Aruba Aruba Certifications ACCP-V6.2 Questions & Answers

• Question 81:

  A company implemented the Self-Registration with Sponsor Approval workflow for their Guest SSID. A guest connects to the Guest SSID, then self-registers. They see the following on their client device:

  

  Which of the following is true?

  A. The Sponsor approved the guest already.

  B. The Sponsor has not approved the guest yet.

  C. A confirmation email was sent to the sponsor at [email protected].

  D. A guest registration receipt was sent to [email protected].

  E. The guest is ready to login using their username and password.

  Correct Answer: B

• Question 82:

  Refer to the screenshot below of a MAC Caching service:

  

  A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page. Which of the following is true?

  A. Their MAC address will be visible in the Endpoints table with Known Status.

  B. Their MAC address will be visible in the Endpoints table with Unknown Status.

  C. Their MAC address will be visible in the Guest User Repository with Known Status.

  D. Their MAC address will be visible in the Guest User Repository with Unknown Status.

  E. Their MAC address will be deleted from the Endpoints table.

  Correct Answer: A

• Question 83:

  An administrator enabled the Pre-auth check for their guest self-registration. At what stage in the registration process is this check performed?

  A. Before the user self-registers.

  B. After the user self-registers; before the user logs in.

  C. After the user logs in; before the NAD sends an authentication request.

  D. After the user logs in; after the NAD sends an authentication request.

  E. When a user is re-authenticating to the network.

  Correct Answer: C

• Question 84:

  A hotel chain recently deployed ClearPass Guest. A guest enters the hotel and connects to the Guest SSID. They launch their web browser and type in www.google.com, but they're unable to immediately see the web login page.

  Which of the following could be causing this? (Choose 2):

  A. The DNS server is not replying with an IP address for www.google.com.

  B. The guest is using a Linux laptop which doesn't support web login.

  C. The ClearPass server has a server certificate issued by Verisign.

  D. The ClearPass server has a server certificate issued by the internal Microsoft Certificate Server.

  E. The ClearPass server does not recognize the client's certificate.

  Correct Answer: AD

• Question 85:

  Below is a screenshot of a client's laptop: What would you expect to happen next?

  

  A. The web login page will be displayed.

  B. The user will be presented with a self-registration receipt.

  C. The NAD device will send an authentication request to ClearPass.

  D. The client will send a NAS authentication request to ClearPass.

  E. Clearpass will send a NAS authentication request to the NAD device.

  Correct Answer: C

• Question 86:

  Below is a screenshot of a user logged in to the Self-Service Portal:

  

  Notice the traffic received and traffic sent statistics. Which of the following is true?

  A. These show the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

  B. These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

  C. These show the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.

  D. These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass.

  Correct Answer: B

• Question 87:

  Refer to the screenshot below:

  

  Why is the Insight Repository used as an authorization source for this MAC authentication service?

  A. To check how long ago the last web login authentication was done

  B. To check how many sessions ago the last web login authentication was done

  C. To check how long ago the last MAC authentication was done

  D. To run a report when the user authenticates

  E. To validate the user's MAC address against the endpoints table

  Correct Answer: A

• Question 88:

  Refer to the screenshot below of a MAC Caching enforcement policy:

  

  Which of the following is true?

  A. Only a user with Controller role of [Guest] will be allowed to authenticate

  B. Only a user with Clearpass role of [Guest] and that has authenticated using the web login page less than 5 minutes ago, will have their MAC authentication succeed

  C. Only a user with Clearpass role of [Guest] and that has authenticated using the web login page more than 5 minutes ago, will have their MAC authentication succeed

  D. Only a user whose last MAC authentication was less than 5 minutes ago, will have their MAC authentication succeed

  Correct Answer: B

• Question 89:

  Refer to the screenshot below:

  

  Which of the following is true of the MAC-Guest-Check SQL query authorization source?

  A. It's used to check if the MAC address status is known in the endpoints table

  B. It's used to check if the guest account has expired

  C. It's used to check if the MAC address status is unknown in the endpoints table

  D. It's used to check how long it's been since the last web login authentication

  E. It's used to check if the MAC address is in the MAC Caching repository

  Correct Answer: B

• Question 90:

  A company deployed the guest Self-registration with Sponsor Approval workflow for their guest SSID. The administrator logs into the Policy Manager and sees the following in the Guest User Repository:

  

  What can you conclude from the above? (Choose 2)

  A. The guest has submitted the registration form.

  B. The guest has not submitted the registration form yet.

  C. The sponsor has confirmed the guest account.

  D. The sponsor has not confirmed the guest account yet.

  E. The user's account is active.

  Correct Answer: AD