent to ClearPass.

  C. All Instant APs in the cluster will use the Virtual Controller IP as the Source IP for RADIUS requests.

  D. All Instant APs in the cluster will use the Virtual Controller IP as the Destination IP for RADIUS requests.

  E. The Instant AP will proxy all RADIUS Access-Requests sent to it from Clearpass and will forward these to the clients.

  Correct Answer: C

• Question 35:

  Shown here is a AAA profile in the Aruba Controller.

  

  According to the configuration shown here, what would we expect to see in the ClearPass Policy Manager?

  A. RADIUS accounting start-stop messages

  B. RADIUS interim accounting messages

  C. RADIUS interim and start-stop messages

  D. No accounting messages will be seen

  E. RADIUS accounting messages will be sent from the Client to the Controller

  Correct Answer: A

• Question 36:

  What is the purpose of the Serial Port in the ClearPass appliance?

  A. To connect 2 ClearPass servers together in a cluster.

  B. To connect a ClearPass server to a Network Access Device.

  C. For administrators to configure the ClearPass appliance using the command line.

  D. For administrators to configure the ClearPass appliance using the WebUI.

  E. For administrators to access Clearpass using SSH.

  Correct Answer: C

• Question 37:

  Which of the following is true about Data and Management ports on the ClearPass appliance? (Choose 2)

  A. Configuration of the data port is optional.

  B. Configuration of the data port is mandatory.

  C. Configuration of the management port is optional.

  D. Configuration of the management port is mandatory.

  E. Static IP addresses are only allowed on the management port.

  Correct Answer: AD

• Question 38:

  UDP Port 3799 is used for RADIUS CoA (RFC 3576). This port has been blocked by a firewall between a NAD device and ClearPass. Which of the following is true?

  A. RADIUS Authentications will fail since the NAD won't be able to reach the ClearPass server.

  B. RADIUS Authentications will not happen since the NAD won't be able to reach the ClearPass server.

  C. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the Controller will not be delivered.

  D. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the Controller for Change of Role will not be delivered.

  E. During RADIUS authentication, certificate exchange between the NAD and Clearpass will fail.

  Correct Answer: C

• Question 39:

  Which of the following statements is true about the Clearpass hardware appliances?

  A. DHCP can be used to assign IP addresses to management and data ports.

  B. Both Management and Data Ports must be configured.

  C. Clearpass has a default management IP of 172.16.0.254.

  D. Only static IP addresses are allowed on the management and data ports.

  E. The maximum number of devices supported is 5000.

  Correct Answer: D

• Question 40:

  Below is a network topology diagram: How many clusters are needed for this deployment?

  

  A. 1

  B. 3

  C. 4

  D. 8

  E. 2

  Correct Answer: C