Aruba Aruba Certifications ACCP-V6.2 Questions & Answers

• Question 71:

  What does a client need for it to perform EAP-PEAP successfully, if 'Validate Server Certificate' is not enabled?

  A. Username and Password

  B. Client Certificate

  C. Pre-shared key

  D. Certificate Authority

  E. Server Certificate

  Correct Answer: A

• Question 72:

  Refer to the screenshot in the diagram below, which illustrates the configuration of a Windows 802.1X supplicant.

  

  If 'Automatically use my Windows logon name and password' are selected, which of the following is true?

  A. The client's Windows login username and password will be sent in a EAP frame to the Authentication Server.

  B. The client's Windows login username and password will be sent in a RADIUS Accounting frame to the Authentication server.

  C. The client will need to re-authenticate every time they connect to the network.

  D. The client's Windows logon name and password will be sent via a TACACS+ frame to the authentication server.

  E. The client will prompt the user to enter the logon username and password.

  Correct Answer: A

• Question 73:

  Refer to the screenshot in the diagram below, which illustrates a configuration of a Windows 802.1X supplicant for EAP-PEAP authentication.

  

  In a deployment, which certificate would you select under the 'Trusted root certification authority' section?

  A. The server certificate

  B. The client certificate

  C. The root CA self-signed certificate

  D. The root CA certificate signed by the client

  E. The client certificate signed by the root CA

  Correct Answer: C

• Question 74:

  Refer to the screenshot in the diagram below, which illustrates the configuration of a Windows 802.1X supplicant.

  

  What will selecting 'Validate server certificate' do?

  A. The client will send its certificate to the server for verification.

  B. The server will send its private key to the client for verification.

  C. The server and client will perform an HTTPS SSL certificate exchange.

  D. The client will verify the server certificate against a trusted CA.

  E. The client will send its private key to the server for verification.

  Correct Answer: D

• Question 75:

  Which of the following statements is true about the skin plugins in ClearPass guest?

  A. Skins are created by Aruba Professional Services.

  B. Skins allow addition of content items to web login pages.

  C. Skins are used to create hotspot login pages.

  D. Skins are used to create Onboard registration pages.

  E. Skins allow customers to implement advertising.

  Correct Answer: A

• Question 76:

  What does a client need for it to perform EAP-TLS successfully? (Choose 2)

  A. Username and Password

  B. Client Certificate

  C. Pre-shared key

  D. Certificate Authority

  E. Server Certificate

  Correct Answer: BE

• Question 77:

  Which of the following CLI commands is used to upgrade the image of a ClearPass server?

  A. Upgrade image

  B. System upgrade

  C. Upgrade software

  D. Reboot

  E. System update

  Correct Answer: B

• Question 78:

  Describe the purpose of the Aruba TACACS+ dictionary as shown here:

  

  A. The Aruba-Admin-Role attribute is used to assign different privileges to clients during 802.1X authentication.

  B. The Aruba-Admin-Role attribute is used by ClearPass to assign TIPS roles to clients during 802.1X authentication.

  C. The Aruba-Admin-Role attribute is used to assign different privileges to administrators logging into an Aruba NAD device.

  D. The Aruba-Admin-Role attribute is used to assign different privileges to administrators logging into ClearPass.

  E. The Aruba-Admin-Role on the controller is applied to users using TACACS+ to login to the Policy Manager.

  Correct Answer: C

• Question 79:

  What are these RADIUS attributes used for in the Aruba RADIUS dictionary shown here?

  

  A. To send information via RADIUS packets to clients.

  B. To send information via RADIUS packets to Aruba NADs.

  C. To gather information about Aruba NADs for ClearPass.

  D. To gather and send Aruba NAD information to ClearPass.

  E. To send CoA packets from Clearpass to the Aruba NAD.

  Correct Answer: B

• Question 80:

  Refer to the screenshot below outlining a guest Self-Registration with Sponsor Approval workflow:

  

  At which stage is an email request sent to the sponsor?

  A. After 'Redirects (1)'

  B. After 'Submit form (3)'

  C. After 'Login Message page (5)'

  D. After 'Automated NAS login (6)'

  E. After 'Guest Role (7)'

  Correct Answer: B