HP HPE6-A82 Online Practice Questions and Exam Preparation

HP HPE6-A82 Online Questions & Answers

• Question 31:

  Refer to the Endpoint in the screenshot.

  

  What are possible ways that it was profiled? (Choose two.)

  A. Exchange Plugging agent
  B. NAD ARP listening handler
  C. 3rd part MDM
  D. DNS fingerprinting
  E. Cisco Device Sensor
  B. NAD ARP listening handler
  C. 3rd part MDM

• Question 32:

  What is the purpose of service rules in ClearPass?

  A. selects the Enforcement Profiles used in a service
  B. selects the Service to process a request
  C. selects the Authentication Source for the client
  D. selects the Posture Policy used with OnGuard
  C. selects the Authentication Source for the client

• Question 33:

  What is true regarding Posturing and Profiling?

  A. Profiling describes categorizing the user based on their department while Posturing validates the user as authenticated.
  B. Profiling is the act of identifying the endpoint type while Posturing is assigning a status as to the health of the endpoint.
  C. Posturing and Profiling are role assignments in ClearPass used internally to map to enforcement policies.
  D. Both Posturing and Profiling describe the same thing; what is the health of the client endpoint?
  D. Both Posturing and Profiling describe the same thing; what is the health of the client endpoint?

• Question 34:

  What are "known" endpoints in ClearPass?

  A. "Known" endpoints have be fingerprinted to determine their operating system and manufacturer.
  B. These are endpoints whose beacons have been detected but have never completed authentication.
  C. The label "Known" indicates rogue endpoints labeled as "friendly" or "ignore".
  D. "Known" endpoints can be authenticated based on MAC address to bypass the captive portal login.
  D. "Known" endpoints can be authenticated based on MAC address to bypass the captive portal login.

• Question 35:

  Which option supports DHCP profiling for devices in a network?

  A. DHCP profiling is enabled on ClearPass by default; configuration of DHCP relay on the Network Access Device (NAD) is not required.
  B. Configuring DHCP relay on ClearPass in order to allow the client to receive DHCP after being profiled.
  C. Enabling the DHCP server to profile endpoints and forward the meta-data to ClearPass.
  D. Enabling DHCP relay on Network Access Devices (NADs) to forward DHCP requests to ClearPass.
  A. DHCP profiling is enabled on ClearPass by default; configuration of DHCP relay on the Network Access Device (NAD) is not required.
  D. Enabling DHCP relay on Network Access Devices (NADs) to forward DHCP requests to ClearPass.

• Question 36:

  What is the benefit of installing a wild card certificate for captive portal authentication?

  A. Wild card certificates provide greater security than normal certificates.
  B. Allows different certificates for each controller for increased security.
  C. Guests no longer are required to validate certificates during captive portal.
  D. Allows the single wild card certificate to be installed on all controllers in the environment.
  D. Allows the single wild card certificate to be installed on all controllers in the environment.

• Question 37:

  An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again.

  Which ClearPass features can be used to meet these requirements?

  A. Guest access with MAC caching
  B. Guest self-registration with sponsor approval
  C. Enforcement based on endpoint profiling
  D. ClearPass Onboard Portal
  C. Enforcement based on endpoint profiling

• Question 38:

  Which configuration options are necessary to add a Network Access Device into the ClearPass Policy Manager? (Choose two.)

  A. HTTPS certificate
  B. ClearPass Admin Password
  C. CLI Console Password
  D. NAD IP Address
  E. Shared Secret
  D. NAD IP Address
  E. Shared Secret

• Question 39:

  What happens when a client successfully authenticates but does not match any Enforcement Policy rules?

  A. A RADIUS reject is returned for the client.
  B. A RADIUS Accept is returned with no Enforcement Profile applied.
  C. A RADIUS Accept is returned, and the default Enforcement Profile is applied.
  D. A RADIUS Accept is returned, and the default rule is applied to the device.
  C. A RADIUS Accept is returned, and the default Enforcement Profile is applied.

• Question 40:

  A customer is setting up Guest access with ClearPass. They are considering using 802.1X for both the Employee network and the Guest network.

  What are two issues the customer may encounter when deploying 802.1X with the Guest network? (Choose two.)

  A. ClearPass will not be able to enforce individual Access Control policies.
  B. difficult to maintain in an environment with a large number of transient guest users.
  C. the lack of encryption during the authentication process.
  D. Guests will not be able to be uniquely identified.
  E. the high level of complexity for users to join the guest network.
  B. difficult to maintain in an environment with a large number of transient guest users.
  E. the high level of complexity for users to join the guest network.