HPE6-A07 Real Exam Questions and Verified Answers

Question 1 Single choice

Which most accurately describes the First Applicable rule evaluation algorithm in Enforcement Policies?

A
Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.
B
All rules are checked and if there is no match, no Enforcement profile is applied.
C
Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied. along with the default Enforcement profile.
D
All rules are checked for any matching rules and their respective Enforcement profiles are applied.

Show answer and explanation

Correct answer: D

Question 2 Single choice

A ClearPass deployment needs to be designed to determine whether a user authenticating is an HR department employee in the Active Directory Server and whether the user's device is healthy.

Which policy service components will the network administrator need to use?

A
Posture, Authentication and Authorization
B
Posture and Firewall Roles
C
Posture and Onboard
D
Authentication and Authorization
E
Posture, Authentication and Onboarding

Show answer and explanation

Correct answer: A

Explanation

Reference
http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/About%20ClearPass/About_ClearPass.htm

Question 3 Single choice

What is the primary use of the ClearPass OnGuard Application?

A
Device Profiling
B
Guest Access
C
Secure Employee Access
D
Endpoint Posture
E
Onboarding BYOD Devices

Show answer and explanation

Correct answer: D

Explanation

References:
https://www.arubanetworks.com/assets/ds/DS_ClearPass_OnGuard.pdf

Question 4 Single choice

Which authentication type allows a device to authenticate with a client certificate?

A
802.1X/EAP
B
WEP Authentication
C
MAC Authentication
D
Captive Portal Authentication
E
Open System Authentication

Show answer and explanation

Correct answer: A

Explanation

Reference
https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Binary-comparison-in-EAP-TLS-Authentication/ta-p/257857

Question 5 Multiple choice

Which device uses the Quick Connect method of Onboarding? (Select two.)

A
iPad
B
iPhone
C
Windows
D
blackberry
E
Android

Show answer and explanation

Correct answers: C, E

Explanation

Reference
http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYOD-
challanges-whitepaper.pdf (page 7)

Question 6 Multiple choice

What must a network administrator configure on ClearPass to enable RADIUS authentication with a network access device (NAD)? (Choose two.)

A
An NTP server needs to be set up on the NAD.
B
The ClearPass server certificate must be installed on the NAD.
C
A shared secret must be configured on the ClearPass server and NAD.
D
The ClearPass server must have the network device added as a valid NAD.
E
A bind username and bind password must be provided.

Show answer and explanation

Correct answers: C, D

Question 7 Single choice

What will be the initial posture token of a device connecting with 802.1x authentication for the first time?

A
Unhealthy
B
Quarantine
C
Checkup
D
Unknown
E
Healthy

Show answer and explanation

Correct answer: D

Explanation

When the user connects to the 802.1x SSID for the first time the Posture token will be Unknown, the initial role will be returned to the controller and the user will be redirected to OnGuard Agent page. The user will download and run the dissolvable or persistent agent and the agent will send the health results to the Webauth Health Check service, which will update the posture token in the Endpoint database and send a Bounce User request to the controller. That will cause the user to re-authenticate and this time the posture token will be known.

Reference
https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf

Question 8 Multiple choice

What does a client need for it to perform EAP-TLS successfully? (Select two.)

A
Username and Password
B
Server Certificate
C
Pre-shared key
D
Certificate Authority
E
Client Certificate

Show answer and explanation

Correct answers: B, E

Explanation

Reference
https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Binary-comparison-in-EAP-TLS-Authentication/ta-p/257857

Question 9 Single choice

Which additional service must be added to a ClearPass server to use the OnGuard Agent health checks for 802.1x authentication?

A
HTTP Posture Service
B
802.1x Authentication
C
802.1x Posture Service
D
802.1x Enforcement policy
E
WebAuth Service

Show answer and explanation

Correct answer: E

Explanation

Reference
http://community.arubanetworks.com/t5/Security/Clearpass-Onguard-implementation-and-documentation/td-p/121057

Question 10 Single choice

Which statement most accurately describes how users with Active Directory credentials authenticate with ClearPass when Active Directory is used as an authentication source for an 802.1x service in ClearPass?

A
A Kerberos request is sent from the Network Access Device to ClearPass which initiates a RADUIS request to the AD server.
B
A RADIUS request is sent from the Network Access Device to the AD server which communicates with ClearPass.
C
An LDAP request is sent from the Network Access Device to the AD server which communicates with ClearPass.
D
An LDAP request is sent from the Network Access Device to ClearPass which initiates a RADIUS request to the AD server.
E
A RADIUS request is sent from the Network Access Device to the ClearPass which communicates with the AD server.

Show answer and explanation

Correct answer: C

Explanation

Reference
http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/3%20Active%20Directory/AD_auth_source_adding.htm