HP HPE6-A67 Online Practice Questions and Exam Preparation

HP HPE6-A67 Online Questions & Answers

• Question 1:

  Which policy component is the final step in the policy service flow in ClearPass?

  A. Enforcement
  B. Posture
  C. Authorization
  D. Rotes
  E. Authentication
  A. Enforcement

• Question 2:

  In ClearPass guest, which statement is true? (Choose three.)

  A. All guest accounts will be assigned a role of Guest and that cannot be changed.
  B. The Create Guest Account form is fully configurable and fields can be edited.
  C. Account Expiration date and time cannot be edited by the administrator.
  D. A guest User is automatically disconnected from the network when their account expires.
  E. A guest user will be denied access to the network after their account expires but is not disconnected.
  F. A visitor location data field can be added to a guest registration form.
  A. All guest accounts will be assigned a role of Guest and that cannot be changed.
  D. A guest User is automatically disconnected from the network when their account expires.
  F. A visitor location data field can be added to a guest registration form.

• Question 3:

  A guest user connects to an Open Guest SSID on a wireless network and is redirected to a web login page on ClearPass. How is the authentication performed?

  A. The controller will capture the credentials as they are passed to ClearPass by the Web Login page.
  B. ClearPass instructs the wireless controller to fetch the credentials from the Web Login Page.
  C. The User submits the credentials, and ClearPass instructs the browser to post the credentials to the wireless controller.
  D. When the user submits the credentials, ClearPass will capture the credentials and post them to the wireless controller.
  A. The controller will capture the credentials as they are passed to ClearPass by the Web Login page.

• Question 4:

  What is the function of the primary and backup servers when configuring an authentication source in ClearPass?

  A. The primary server and backup servers can be configured for round-robin.
  B. The primary server can be from one Active Directory domain; the backup server can be from another.
  C. The primary server is always authenticated first, then the backup is used if authentication fails.
  D. The primary server is always authenticated first, then the backup is used if that times out.
  D. The primary server is always authenticated first, then the backup is used if that times out.

• Question 5:

  A customer would like to authenticate employees using a captive portal guest web login page. Employees should use their AD credentials to login on this page. Which statement is true?

  A. Employees must be taken to a separate web login page on the guest network.
  B. The customer needs to add second guest service in the policy manager for the guest network.
  C. The customer needs to add the AD server as an authentication source in a guest service.
  D. The customer needs to add the AD servers RADIUS certificate to the guest network.
  C. The customer needs to add the AD server as an authentication source in a guest service.

• Question 6:

  Refer to the exhibit.

  

  An administrator has enabled `department' and `memberOf' as roles. Which effect will this have on Enforcement?

  A. The user's memberOf attribute is sent back to the controller as a firewall role.
  B. The user's authentication will be rejected if the user does not have a department attribute in AD.
  C. The user's department and group membership must be included in role mapping rules.
  D. The user's department and group membership will be available as roles for evaluation by the enforcement policy.
  C. The user's department and group membership must be included in role mapping rules.

• Question 7:

  What is the purpose of a guest self-registration page in ClearPass?

  A. to allow employees to get their own devices securely connected to the network
  B. to allow contractors to create their own accounts inActive Directory
  C. to allow employees' sponsors to create accounts for their guests
  D. to allow employees to easily get their corporate devices on the network
  E. to allow guest users to create a login account for the web login page
  B. to allow contractors to create their own accounts inActive Directory

• Question 8:

  What is a RADIUS Change of Authorization?

  A. It allows ClearPass to change the user role for the client without disconnecting.
  B. It allows ClearPass to transmit messages to the NAD/NAS to modify a user's session status.
  C. It forces the client to re-authenticate upon roaming to an access point.
  D. It is a mechanism that allows ClearPass to assign a new VLAN to a wired user.
  B. It allows ClearPass to transmit messages to the NAD/NAS to modify a user's session status.

• Question 9:

  Which ClearPass posture token indicates that while the client is compliant, there is an available update for the client?

  A. Healthy
  B. Checkup
  C. Unknown
  D. Remediate
  E. Infected
  B. Checkup

• Question 10:

  Which options support DHCP profiling for devices in a network? (Choose two.)

  A. configuring ClearPass as a DHCP relay for the client
  B. enabling the DHCP server to profile endpoints and forward meta-data to ClearPass
  C. enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass
  D. enabling the DHCP server to forward DHCP traffic to ClearPass
  E. DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary
  A. configuring ClearPass as a DHCP relay for the client
  C. enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass