HP HPE6-A15 Online Practice Questions and Exam Preparation

HP HPE6-A15 Online Questions & Answers

• Question 61:

  A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client's Onguard posture token.

  Which Enforcement profile should be used on the health check service?

  A. RADIUS CoA
  B. Quarantine VLAN
  C. Full Access VLAN
  D. RADIUS Accept
  E. RADIUS Reject
  A. RADIUS CoA

  ---

  The Health Check Service requires a profile to terminate the session so that the RADIUS 802.1X authentication Service can use the posture token in a new authentication routine. The terminate session profile will utilize the Change of Authorization feature to force a re-authentication.

  See step 6) below.

  Navigate to the list of Enforcement Profiles by selecting, Configuration > Enforcement > Profiles.

  2.

  Click the + Add link in the upper right hand corner.

  3.

  From the Template dropdown menu, choose RADIUS Change of Authorization (CoA).

  4.

  Name the policy.

  This example uses Dell Terminate Session as the profile name.

  5.

  Leave all the other settings as default, and click Next > to move to the Attributes tab.

  6.

  On the dropdown menu for Select RADIUS CoA Template, choose IETF-Terminate-Session-IETF.

  7.

  Click Next > and review the Summary tab (Figure 22).

  8.

  Click Save.

  References: ClearPass NAC and Posture Assessment for Campus Networks Configuring ClearPass OnGuard, Switching, and Wireless (v1.0) (September 2015), page 22 http://en.community.dell.com/cfs-file/__key/telligent-evolution-components-attachments/13-4629-00-00-20-44-16-18/ClearPass-NAC-and-Posture-Assessment-for-Campus-Networks.pdf?forcedownload=true

• Question 62:

  When is the RADIUS server certificate used? (Select two.)

  A. During dual SSID onboarding, when the client connects to the Guest network
  B. During EAP-PEAP authentication in single SSID onboarding
  C. During post-Onboard EAP-TLS authentication, when the client verifies the server certificate
  D. During Onboard Web Login Pre-Auth, when the client loads the Onboarding web page
  E. During post-Onboard EAP-TLS authentication, when the server verifies the client certificate
  C. During post-Onboard EAP-TLS authentication, when the client verifies the server certificate
  D. During Onboard Web Login Pre-Auth, when the client loads the Onboarding web page

• Question 63:

  Refer to the exhibit.

  

  Based on the configuration for `maximum devices' shown, which statement accurately describes its settings?

  A. The user cannot Onboard any devices.
  B. It limits the total number of devices that can be provisioned by ClearPass.
  C. It limits the total number of Onboarded devices connected to the network.
  D. It limits the number of devices that a single user can Onboard.
  E. It limits the number of devices that a single user can connect to the network.
  D. It limits the number of devices that a single user can Onboard.

• Question 64:

  Refer to the exhibit.

  

  Based on the configuration of the create_user form shown, which statement accurately describes the status?

  A. The email field will be visible to guest users when they access the web login page.
  B. The visitor_company field will be visible to operators creating the account.
  C. The visitor_company field will be visible to the guest users when they access the web login page.
  D. The visitor_phone field will be visible to the guest users in the web login page.
  E. The visitor_phone field will be visible to operators creating the account.
  A. The email field will be visible to guest users when they access the web login page.

  ---

  References: https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/expire-timezone-field-is-not-showing-up-on-the-create-user-form/ta-p/250230

• Question 65:

  Which authorization servers are supported by ClearPass? (Select two.)

  A. Aruba Controller
  B. LDAP server
  C. Cisco Controller
  D. Active Directory
  E. Aruba Mobility Access Switch
  B. LDAP server
  D. Active Directory

  ---

  Authentication Sources can be one or more instances of the following examples:

  *

  Active Directory

  *

  LDAP Directory

  *

  SQL DB

  *

  Token Server

  *

  Policy Manager local DB

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 114 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 66:

  Refer to the exhibit.

  

  An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on the Enforcement Profile?

  A. It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds.
  B. It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.
  C. It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user's session after this time is up.
  D. It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user's session after this time is up.
  E. It will send the session -Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.
  E. It will send the session -Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.

• Question 67:

  A customer with an Aruba Controller wants it to work with ClearPass Guest.

  How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

  A. Add ClearPass as a RADIUS CoA server.
  B. Add ClearPass as a RADIUS authentication server.
  C. Add ClearPass as a TACACS+ authentication server.
  D. Add ClearPass as an HTTPS authentication server.
  B. Add ClearPass as a RADIUS authentication server.

  ---

  5. Configuring the Aruba Controller

  5.1 Add Clearpass as RADIUS Server

  Navigate to Configuration > SECURITY > Authentication > Servers Click on RADIUS Server and enter the Name of your Clearpass Server: myClearpass Click Add Click on myClearpass in the Server List Etc.

  References: https://community.arubanetworks.com/t5/Security/Step-by-Step-Controller-CPPM-6-5-Captive-Portal-authentication/td-p/229740

• Question 68:

  Refer to the exhibit.

  

  What can be concluded from the Access Tracker output shown?

  A. The client used incorrect credentials to authenticate to the network.
  B. ClearPass does not have a service enabled for MAC authentication.
  C. The client MAC address is not present in the Endpoints table in the CrearPass database.
  D. The RADIUS client on the Windows server failed to categorize the service correctly.
  E. The client wireless profile is incorrectly setup.
  B. ClearPass does not have a service enabled for MAC authentication.

• Question 69:

  What does a Windows client need for it to perform EAS-PEAP successfully when `Validate server Certificate' is not enabled?

  A. Pre-shared key
  B. Client Certificate
  C. WPA2-PSK
  D. Username and Password
  E. Server Certificate
  D. Username and Password

• Question 70:

  Which use cases will require a ClearPass Guest application license? (Select two.)

  A. Guest device fingerprinting
  B. Guest endpoint health assessment
  C. Sponsor based guest user access
  D. Guest user self-registration for access
  E. Guest personal device onboarding
  C. Sponsor based guest user access
  D. Guest user self-registration for access