HP HPE6-A77 Online Practice Questions and Exam Preparation

HP HPE6-A77 Online Questions & Answers

• Question 1:

  How does the RadSec improve the RADIUS message exchange? (Select two.)

  A. It can be used on an unsecured network or the Internet.
  B. It builds a TTLS tunnel between the NAD and ClearPass.
  C. Only the NAD needs to trust the ClearPass Certificate.
  D. It encrypts the entire RADIUS message.
  E. It uses UDP to exchange the radius packets.
  D. It encrypts the entire RADIUS message.
  E. It uses UDP to exchange the radius packets.

• Question 2:

  Refer to the exhibit: A customer has configured the Aruba Controller for administrative authentication using ClearPass as a TACACS server. During testing, the read-only user is getting the root access role. What could be a possible reason for this behavior? (Select two.)

  

  

  A. The Controllers Admin Authentication Options Default role is mapped to toot.
  B. The ClearPass user role associated to the read-only user is wrong
  C. The Controller Server Group Match Rules are changing the user role
  D. The read-only enforcement profile is mapped to the root role
  E. On the Controller, the TACAC$ authentication server Is not configured for Session authorization
  C. The Controller Server Group Match Rules are changing the user role
  E. On the Controller, the TACAC$ authentication server Is not configured for Session authorization

• Question 3:

  Refer to the exhibit:

  

  

  You are doing a ClearPass PoC at a customer site with a single Aruba Mobility Controller. The customer asked for a demonstration of a simple Web Login functionality. You used a service template to create the guest services. During testing,

  the user gets redirected back to the weblogin page with an Authentication failed message. The guest configurations on the Aruba Mobility Controller are configured correctly.

  Why would the guest fail to authenticate successfully?

  A. The authentication source mapped in the service is incorrect, it should be mapped as (Guest Device Repository] [Local SQL DB].
  B. The username and/or password used for authentication is incorrect Re-enter the correct password on the weblogin page.
  C. The username used for authentication does not exist in the Guest User Database Create a new user and authenticate again.
  D. The Unique-Device-Count does not allow any Client devices. Update the Enforcement policy condition: Unique-Device-Count.
  A. The authentication source mapped in the service is incorrect, it should be mapped as (Guest Device Repository] [Local SQL DB].

• Question 4:

  A customer has acquired another company that has its own Active Directory infrastructure The 802 1X authentication works with the customers original Active Directory servers but the customer would like to authenticate users from the acquired company as well. What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)

  A. Create a new Authentication Source, type Active Directory.
  B. Join the ClearPass server(s) to the new AD domain.
  C. Add the new AD server(s) as backup into the existing Authentication Source.
  D. There is no need to Join ClearPass to the new AD domain.
  E. Create a new Authentication Source, type Generic LDAP.
  B. Join the ClearPass server(s) to the new AD domain.
  D. There is no need to Join ClearPass to the new AD domain.

• Question 5:

  A customer has a ClearPass cluster deployment with one Publisher and one Subscriber configured as a Standby Publisher at the Headquarters DataCenter They also have a large remote site that is connected with an Aruba SD Branch

  solution over a two Mbps Internet connection. The Remote Site has two ClearPass servers acting as Subscribers. The solution implemented for the customer includes OnGuard, Guest Self Registration, and Employee 802. ix authentication.

  The client is complaining that users connecting to an IAP Clusters Guest SSID located at the Remote Site are experiencing a significant delay in accessing the Guest Captive Portal page.

  What could be a possible cause of this behavior?

  A. The configuration of the captive portal is pointing to a link located on one of the servers in the Headquarters
  B. The ClearPass Cluster has no zones defined and the guest captive portal request is being redirected to the Publisher
  C. The guest page is not optimized to work with the client browser and a proper theme should be applied
  D. The captive portal page was only created on the Publisher and requests are getting redirected to a Subscriber
  A. The configuration of the captive portal is pointing to a link located on one of the servers in the Headquarters

• Question 6:

  A customer is planning to implement machine and user authentication on infrastructure with one Aruba Controller and a single ClearPass Server. What should the customer consider while designing this solution? (Select three.)

  A. The Windows User must log off, restart or disconnect their machine to initiate a machine authentication before the cache expires.
  B. The machine authentication status is written in the Multi-master cache on the ClearPass Server for 24 hrs.
  C. Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication.
  D. The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.
  E. Machine Authentication only uses EAP TLS, as such a PKI infrastructure should be in place for machine authentication.
  F. The customer does not need to worry about Multi-Master Cache Survivability because the Controller will also cache the machine state.
  B. The machine authentication status is written in the Multi-master cache on the ClearPass Server for 24 hrs.
  C. Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication.
  E. Machine Authentication only uses EAP TLS, as such a PKI infrastructure should be in place for machine authentication.

• Question 7:

  Where is the following information stored in ClearPass?

  1.

  Roles and Posture for Connected Clients

  2.

  System Health for OnGuard

  3.

  Machine authentication State

  4.

  CoA session info

  5.

  Mapping of connected clients to NAS/NAD

  A. Multi-Master cache
  B. Endpoint database
  C. insight database
  D. ClearPass system cache
  D. ClearPass system cache

• Question 8:

  Refer to the exhibit:

  

  A customer has configured a Guest Self registration page for their Cisco Wireless network with the settings shown. What should be changed in order to successfully authenticate guests users?

  A. Secure Login should use HTTP
  B. Change the Vendor Settings to Airespace Networks
  C. Change \he IP Address to the Cisco Controller DNS name
  D. Login Method should be Controller-initiated - using HTTPs form submit
  C. Change \he IP Address to the Cisco Controller DNS name

• Question 9:

  Refer to the exhibit:

  

  A customer has configured onboard in a cluster with two nodes All devices were onboarded in the network through node1 but those clients tail to authenticate through node2 with the error shown. What steps would you suggest to make provisioning and authentication work across the entire cluster? (Select three.)

  A. Have all of the BYOD clients re-run the Onboard process
  B. Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.
  C. Have all of the BYOD clients disconnect and reconnect to me network
  D. Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).
  E. Make sure that the HTTPS certificate on both nodes is issued as a Code Signing certificate
  F. Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate
  B. Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.
  D. Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).
  F. Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate

• Question 10:

  Refer to the exhibit: The customer complains that the user shown cannot log into the ClearPass Server as an administrator using the [Policy Manager Admin Network Login Service]. What could be the reason for this?

  

  A. The user might be used for a TACACS authentication
  B. The account created does not fit this purpose.
  C. The mapping on the role should be changed to [RADIUS Super Admin]
  D. The local user authentication might be disabled
  B. The account created does not fit this purpose.