Aruba Aruba Certifications ACCP-V6.2 Questions & Answers

• Question 61:

  Which of the following statements is true about certificate revocation?

  A. Onboard cannot revoke device certificates.

  B. Revoked certificates are automatically deleted from Certificate Management.

  C. When a certificate is revoked, OCSP checks for certificate validity will fail.

  D. A revoked certificate becomes valid again after 24 hours.

  E. Certificates can only be revoked once they expire.

  Correct Answer: C

• Question 62:

  Refer to the screenshot below:

  

  At which stage of the onboard process is workspace installed?

  A. Pre-provisioning stage

  B. Provisioning stage

  C. Authentication stage

  D. After authentication stage

  Correct Answer: D

• Question 63:

  Which of the following is true? (Choose 2)

  A. Mobile Device Management is used to control device usage post-onboarding

  B. Mobile Device Management is an application container that is used to provision work applications

  C. Mobile Device Management cannot be deployed without Workspace

  D. 3rd party Mobile Device Management solutions can be integrated with Clearpass

  E. Mobile Device Management cannot do remote wipes of devices without workspace being installed

  Correct Answer: AD

• Question 64:

  Which of the following is NOT a function of ClearPass Onboard?

  A. Configure network settings

  B. Provision device credentials

  C. Remote wipe and control

  D. Revoke device credentials

  E. Provisioning of VPN Settings

  Correct Answer: C

• Question 65:

  Which of the following devices support Apple over-the-air provisioning? (Choose 2)

  A. Laptop running Mac OS X 10.6

  B. Laptop running Mac OS X 10.8

  C. iOS 5

  D. Android 2.2

  E. Windows XP

  Correct Answer: BC

• Question 66:

  Which of the following is FALSE?

  A. Active Directory can be used as the authentication source to process TACACS+ authentication requests coming to Clearpass from NAD devices

  B. Active Directory can be used as the authentication source to process Clearpass Guest Admin Access

  C. TACACS+ authentication requests received by Clearpass are always forwarded to a Windows Server that can handle these requests

  D. TACACS+ authentication requests from NAD devices to Clearpass are processed by a TACACS+ service

  E. The local user repository in Clearpass can be used as the authentication source for TACACS+ services

  Correct Answer: C

• Question 67:

  Which of the following steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Choose 2)

  A. Configure the ClearPass Policy Manager as an Authentication server on the network device.

  B. Configure ClearPass roles on the network device.

  C. Configure RADIUS Enforcement Profile for the desired privilege level.

  D. Configure TACACS Enforcement Profile for the desired privilege level.

  E. Enable RADIUS accounting on the NAD device.

  Correct Answer: AD

• Question 68:

  Refer to the screen capture below: Based on the Translation Rule configuration shown above, which of the following statements is true?

  

  A. A user from group MatchAdmin will be assigned the operator profile of IT Administrators.

  B. All active directory users will be assigned the operator profile of IT Administrators.

  C. All admin users will be assigned the operator profile of IT Administrators.

  D. A user from group Administrators will be assigned the operator profile of IT Administrators.

  E. This translation rule is not valid for Active Directory administrators.

  Correct Answer: D

• Question 69:

  What is RADIUS CoA used for?

  A. To authenticate users or devices before granting them access to a network.

  B. To force the client to re-authenticate upon roaming to a new Controller.

  C. To apply firewall policies based on authentication credentials.

  D. To validate a host MAC against a white and a black list.

  E. To transmit messages to the NAD/NAS to modify a user's session status.

  Correct Answer: E

• Question 70:

  What are Operator Profiles used for?

  A. To assign ClearPass roles to guest users.

  B. To enforce role based access control for ClearPass Guest operator users.

  C. To enforce role based access control for ClearPass Policy Manager admin users.

  D. To map AD attributes to admin privilege levels in ClearPass Guest.

  E. To enforce role based access control for Aruba Controllers.

  Correct Answer: B