HP HPE6-A67 Online Practice Questions and Exam Preparation

HP HPE6-A67 Online Questions & Answers

• Question 51:

  When using an Active Directory authentication source, you must configure a Bind DN. Which two statements are true about Bind DN? (Choose two.)

  A. The Bind DN needs to be a Service Account Type.
  B. The Bind DN must be an Administrator Account.
  C. ClearPass Uses the Bind DN to search the Directory.
  D. ClearPass Uses the Bind DN to update User Attributes.
  E. The Bind DN needs Read/Write access to the Directory.
  B. The Bind DN must be an Administrator Account.
  C. ClearPass Uses the Bind DN to search the Directory.

• Question 52:

  When a role mapping policy should be used in an 802.1x service with Active Directory as the authentication source?

  A. When you want to send roles from the AD user to enforcement policies directly from AD attributes.
  B. When you want to send Aruba firewall roles back to the Aruba Network Access Drive.
  C. When you want to translate and combine AD attributes into ClearPass roles.
  D. When you want to enable attributes as roles directly without combining multiple attributes
  A. When you want to send roles from the AD user to enforcement policies directly from AD attributes.

• Question 53:

  What is the purpose of ClearPass Onboarding?

  A. to remotely control devices
  B. to provision and revoke device credentials
  C. to control IoT device access
  D. to manage firmware and patches
  B. to provision and revoke device credentials

• Question 54:

  Which Operating Systems can use Network Access Protection (NAP) policy agents? (Select two.)

  A. Windows XP
  B. Android
  C. Windows 7
  D. Mac OS X
  E. iOS 6 and higher
  A. Windows XP
  C. Windows 7

• Question 55:

  Where is the ClearPass Guest Login page URL referenced in the Aruba Controller?

  A. Guest Access Policy
  B. WebAuthProfile
  C. Captive Portal Policy
  D. Captive Portal Authentication Profile
  E. Guest Enforcement Profile
  D. Captive Portal Authentication Profile

• Question 56:

  What is the purpose of using a role mapping policy in an 802.1x service with Active Directory as the authentication source?

  A. to translate and combine AD attributes into ClearPass roles
  B. to send roles from ClearPass to theAD user to update a user's group membership
  C. to enable attributes as roles directly without needing role mapping rules
  D. to send Aruba firewall roles back to the Aruba Network Access Device
  E. to send details of a user's connection to the AD user to store in its database
  B. to send roles from ClearPass to theAD user to update a user's group membership

• Question 57:

  Refer to the exhibit.

  

  A user connects to an Aruba Access Point wireless SSID named "secure-corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

  A. pod8-mac auth
  B. Noservice will be triggered
  C. pod8wireless
  D. [Policy Manager Admin Network Service]
  E. pod8wired
  A. pod8-mac auth

• Question 58:

  An administrator wants to specify the ClearPass role named "BYOD" for phones and tablets and the "CORP" role for laptops. How should the administrator configure ClearPass to specify the roles by device type? (Choose two.)

  A. Create the roles and add them as attributes in the Endpoints database.
  B. Create the Roles and apply them to the authorization tab in the service.
  C. Create the Roles and add the Endpoints Repository to the authorization in the service.
  D. Ensure that the role is specified by device type in the Endpoints database.
  E. Create a Role Mapping policy, and apply it to the RADIUS service.
  B. Create the Roles and apply them to the authorization tab in the service.
  D. Ensure that the role is specified by device type in the Endpoints database.

• Question 59:

  What is the purpose of the pre-auth check during guest authentication?

  A. for the NAD device to do an internal authentication check before sending the credentials to ClearPass
  B. for the NAD device to check that ClearPass is active before sending it the RADIUS request
  C. for ClearPass to do an internal authentication check before the NAS login happens
  D. for the client device to do an internal sanity check before the NAS login occurs
  E. for the client device to check that ClearPass is active before sending it the credentials
  C. for ClearPass to do an internal authentication check before the NAS login happens

• Question 60:

  What does a client need for it to perform EAP-TLS successfully? (Select two.)

  A. Username and Password
  B. Server Certificate
  C. Pre-shared key
  D. Certificate Authority
  E. Client Certificate
  B. Server Certificate
  E. Client Certificate