HP HPE6-A82 Online Practice Questions and Exam Preparation

HP HPE6-A82 Online Questions & Answers

• Question 21:

  When using Guest Authentication with MAC Caching service template, which statements are true? (Choose two.)

  A. The guest authentication is provided better security than without using MAC caching.
  B. The endpoint status of the client will be treated as "known" the first time the client associates to the network.
  C. Which wireless SSID and wireless controller must be indicated when configuring the template.
  D. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.
  A. The guest authentication is provided better security than without using MAC caching.
  C. Which wireless SSID and wireless controller must be indicated when configuring the template.

• Question 22:

  ClearPass receives fingerprinting profile data for a client device that is based on MAC OUI, NMAP, DHCP, and OnGuard. Which fingerprint or fingerprints are used?

  A. NMAP because it is actively obtained
  B. The last fingerprint gathered
  C. OnGuard because it is application based
  D. All fingerprints are applied
  A. NMAP because it is actively obtained

  ---

  Reference: https://www.catelsys.eu/images/Catelsys/images/2017/04/0-Notices-ClearPass_Policy_Manager_User_Guide-1.pdf

• Question 23:

  Which two are required to add a Network Access Device (NAD) into ClearPass? (Choose two.)

  A. HTTPS certificate
  B. NAD IP address
  C. ClearPass Admin login credentials
  D. Shared Secret
  E. SSH password
  B. NAD IP address
  D. Shared Secret

• Question 24:

  Which fingerprint collectors can help to distinguish between an iPhone and an iPad? (Choose two.)

  A. SNMP
  B. IF-MAP
  C. MAC OUI
  D. TCP header capture
  E. HTTP
  B. IF-MAP
  C. MAC OUI

• Question 25:

  What are benefits of using Network Device Groups in ClearPass? (Choose two.)

  A. Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group.
  B. Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to.
  C. A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group.
  D. Another way to add a customizable "attribute" field to reference when processing authentication requests.
  E. Can apply to both Network Access Devices (NADs) as well as client machines as a way to filter authentication requests.
  A. Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group.
  D. Another way to add a customizable "attribute" field to reference when processing authentication requests.

• Question 26:

  Refer to the exhibit.

  

  A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server.

  Based on this service configuration, which service will be triggered?

  A. No service will be triggered
  B. Service Three
  C. Service Two
  D. Service One
  B. Service Three

• Question 27:

  Which Authorization Source support device profile enforcement?

  A. OnGuard Repository
  B. Local user Repository
  C. Guest User Repository
  D. Endpoint Repository
  B. Local user Repository

• Question 28:

  An organization has configured guest self-registration with internal sponsorship.

  Which options can be configured to send guest users their credentials outside of the initial login web-page? (Choose two.)

  A. Configure a Simple Mail Transport Protocol (SMTP) server in ClearPass Policy Manager administration.
  B. Configure a Simple Mail Transport Protocol (SMTP) server in ClearPass Guest administration.
  C. Configure a Short Message Service (SMS) Gateway in ClearPass Policy Manager administration.
  D. Configure a Short Message Service (SMS) Gateway under ClearPass Guest configuration.
  E. Configure the self-registration page for the guest to receive a Simple Mail Transport Protocol (SMTP) receipt.
  A. Configure a Simple Mail Transport Protocol (SMTP) server in ClearPass Policy Manager administration.
  E. Configure the self-registration page for the guest to receive a Simple Mail Transport Protocol (SMTP) receipt.

  ---

  Reference: https://www.arubanetworks.com/techdocs/ClearPass/6.7/Guest/PDFs/Guest_User_Guide.pdf

• Question 29:

  What is a function of the posture token in ClearPass OnGuard? (Choose two.)

  A. Identifies clients that are not security compliant.
  B. Initiates the Auto-Remediation process.
  C. Indicates the Health Status of the Client.
  D. Denies access to unhealthy clients.
  E. Controls access to network resources.
  C. Indicates the Health Status of the Client.
  D. Denies access to unhealthy clients.

  ---

  Reference: https://docplayer.net/18755148-Clearpass-onguard-configuration-guide.html (3)

• Question 30:

  What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

  A. ClearPass will validate the user credentials, then, for the duration of the cache, ClearPass will just fetch account attributes.
  B. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.
  C. ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes.
  D. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials.
  B. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.

  ---

  Reference: https://community.arubanetworks.com/blogs/arunkumar1/2020/10/20/what-is-the-difference-between-authentication-cache-timeout-and-machine-authentication-cache-timeout