VCEdump

HPE6-A77 Aruba Certified ClearPass Expert Written

PDF question preview Back to product

Reading controls

Reader tools

Free demo

9 of 60 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice7

Multiple choice2

HP · HPE6-A77

Free HPE6-A77 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

Refer to the exhibit:

You have configured Onboard and cannot get it working The customer has sent you the above screenshots.

How would you resolve the issue?

A
Re-provision the client by running the QuickConnect application as Administrator
B
Install a public signed server authentication certificate on the ClearPass server for EAP
C
Reconnect the client and select the correct certificate when prompted
D
Copy the [EAP-TLS with OSCP Enabled] authentication method and set the correct OCSP URL

Reveal answer details Close answer details

Correct answerA

Question 2

Multiple choice

Refer to the exhibit:

You configuring an 802 1x service endpoint profiling. When the client connects to the network, ClearPass successfully profiles the client and sends Radius Change of Authorization (RCoA) but Radius Change of Authorization {RCoA) fails for the client You manually clicked on the Change Status button in the access tracker to force an RCoA but that failed too.

What must you check to ensure that the RCoA will work? (Select two.)

A
RFC 3576 option is enabled for Aruba Controller under Network device in ClearPass.
B
RFC 3576 server should be mapped in the server group on the Aruba Controller
C
The RFC 3576 shared secret on ClearPass should match the Authentication Server shared secret
D
RFC 3576 server IPs and the Authentication server IPs should be same in the AAA profile

Reveal answer details Close answer details

Correct answersA, C

Question 3

Single choice

Refer to the exhibit:

When creating a new report, there is an option to send report Notifications by Email.

Where is the email server configured?

A
In the ClearPass Policy Manager Endpoint Context servers under Administration.
B
In the Insight Reports Interface under Administration on the sidebar menu.
C
In the insight report on the next screen of the report definition.
D
In the ClearPass Policy Manager Messaging setup under Administration.

Reveal answer details Close answer details

Correct answerB

Question 4

Multiple choice

A customer has acquired another company that has its own Active Directory infrastructure.
The 802 1X authentication works with the customers original Active Directory servers but the customer would like to authenticate users from the acquired company as well.

What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)

A
Create a new Authentication Source, type Active Directory.
B
Join the ClearPass server(s) to the new AD domain.
C
Add the new AD server(s) as backup into the existing Authentication Source.
D
There is no need to Join ClearPass to the new AD domain.
E
Create a new Authentication Source, type Generic LDAP.

Reveal answer details Close answer details

Correct answersB, D

Question 5

Single choice

A customer is looking to implement a Web-Based Health Check solution with the following requirements: for the HR user's client devices, check if a USB stick is mounted. for the R&D user's client devices, check if the hard disk is fully encrypted.

The Web-Based Health Check service has been configured but the customer it is not sure how to design the Profile Policy.

How can be accomplished this customer request?

A
create two Posture Policies and customize the OnGuard Agent (Persistent or Dissolvable) to select the correct SHV checks
B
create one Posture Policy and define Rules Conditions that will apply different Tokens for each SHV check condition
C
create two Posture Policies and use the Restrict by Roles option to filter for HR and R&D user roles and apply the correct SHV checks
D
create one Posture Policy to check the HR users client devices and use the NAP Agent to check R&D users client devices

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

When is it recommended to use a certificate with multiple entries on the Subject Alternative Name?

A
The ClearPass servers are placed in different OnGuard zones to allow the client agent to send SHV updates.
B
Using the same certificate to Onboard clients and the Guest Captive Portal on a single ClearPass server.
C
The primary authentication server Is not available to authenticate the users.
D
The ClearPass server will be hosting captive portal pages for multiple FQDN entries

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

Refer to the exhibit:

You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password.
Using the screenshots as a reference, how would you fix this issue?

A
Check the network settings for the correct SSID name spelling.
B
Change the network settings to use EAP-TLS for the authentication protocol.
C
Install a public signed HTTPs web server certificate on the ClearPass server.
D
Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method.

Reveal answer details Close answer details

Correct answerA

Question 8

Single choice

Refer to the exhibit:

After the helpdesk revoked the certificate of a device reported to be lost oy an employee, the lost device was seen as connected successfully to the secure network. Further testing has shown that device revocation is not working.

What steps should you follow to make device revocations work?

A
Copy the default [EAP-TLS with OSCP Enabled] authentication method and set The Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA.
Remove EAP-TLS and map the custom created method to the OnBoard Authorization Service.
B
copy the default [EAP-TLS with OSCP Enabled] authentication method and set the verify certificate using OSCP: option as "required" then configure the correct OSCF URL link for the OnBoard CA.
Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the 802 1X Radius Service.
C
Remove the EAP-TLS authentication method configuration changes are required and add "EAP-TLS with OCSP Enabled" authentication method in the OnBoard Provisioning service.
No other configuration changes are required.
D
Edit the default [EAP-TLS with OSCP Enabled] authentication method and set the Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the OnBoard Provisioning Service.

Reveal answer details Close answer details

Correct answerC

Question 9

Single choice

You have configured a Guest SSID with Captive-portal Web Authentication and MAC authentication.
The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours.

What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

A
The client will tail the MAC authentication and be denied access to the Guest SSID.
B
The client will successfully pass the mac authentication until the mac caching time expires.
C
The client will successfully pass the MAC authentication but still be redirected to captive portal page.
D
The client will fail the MAC authentication and will be redirected to the Captive-portal login page.

Reveal answer details Close answer details

Correct answerC

VOL	TYPE	QUESTIONS
1	Single choice	7
2	Multiple choice	2

Free HPE6-A77 Exam Dumps Preview

Aruba Certified ClearPass Expert Written

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9