HP HPE6-A15 Online Practice Questions and Exam Preparation

HP HPE6-A15 Online Questions & Answers

• Question 11:

  Refer to the exhibit.

  

  A user logged in to the Self-Service Portal as shown.

  What do the traffic received and sent statistics present?

  A. the total amount of the traffic the quest transmitted, as seen through RADIUS CoA packets from the client to ClearPass
  B. the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass
  C. the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass
  D. the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass
  E. the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.
  B. the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass

• Question 12:

  An SNMP probe is sent from ClearPass to a network access device, but ClearPass is unable to obtain profiling information. What are likely causes? (Select three.)

  A. Only SNMP read has been configured but SNMP write is needed for profiling information.
  B. An external firewall is blocking SNMP traffic.
  C. SNMP is not enabled on the NAD.
  D. SNMP community string in the ClearPass and NAD configuration is mismatched.
  E. SNMP probing is not supported between ClearPass and NADs.
  B. An external firewall is blocking SNMP traffic.
  C. SNMP is not enabled on the NAD.
  D. SNMP community string in the ClearPass and NAD configuration is mismatched.

  ---

  Verify firewall port 162 (default) is open between AMP and the controller.

  SNMP must be enabled on the NAD.

  The community string that ClearPass is using to access the NAD might be wrong.

  References: https://community.arubanetworks.com/t5/Monitoring-Management-Location/SNMP-Get-Failed-quot-error-message/ta-p/169774

• Question 13:

  Refer to the exhibit.

  

  A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop. Which Enforcement Profile is applied?

  A. WIRELESS_GUEST_NETWORK
  B. WIRELESS_CAPTIVE_NETWORK
  C. WIRELESS_HANDHELD_NETWORK
  D. Deny Access
  E. WIRELESS_EMPLOYEE_NETWORK
  E. WIRELESS_EMPLOYEE_NETWORK

  ---

  MATCHES_ANY: For list data types, true if any of the run-time values in the list match one of the configured values. Example: Tips:Role MATCHES_ANY HR,ENG,FINANCE

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/Rules/Operators.htm

• Question 14:

  Which licenses are included in the built-in Starter kit for ClearPass?

  A. 10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses
  B. 25 ClearPass Profiler licenses
  C. 25 ClearPass Enterprise licenses
  D. 10 ClearPass Enterprise licenses
  E. 25 ClearPass Redundancy licenses
  C. 25 ClearPass Enterprise licenses

  ---

  All CPPM's comes bundled with 25 Enterprise application licenses so you can test the functionality of the Applications as this license can be used for any of them. References: http://community.arubanetworks.com/t5/Security/ClearPass-licensing-explained-August-MHC/td-p/195719

• Question 15:

  Refer to the exhibit.

  

  The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.

  What is the cause of this error?

  A. The controller's shared secret used during the certificate exchange is incorrect.
  B. The NAS source interface IP is incorrect.
  C. The client sent an incorrect shared secret for the 802.1X authentication.
  D. The controller used an incorrect shared secret for the RADIUS authentication.
  E. The client's shared secret used during the certificate exchange is incorrect.
  D. The controller used an incorrect shared secret for the RADIUS authentication.

• Question 16:

  Refer to the exhibit.

  

  An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

  A. HR Local
  B. Remote Employee
  C. [Guest]
  D. Executive
  E. IOS Device
  C. [Guest]

  ---

  None of the Listed Role Name conditions are met.

• Question 17:

  A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page. What are the likely causes of this? (Select two.)

  A. The ClearPass server has a trusted server certificate issued by Verisign.
  B. The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.
  C. The ClearPass server does not recognize the client's certificate.
  D. The DNS server is not replying with an IP address for www.google.com.
  B. The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.
  D. The DNS server is not replying with an IP address for www.google.com.

  ---

  You would need a publicly signed certificate.

  References: http://community.arubanetworks.com/t5/Security/Clearpass-Guest-certificate-error-for-guest-visitors/td-p/221992

• Question 18:

  Which authentication protocols can be used for authenticating Windows clients that are Onboarded? (Select two.)

  A. EAP-GTC
  B. PAP
  C. EAP-TLS
  D. CHAP
  E. PEAP with MSCHAPv2
  C. EAP-TLS
  E. PEAP with MSCHAPv2

• Question 19:

  Refer to the exhibit.

  

  Based on the information shown, what is the purpose of using [Time Source] for authorization?

  A. to check whether the MAC address status is unknown in the endpoints table
  B. to check whether the MAC address is in the MAC Caching repository
  C. to check how long it has been since the last web login authentication
  D. to check whether the MAC address status is known in the endpoint table.
  D. to check whether the MAC address status is known in the endpoint table.

• Question 20:

  Refer to the exhibit.

  

  When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

  What is the Address field value `securelogin.arubanetworks.com' used for?

  A. for ClearPass to send a TACACS+ request to the NAD
  B. for appending to the Web Login URL, before the page name
  C. for the client to POST the user credentials to the NAD
  D. for ClearPass to send a RADIUS request to the NAD
  E. for appending to the Web Login URL, after the page name.
  C. for the client to POST the user credentials to the NAD