HP HPE6-A15 Online Practice Questions and Exam Preparation

HP HPE6-A15 Online Questions & Answers

• Question 1:

  Refer to the exhibit.

  

  Which statements accurately describe the cp82 ClearPass node? (Select two.)

  A. It becomes the Publisher when the primary Publisher fails.
  B. It operated as a Publisher in the same cluster as the primary Publisher when the primary is active.
  C. It operated as a Publisher in a separate cluster when the Publisher is active.
  D. It operates as a Subscriber when the Publisher is active.
  E. It stays as a Subscriber when the Publisher fails.
  A. It becomes the Publisher when the primary Publisher fails.
  D. It operates as a Subscriber when the Publisher is active.

  ---

  ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the

  Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.

  When a Publisher failure is detected, the designated subscriber node is promoted to active Publisher status.

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Standby_publisher.htm

• Question 2:

  Refer to the exhibit.

  

  In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

  A. to gather and send Aruba NAD information to ClearPass
  B. to gather information about Aruba NADs for ClearPass
  C. to send information via RADIUS packets to Aruba NADs
  D. to send information via RADIUS packets to clients
  E. to send CoA packets from ClearPass to the Aruba NAD
  C. to send information via RADIUS packets to Aruba NADs

• Question 3:

  ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass. What will be the outcome of this state?

  A. RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.
  B. During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.
  C. RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.
  D. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.
  E. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.
  D. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

• Question 4:

  Refer to the exhibit.

  

  Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

  A. If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.
  B. If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.
  C. If the user is not found in the local user repository a reject message is sent back to the NAD.
  D. If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.
  E. If the user is not found in the local user repository a timeout message is sent back to the NAD.
  D. If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

  ---

  Policy Manager looks for the device or user by executing the first filter associated with the authentication source.

  After the device or user is found, Policy Manager then authenticates this entity against this authentication source. The flow is outlined below:

  *

  On successful authentication, Policy Manager moves on to the next stage of policy evaluation, which collects role mapping attributes from the authorization sources.

  *

  Where no authentication source is specified (for example, for unmanageable devices), Policy Manager passes the request to the next configured policy component for this service.

  *

  If Policy Manager does not find the connecting entity in any of the configured authentication sources, it rejects the request. References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 134 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 5:

  In which ways can ClearPass derive client roles during policy service processing? (Select two.)

  A. From the attributes configured in Active Directory
  B. From the server derivation rule in the Aruba Controller server group for the client
  C. From the Aruba Network Access Device
  D. From the attributes configured in a Network Access Device
  E. Through a role mapping policy
  A. From the attributes configured in Active Directory
  E. Through a role mapping policy

• Question 6:

  Refer to the exhibit.

  

  Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

  A. both Login and Welcome Page
  B. Default Role
  C. Welcome Page
  D. Default Guest Role
  E. Login Page
  E. Login Page

  ---

  The Login page is the URL of the page that appears for the user logon. This can be set to any URL.

  The Welcome page is the URL of the page that appears after logon and before redirection to the web URL. This can be set to any URL.

  References: http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/Captive_Portal_Authentic.htm

• Question 7:

  Refer to the exhibit.

  

  Based on the network topology diagram shown, how many clusters are needed for this deployment?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 8
  D. 4

  ---

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Design_guidelines.htm

• Question 8:

  Which devices support Apple over-the-air provisioning? (Select two.)

  A. IOS 5
  B. Laptop running Mac OS X 10.8
  C. Laptop running Mac OS X 10.6
  D. Android 2.2
  E. Windows XP
  A. IOS 5
  B. Laptop running Mac OS X 10.8

  ---

  Apple over-the-air provisioning is supported by IOS and OSX above version 10.6.

  References: https://community.arubanetworks.com/aruba/attachments/aruba/tkb@tkb/286/1/BYODwithClearPass_Cameron_Esdaile.pdf

• Question 9:

  Refer to the exhibit.

  

  When configuring a Web Login Page in ClearPass Guest, the information shown is displayed. What is the page name field used for?

  A. for forming the Web Login Page URL
  B. for Administrators to access the PHP page, but not guests
  C. for Administrators to reference the page only
  D. for forming the Web Login Page URL where Administrators add guest users
  E. for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.
  A. for forming the Web Login Page URL

  ---

  The Page Name is an identifier page name that will appear in the URL -- for example, "/guest/page_name.php".

  References: http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/Configuration/CreateEditWebLogin.htm

• Question 10:

  An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop. Which licenses are consumed in this scenario?

  A. 1 Policy Manager license, 1 Onboard License
  B. 2 Policy Manager licenses, 1 Onguard License
  C. 1 Policy Manager license, 1 Profile License
  D. 2 Policy Manager licenses, 2 Onguard licenses
  E. 1 Policy Manager license, 1 Onguard License
  E. 1 Policy Manager license, 1 Onguard License