VCEdump

HPE6-A67 Aruba Certified ClearPass Associate 6.7

PDF question preview Back to product

Reading controls

Reader tools

Free demo

15 of 98 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice8

Multiple choice7

HP · HPE6-A67

Free HPE6-A67 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

What is the primary use of the ClearPass Onboard Application?

A
Connect company-issued devices.
B
Configure network profiles for BYOD Devices.
C
Enforce endpoint device profiling.
D
Provide for system validation of client posture.

Reveal answer details Close answer details

Correct answerB

Question 2

Single choice

Which additional service must be added to a ClearPass server to use the OnGuard Agent health checks for 802.1x authentication?

A
HTTP Posture Service
B
802.1x Authentication
C
802.1x Posture Service
D
802.1x Enforcement policy
E
WebAuth Service

Reveal answer details Close answer details

Correct answerE

Explanation

References:
http://community.arubanetworks.com/t5/Security/Clearpass-Onguard-implementation-and-documentation/td-p/121057

Question 3

Multiple choice

Select three elements that are part of the authorization process. (Choose three.)

A
Send a RADIUS accept to the Access device.
B
Verify client credentials against your account.
C
Determine posture status.
D
Validate the user account attributes.
E
Filter by endpoint device type.

Reveal answer details Close answer details

Correct answersA, B, D

Question 4

Multiple choice

Based on the information provided, what is the status of the network? (Select two.)

A
Posture check is enabled for Windows 7 OS.
B
Posture check is enabled for firewall client application in Windows 7 OS.
C
Auto remediation is enabled, hence the client will be forced to enable the firewallif it is found disabled.
D
Auto remediation can force the client to enable the firewall and also sends a notification to user.
E
Auto remediation cannot force the client to enable the firewall, it can only send notification to the user.

Reveal answer details Close answer details

Correct answersA, C

Question 5

Single choice

When Active Directory is added as an authentication source, what should the format be for the Active Directory bin DN?

A
admin.domain.com
B
domain.com\admin
C
domain.com
D
[email protected]
E
admin\domain.com

Reveal answer details Close answer details

Correct answerD

Question 6

Multiple choice

In ClearPass, which two service configuration can process credentials from a web Login Page? (Choose two.)

A
Guest Service MAC Authentication
B
MSCHAP RADIUS Service
C
Aruba Application Authentication
D
WebAuth Service
E
EAP-PEAP RADIUS Service

Reveal answer details Close answer details

Correct answersC, E

Question 7

Single choice

Refer to the exhibit.

A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server.
Based on this service configuration, which service will be triggered?

A
Service Three
B
Service Two
C
No service will be triggered.
D
Service One

Reveal answer details Close answer details

Correct answerA

Question 8

Single choice

ClearPass Onboard is used primarily to automate which type of network connections?

A
visitor health checks
B
guest self-registration
C
VPN
D
guest captive portal
E
employee 802.1x

Reveal answer details Close answer details

Correct answerE

Question 9

Multiple choice

In Guest authentication without MAC caching, which statements are true? (Choose two.)

A
When the client disconnects from the network, the user will NOT be asked to login when the client reconnects.
B
The endpoint can be mapped to the correct Guest account for auditing.
C
When the guest logs in, the system will remember the client as a guest for the next login.
D
When the client disconnects from the network, the user will be asked to login when the client reconnects.
E
When the User logs into the Guest network, the endpoint will be marked as status = "known"

Reveal answer details Close answer details

Correct answersB, D

Question 10

Multiple choice

Which three items can be obtained from device profiling? (Choose three.)

A
Device Location
B
Device Type
C
Device Family
D
Device Category
E
Device Health

Reveal answer details Close answer details

Correct answersA, B, D

Question 11

Single choice

When adding an Active Directory server as an authentication source in ClearPass, what is the purpose of the 'Search Base DN' feature?

A
to indicate to ClearPass the node in the AD tree structure where it should start to search for records
B
to find the distinguished name of a particular user in Active Directory
C
to indicate to ClearPass the Active Directory domain to append to the username
D
to find the base DN of a particular user in Active Directory
E
to search for AD user and group account to authenticate users from ClearPass

Reveal answer details Close answer details

Correct answerA

Question 12

Multiple choice

Which agents are valid Posture agents used by the ClearPass Policy Manager? (Select three.)

A
OnGuard persistent agent
B
Microsoft AD
C
OnGuard dissolvable agent
D
Cisco Trust Agent
E
Microsoft NAP

Reveal answer details Close answer details

Correct answersA, C, E

Question 13

Multiple choice

In ClearPass guest, which statement is true? (Choose three.)

A
All guest accounts will be assigned a role of Guest and that cannot be changed.
B
The Create Guest Account form is fully configurable and fields can be edited.
C
Account Expiration date and time cannot be edited by the administrator.
D
A guest User is automatically disconnected from the network when their account expires.
E
A guest user will be denied access to the network after their account expires but is not disconnected.
F
A visitor location data field can be added to a guest registration form.

Reveal answer details Close answer details

Correct answersA, D, F

Question 14

Single choice

Which authentication type allows a device to authenticate with a client certificate?

A
802.1X/EAP
B
WEP Authentication
C
MAC Authentication
D
Captive Portal Authentication
E
Open System Authentication

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Binary-comparison-in-EAP-TLS-Authentication/ta-p/257857

Question 15

Single choice

Which Authorization Source supports device profile enforcement?

A
Local User Repository
B
OnGuard Repository
C
Endpoints Repository
D
Guest User Repository

Reveal answer details Close answer details

Correct answerA

VOL	TYPE	QUESTIONS
1	Single choice	8
2	Multiple choice	7

Free HPE6-A67 Exam Dumps Preview

Aruba Certified ClearPass Associate 6.7

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14

QUESTION 15