Free HPE6-A15 Exam Dumps PDF Preview

Question 1

Single choice

Refer to the exhibit.

Based on the Enforcement Policy configuration shown, when a user with Role Remote Worker connects to the network and the posture token assigned is quarantine, which Enforcement Profile will be applied?

A
RestrictedACL
B
Remote Employee ACL
C
[Deny Access Profile]
D
EMPLOYEE_VLAN
E
HR VLAN

Reveal answer details Close answer details

Correct answerB

Explanation

The first rule will match, and the Remote Employee ACL will be used.

Question 2

Multiple choice

Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

A
Username and Password
B
Pre-shared key
C
WPA2-PSK
D
server Certificate
E
Client Certificate

Reveal answer details Close answer details

Correct answersD, E

Explanation

When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other. Certificates must meet specific requirements both on the server and on the client for successful authentication.

References:
https://support.microsoft.com/en-us/help/814394/certificate-requirements-when-you-use-eap-tls-or-peap-with-eap-tls

Question 3

Single choice

What does Authorization allow users to do in a Policy Service?

A
use only attributes stored in external databases for Enforcement, but not internal databases
B
use attributes stored in databases in role mapping and Enforcement
C
use only attributes stored in internal databases for Enforcement, but not external databases
D
use attributes stored in databases in role mapping, but not Enforcement
E
use attributes stored in databases in Enforcement, but not role mapping

Reveal answer details Close answer details

Correct answerB

Question 4

Single choice

Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

A
DHCP server IP
B
Active Directory IP
C
Switch IP
D
Microsoft NPS server IP
E
ClearPass server IP

Reveal answer details Close answer details

Correct answerE

Question 5

Single choice

Refer to the exhibit.

An AD user's department attribute value is configured as "QA". The user authenticates from a laptop
running MAC OS X.

Which role is assigned to the user in ClearPass?

A
HR Local
B
Remote Employee
C
[Guest]
D
Executive
E
IOS Device

Reveal answer details Close answer details

Correct answerC

Explanation

None of the Listed Role Name conditions are met.

Question 6

Single choice

Refer to the exhibit.

The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.

What is the cause of this error?

A
The controller's shared secret used during the certificate exchange is incorrect.
B
The NAS source interface IP is incorrect.
C
The client sent an incorrect shared secret for the 802.1X authentication.
D
The controller used an incorrect shared secret for the RADIUS authentication.
E
The client's shared secret used during the certificate exchange is incorrect.

Reveal answer details Close answer details

Correct answerD

Question 7

Single choice

What is the purpose of ClearPass Onboard?

A
to provide MAC authentication for devices that don't support 802.1x
B
to run health checks on end user devices
C
to provision personal devices to securely connect to the network
D
to configure self-registration pages for guest users
E
to provide guest access for visitors to connect to the network

Reveal answer details Close answer details

Correct answerC

Question 8

Drag & drop

DRAG DROP

Use the arrows to soft the steps to request a Policy on the left into the order they are performed on the right.

Reveal answer details Close answer details

Question 9

Single choice

What is the certificate format PKCS #7, or .
p7b, used for?

A
Certificate Signing Request
B
Binary encoded X.509 certificate
C
Binary encoded X.509 certificate with public key
D
Certificate with an encrypted private key
E
Certificate chain

Reveal answer details Close answer details

Correct answerE

Explanation

The PKCS#7 or P7B format is usually stored in Base64 ASCII format and has a file extension of .p7b or .p7c. P7B certificates contain "-----BEGIN PKCS7-----" and "-----END PKCS7-----" statements. A P7B file only contains certificates and chain certificates, not the private key. Several platforms support P7B files including Microsoft Windows and Java Tomcat.

References:
https://community.arubanetworks.com/t5/Controller-Based-WLANs/Various-Certificate-Formats/ta-p/176548

Question 10

Single choice

Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

A
Full Access VLAN
B
Employee VLAN
C
Internet VLAN
D
Deny Access

Reveal answer details Close answer details

Correct answerB

Question 11

Single choice

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

What is the page name field used for?

A
for forming the Web Login Page URL
B
for Administrators to access the PHP page, but not guests
C
for Administrators to reference the page only
D
for forming the Web Login Page URL where Administrators add guest users
E
for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.

Reveal answer details Close answer details

Correct answerA

Explanation

The Page Name is an identifier page name that will appear in the URL -- for example, "/guest/ page_name.php".

References:
http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/Configuration/CreateEditWebLogin.htm

Question 12

Single choice

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

A
to audit client authentications
B
to display changes made to the ClearPass configuration
C
to display the entire configuration of the ClearPass Policy Manager
D
to audit the network for PCI compliance
E
to display system events like high CPU usage.

Reveal answer details Close answer details

Correct answerB

Question 13

Single choice

Refer to the exhibit.

A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop.

Which Enforcement Profile is applied?

A
WIRELESS_GUEST_NETWORK
B
WIRELESS_CAPTIVE_NETWORK
C
WIRELESS_HANDHELD_NETWORK
D
Deny Access
E
WIRELESS_EMPLOYEE_NETWORK

Reveal answer details Close answer details

Correct answerE

Explanation

MATCHES_ANY: For list data types, true if any of the run-time values in the list match one of the configured values.
Example: Tips:Role MATCHES_ANY HR,ENG,FINANCE

References:
http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/Rules/Operators.htm

Question 14

Single choice

A customer would like to deploy ClearPass with these requirements: between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS should allow for up to 1000 employee devices to be Onboarded should allow up to 100 guest users each day to authenticate using the web login feature

What is the license mix that customer will need to purchase?

A
CP-HW-2k, 1000 Onboard, 100 Guest
B
CP-HW-500, 1000 Onboard, 100 Guest
C
CP-HW-5k, 2500 Enterprise
D
CP-HW-5k, 1000 Enterprise
E
CP-HW-5k, 100 Onboard, 100 Guest

Reveal answer details Close answer details

Correct answerC

Question 15

Single choice

Refer to the exhibit.

Based on the Access Tracker output for the user shown, which statement describes the status?

A
The Aruba Terminate Session enforcement profile as applied because the posture check failed.
B
A Healthy Posture Token was sent to the Policy Manager.
C
A RADIUS-Access-Accept message is sent back to the Network Access Device.
D
The authentication method used is EAP-PEAP.
E
A NAP agent was used to obtain the posture token for the user.

Reveal answer details Close answer details

Correct answerB

Explanation

We see System Posture Status: HEALTHY(0)

End systems that pass all SHV tests receive a Healthy Posture Token, if they fail a single test they receive a Quarantine Posture Token.

References:
CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 13 (https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf)

Question 16

Single choice

Refer to the exhibit.

An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ.

Which role is assigned to the user in ClearPass?

A
HR Local
B
[Guest]
C
[Employee]
D
Linux User
E
Executive

Reveal answer details Close answer details

Correct answerE

Explanation

The conditions of the Executive Role is met.

Free HPE6-A15 Exam Dumps Preview

Aruba Certified Clearpass Professional 6.5

PREVIEW CONTENTS · 3 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

QUESTION 15

QUESTION 16

VOL	TYPE	QUESTIONS
1	Single choice	14
2	Multiple choice	1
3	Drag & drop	1