HP HPE6-A15 Online Practice Questions and Exam Preparation

HP HPE6-A15 Online Questions & Answers

• Question 51:

  Which component of a ClearPass Service is mandatory?

  A. Authorization Source
  B. Profiler
  C. Role Mapping Policy
  D. Enforcement
  E. Posture
  D. Enforcement

  ---

  An enforcement policy is a way to organize enforcement profiles and apply them to users or Policy Manager roles. Based on the enforcement policy assigned to the role, enforcement profiles are applied to the service request.

• Question 52:

  Refer to the exhibit.

  

  An administrator logs in to the Guest module in ClearPass and `Manage Accounts' displays as shown.

  When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

  A. The user will be able to log in and authenticate successfully but will then be immediate disconnected.
  B. The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.
  C. The user will not be able to log in and authenticate.
  D. The user will be able to log in and authenticate successfully, but will then get a quarantine role.
  E. The user will not be able to access the Web Login page.
  C. The user will not be able to log in and authenticate.

• Question 53:

  Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

  A. Username and Password
  B. Pre-shared key
  C. WPA2-PSK
  D. server Certificate
  E. Client Certificate
  D. server Certificate
  E. Client Certificate

  ---

  When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other. Certificates must meet specific requirements both on the server and on the client for successful authentication.

  References: https://support.microsoft.com/en-us/help/814394/certificate-requirements-when-you-use-eap-tls-or-peap-with-eap-tls

• Question 54:

  Refer to the exhibit.

  

  An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD.

  Which roles are assigned to the user in ClearPass? (Select two.)

  A. Executive
  B. iOS Device
  C. Vendor
  D. Remote Employee
  E. HR Local
  D. Remote Employee
  E. HR Local

• Question 55:

  Refer to the exhibit.

  

  An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown. What is a possible reason for the ErrorCode `Failed to classify request to service' shown?

  A. The user failed authentication die to an incorrect password.
  B. ClearPass could not match the authentication request to a service, but the user passed authentication.
  C. ClearPass service authentication sources were not configured correctly.
  D. The NAD did not send the authentication request.
  E. ClearPass service rules were not configured correctly.
  E. ClearPass service rules were not configured correctly.

• Question 56:

  Refer to the exhibit.

  

  What information can be drawn from the audit row detail shown? (Select two.)

  A. radius01 was deleted from the list of authentication sources.
  B. The policy service was moved to position number 4.
  C. radius01 was moved to position number 4.
  D. The policy service was moved to position number 3.
  E. raduis01 was added as an authentication source.
  A. radius01 was deleted from the list of authentication sources.
  B. The policy service was moved to position number 4.

• Question 57:

  What does Authorization allow users to do in a Policy Service?

  A. use only attributes stored in external databases for Enforcement, but not internal databases
  B. use attributes stored in databases in role mapping and Enforcement
  C. use only attributes stored in internal databases for Enforcement, but not external databases
  D. use attributes stored in databases in role mapping, but not Enforcement
  E. use attributes stored in databases in Enforcement, but not role mapping
  B. use attributes stored in databases in role mapping and Enforcement

• Question 58:

  Refer to the exhibit.

  

  Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an email request sent to the sponsor?

  A. after `Guest Role (7)'
  B. after `Login Message page (5)'
  C. after `Submit form (3)'
  D. after `Automated NAS login (6)'
  E. after `Redirects (1)'
  C. after `Submit form (3)'

  ---

  There's the Self Service part of provisioning one's information. Then the sponsor/operator part to confirm that guest is valid. Then the enablement via the sponsor/operator clicking 'confirm'.

  

  References: https://community.arubanetworks.com/t5/Security/Guest-Captive-Portal-sponsor-approval-architecture/td-p/267625

• Question 59:

  Refer to the exhibit.

  

  Based on the information shown on a client's laptop, what will happen next?

  A. The web login page will be displayed.
  B. The client will send a NAS authentication request to ClearPass.
  C. ClearPass will send a NAS authentication request to the NAD.
  D. the NAD will send an authentication request to ClearPass.
  E. The user will be presented with a self-registration receipt.
  D. the NAD will send an authentication request to ClearPass.

• Question 60:

  Refer to the exhibit.

  

  Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

  A. EAP-TLS Authentication will be unaffected
  B. The user can Onboard their device again
  C. A new device certificate will be automatically pushed out to the device
  D. The user cannot Onboard their device again
  E. EAP-TLS Authentication will fail
  D. The user cannot Onboard their device again
  E. EAP-TLS Authentication will fail

  ---

  The Device Management (View by Device) page lists all devices and lets you manage the devices' access to the network. For each device, you can allow or deny network access.

  When you select the Deny option, a message advises you that any certificates associated with it will be revoked. The device cannot be re-enrolled as long as access is denied. To re-enroll the device, you must use this field to allow access again. References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/DeviceManagement.htm