Skip to main content

HPE6-A77 Real Exam Questions

Aruba Certified ClearPass Expert Written

60 questions available · Page 1 of 6

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Refer to the exhibit:

You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password.
Using the screenshots as a reference, how would you fix this issue?

  1. A

    Check the network settings for the correct SSID name spelling.

  2. B

    Change the network settings to use EAP-TLS for the authentication protocol.

  3. C

    Install a public signed HTTPs web server certificate on the ClearPass server.

  4. D

    Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method.

Show answer and explanation

Correct answer: A

Question 2 Single choice

Refer to the exhibit:

A customer is trying to configure a TACACS Authentication Service for administrative access to the Aruba Controller, During testing the authentication is not successful.
Given the screen shot what could be the reason for the Login status REJECT?

  1. A

    The password used by the administrative user, user is wrong.

  2. B

    The Enforcement profile is not designed to be used on Aruba Controller.

  3. C

    The Read-only Administrator role does not exist on the Controller.

  4. D

    The Enforcement profile used is not a TACACS profile.

Show answer and explanation

Correct answer: A

Question 3 Single choice

Refer to the exhibit:

What could be causing the error message received on the OnGuard client?

  1. A

    The Service Selection Rules for the service are not configured correctly

  2. B

    The Web-Based Health Check service needs to be configured to use the Posture Policy

  3. C

    There is a firewall policy not allowing the OnGuard Agent to connect to ClearPass

  4. D

    The client's OnGuard Agent has not been configured with the correct Policy Manager Zone

Show answer and explanation

Correct answer: D

Question 4 Single choice

What is the Open SSID (otherwise referred to as Dual SSID) Onboard deployment service workflow?

  1. A

    OnBoard Pre-Auth Application service, OnBoard Authorization Application service. OnBoard
    Provisioning RADIUS service

  2. B

    OnBoard Pre-Auth RADIUS service. OnBoard Authorization Application service. OnBoard Provisioning
    RADIUS service

  3. C

    OnBoard Authorization Application service, OnBoard Pre-Auth Application service, OnBoard

    Provisioning RADIUS service

  4. D

    OnBoard Authorization RADIUS service, OnBoard Pre-Auth Application service, OnBoard Provisioning
    RADIUS service

Show answer and explanation

Correct answer: C

Question 5 Single choice

Refer to the exhibit:

Your company has a postgres SQL database with the MAC addresses of the company-owned tablets You have configured a role mapping condition to tag the SQL devices. When one of the tablets connects to the network, it does not get the correct role and receives a deny access profile.

How would you resolve the issue?

  1. A

    Remove SQL condition from role mapping policy and add it under the enforcement policy conditions.

  2. B

    Edit the SQL authentication source niter attributes and modify the SQL server filter query.

  3. C

    Add the SQL server as an authentication source and map .t under the authentication tab in the service.

  4. D

    Enable authorization tab in the service and add the SQL server as an authorization source.

Show answer and explanation

Correct answer: B

Question 6 Single choice

Refer to the exhibit:

The customer created a new enforcement policy condition to allow VIP Users access without additional security compliance checks hut cannot gel it working. The customer has sent you the above screenshots.

How would you resolve the issue?

  1. A

    Ask the VIP user to complete the one time web health check to get the VIP profile.

  2. B

    Set the Enforcement Policy rules evaluation algorithm to evaluate all.

  3. C

    Include VIP User role along with the Healthy posture enforcement condition.

  4. D

    Modify the Enforcement Policy and re-order the VIP user condition to the lop.

Show answer and explanation

Correct answer: C

Question 7 Single choice

Refer to the exhibit:

You have configured Onboard and cannot get it working The customer has sent you the above screenshots.

How would you resolve the issue?

  1. A

    Re-provision the client by running the QuickConnect application as Administrator

  2. B

    Install a public signed server authentication certificate on the ClearPass server for EAP

  3. C

    Reconnect the client and select the correct certificate when prompted

  4. D

    Copy the [EAP-TLS with OSCP Enabled] authentication method and set the correct OCSP URL

Show answer and explanation

Correct answer: A

Question 8 Multiple choice

You are deploying ClearPass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers.
The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.

What is the most efficient way to configure the customers guest solution? (Select two.)

  1. A

    Build multiple Web Login pages with vendor settings configured for each controller

  2. B

    Install the same public certificate on all Controllers with the common name "controller {company
    domain}"

  3. C

    Build one Web Login page with vendor settings for controller {company domain)

  4. D

    Install multiple public certificates with a different Common Name on each controller

Show answer and explanation

Correct answers: A, B

Question 9 Multiple choice

You are integrating a Postgres SQL server with the ClearPass Policy Manager.

What steps will you follow to complete the integration process? (Select three)

  1. A

    Click on the default filter name with pre-defined filter queries and check box to enable as role.

  2. B

    Specify a new filter with filter queries to fetch authentication and authorization attributes.

  3. C

    Attribute Name under filter configuration must match one of the columns being requested from the database table.

  4. D

    Create a new Endpoint context server and add the SQL server IP, credentilas and the database name.

  5. E

    Alias Name under filter configuration must match one of the columns being requested from the database table.

  6. F

    Create a new authentication source and add the SQL server IP, credentials and the database name.

Show answer and explanation

Correct answers: B, D, F

Question 10 Multiple choice

What is used to validate the EAP Certificate? (Select three.)

  1. A

    Common Name

  2. B

    Date

  3. C

    Key usage

  4. D

    Server Identity

  5. E

    SAN entries

  6. F

    Trust chain

Show answer and explanation

Correct answers: A, C, F