HP HPE6-A15 Online Practice Questions and Exam Preparation

HP HPE6-A15 Online Questions & Answers

• Question 71:

  When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

  A. Endpoints repository
  B. Onboard Device repository
  C. MDM repository
  D. Guest User repository
  E. Local User repository
  A. Endpoints repository

  ---

  A service running in CPPM periodically polls MDM servers using their exposed APIs. Device attributes obtained from MDM are added as endpoint tags. Profiler related attributes are send to profiler which uses these attributes to derive final profile.

  References: ClearPass Profiling TechNote (2014), page 23 https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

• Question 72:

  The "Alerts" tab in an access tracker entry shows the error message: "Access denied by policy."

  What is a possible cause of authentication failure?

  A. Failure to find an appropriate service to process the authentication request
  B. Configuration of the Enforcement Policy
  C. An error in the role mapping policy
  D. Implementation of a firewall policy on ClearPass
  E. Failure to select an appropriate authentication method for the authentication request
  B. Configuration of the Enforcement Policy

• Question 73:

  Refer to the exhibit.

  

  An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on the Enforcement Profile?

  A. it will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user's session after this time is up
  B. it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds
  C. it will count down 600 seconds and send a RADIUS CoA message to the user to end the user's session after this time is up
  D. it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user's session will be terminated after 600 seconds
  D. it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user's session will be terminated after 600 seconds

  ---

  Session Timeout (in seconds) - Configure the agent session timeout interval to re-evaluate the system health again. OnGuard triggers auto-remediation using this value to enable or disable AV-RTP status check on endpoint. Agent re-authentication is determined based on session-time out value. You can specify the session timeout interval from 60 ?600 seconds. Setting the lower value for session timeout interval results numerous authentication requests in Access Tracker page. The default value is 0.

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/Enforce/EPAgent_Enforcement.htm

• Question 74:

  Refer to the exhibit.

  

  Based on the Access Tracker output for the user shown, which statement describes the status?

  A. The Aruba Terminate Session enforcement profile as applied because the posture check failed.
  B. A Healthy Posture Token was sent to the Policy Manager.
  C. A RADIUS-Access-Accept message is sent back to the Network Access Device.
  D. The authentication method used is EAP-PEAP.
  E. A NAP agent was used to obtain the posture token for the user.
  B. A Healthy Posture Token was sent to the Policy Manager.

  ---

  We see System Posture Status: HEALTHY(0)

  End systems that pass all SHV tests receive a Healthy Posture Token, if they fail a single test they receive a Quarantine Posture Token.

  References: CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 13

  https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf

• Question 75:

  Refer to the exhibit.

  

  Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user's request?

  A. After the RADIUS Access-Request
  B. After the NAS login, but before the RADIUS Access-Request
  C. Before the user can submit the registration form
  D. After the RADIUS Access-Response
  E. After the receipt page is displayed, before the NAS login
  E. After the receipt page is displayed, before the NAS login

• Question 76:

  Use this form to make changes to the RADIUS Web Login Guest Network.

  

  A Web Login page is configured in Clear Pass Guest as shown.

  What is the purpose of the Pre-Auth Check?

  A. To authenticate users after the NAD sends an authentication request to ClerPass
  B. To authenticate users before the client sends the credentials to the NAD
  C. To authenticate users when they are roaming from one NAD to another
  D. To authenticate users before they launch the Web Login Page
  E. To replace the need for the NAD to send an authentication request to ClearPass
  B. To authenticate users before the client sends the credentials to the NAD

• Question 77:

  Refer to the exhibit.

  

  Based on the Translation Rule configuration shown, what will be the outcome?

  A. An AD user from group Administrators will be assigned the operator profile of IT Administrators.
  B. All ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators.
  C. All active directory users will be assigned the operator profile of IT Administrators.
  D. A user from AD group MatchAdmin will be assigned the operator profile of IT Administrators.
  A. An AD user from group Administrators will be assigned the operator profile of IT Administrators.

• Question 78:

  In a single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

  A. Active Directory Attributes
  B. Network Access Device used
  C. Endpoint OS Category
  D. Onguard Agent used
  E. Authentication Method used
  E. Authentication Method used

• Question 79:

  Refer to the exhibit.

  

  A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page.

  Based on the MAC Caching service information shown, which statement about the guests' MAC address is accurate?

  A. It will be visible in the Guest User Repository with Unknown Status
  B. It will be deleted from the Endpoint table.
  C. It will be visible in the Guest User Repository with Known Status.
  D. It will be visible in the Endpoints table with Known Status.
  E. It will be visible in the Endpoints table with Unknown Status.
  D. It will be visible in the Endpoints table with Known Status.

• Question 80:

  Refer to the exhibit.

  

  Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

  A. Only the attribute values of department and memberOf can be used in role mapping policies.
  B. The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.
  C. Only the attribute value of company can be used in role mapping policies, not the other attributes.
  D. The attribute values of department and memberOf are directly applied as ClearPass roles.
  E. Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.
  D. The attribute values of department and memberOf are directly applied as ClearPass roles.