Free HPE6-A81 Exam Dumps PDF Preview

Question 1

Multiple choice

Refer to the exhibit:

A customer has configured Onboard and Windows devices work as expected but cannot get the Apple iOS devices to Onboard successfully. Where would you look to troubleshoot the Issued (Select two)

A
Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority.
B
Check if the customer installed the internal PKl Root certificate presented by the ClearPass during the provisioning process.
C
Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
D
Check if the customer has Instated a custom HTTPS certificate for IDS and another internal PKl HTTPS certificate for other devices.
E
Check if the customer has installed the same internal PKl signed RADIUS server certificate as the HTTPS server certificate.

Reveal answer details Close answer details

Correct answersA, C

Question 2

Single choice

There is an Aruba Controller configured to send Guest AAA requests to ClearPass.
If the customer would like the most effective way to ensure the lowest license usage counts, how should the controller be configured?

A
Aruba Controller will send stop messages only if EAP termination and Interim accounting are enabled.
B
Aruba Controller will send stop messages if RADIUS Accounting Server Group is defined in the authentication profile.
C
Aruba Controller will send stop messages only if both accounting and interim accounting are enabled.
D
Configure EAP Termination on the Aruba Controller and the client will send a stop message.

Reveal answer details Close answer details

Correct answerD

Question 3

Single choice

What is the Secure SSID {otherwise referred to as Single SSID) OnBoard deployment service workflow?

A
OnBoard Provisioning RADIUS service, OnBoard Authorization RADIUS service. OnBoard Pre-Auth
Application service, OnBoard Provisioning RADIUS service
B
OnBoard Provisioning RADIUS service, OnBoard Pre-Auth RADIUS service, OnBoard Authorization
Application service. OnBoard Provisioning RADIUS service
C
OnBoard Provisioning RADIUS service, OnBoard Pre-Auth Application service. OnBoard Authorization
Application service, OnBoard Provisioning RADIUS service
D
OnBoard Provisioning RADIUS service, OnBoard Authorization Application service, OnBoard Pre-Auth
Application service, OnBoard Provisioning RADIUS service

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

You have integrated ClearPass Onboard with Active Directory Certificate Services (ADCS) web enrollment to sign the final device TLS certificates. The customer would also like to use ADCS for centralized management of TLS certificates including expiration, revocation, and deletion through ADCS.

What steps will you follow to complete the requirement?

A
Remove the EAP-TLS authentication method and add "EAP-TLS with OCSP Enabled' authentication method in the OnBoard Provisioning service. No other configuration changes are required.
B
Copy the [EAP-TLS with OSCP Enabled) authentication method and set the correct ADCS server
OCSP URL, remove EAP-TLS and map the custom created method to the Onboard Provisioning Service.
C
Copy the default [EAP-TLS with OSCP Enabled] authentication method and update the correct ADCS server OCSP URL. remove EAP-TLS and map the custom created method to the OnBoard Authorization Service.
D
Edit the [EAP-TLS with OSCP Enabled) authentication method and set the correct ADCS server OCSP URL. remove EAP-TLS and map the [EAP-TLS with OSCP Enabled) method to the Onboard Provisioning Service.

Reveal answer details Close answer details

Correct answerA

Question 5

Multiple choice

What type of EAP certificate are you able to use on ClearPass? (Select two.)

A
Self signed, when all the clients are Onboarded with the same Root CA as the Self signed certificate.
B
Private signed, when the clients are onboarded or are part of the organization domain.
C
Private signed, when some clients are onboarded and some are not part of the organization.
D
Public signed, when not all of the clients are part of the organization domain.
E
Self signed, when all the clients are part of the organization domain.

Reveal answer details Close answer details

Correct answersC, D

Question 6

Single choice

A customer has completed all the required configurations in the Windows server in order for Active Directory Certificate Services (ADCS) to sign Onboard device TLS certificates. The Onboard portal and the Onboard services are also configured. Testing shows that the Client certificates ate still signed by the Onboard Certificate Authority and not ADCS.

How can you help the customer with the situation?

A
Educate the customer that, when integrating with Active Directory Certificate Services (ADCS) the Onboard CA will the same authority used for signing me final TLS certificate of the device.
B
Configure the identity certificate signer as Active Directory Certificate Services and enter the ADCS URL http://ADCSVVeoEnrollmentServemostname/certsrv in the OnBoard Provisioning settings.
C
Enable access to EST servers from the Certificate Authority to make ClearPass Onboard to use of the Active Directory Certificate Services (ADCS) web enrollment to sign the device TLS certificates.
D
Enable access to SCEP servers from the Certificate Authority to make ClearPass Onboard to use of the Active Directory Certificate Services (ADCS) web enrollment to sign the device TLS certificates.

Reveal answer details Close answer details

Correct answerC

Question 7

Multiple choice

You are deploying ClearPass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers.
The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.

What is the most efficient way to configure the customers guest solution? (Select two.)

A
Build multiple Web Login pages with vendor settings configured for each controller
B
Install the same public certificate on all Controllers with the common name "controller {company
domain}"
C
Build one Web Login page with vendor settings for controller {company domain)
D
Install multiple public certificates with a different Common Name on each controller

Reveal answer details Close answer details

Correct answersA, B

Question 8

Multiple choice

Refer to the exhibit:

The customer configured an 802.1x service with different enforcement actions for personal and corporate laptops. The corporate laptops are always being redirected to the BYOD Portal. The customer has sent you the above screenshots.

How would you resolve the issue? (Select two)

A
Modify the enforcement policy and change the rule evaluation algorithm to select first match
B
Modify the enforcement policy and re-order the condition with posture not_equals to healthy as the sixth condition
C
Modify the enforcement policy and re-order the EAP-PEAP with [user authenticated] rule to the last condition.
D
Modify the enforcement policy and re-order the condition with Posture - Unknown as the fifth condition
E
Remove the EAP-PEAP with [user authenticated] condition for Onboard and create another service

Reveal answer details Close answer details

Correct answersC, D

Question 9

Multiple choice

A customer is complaining that some of the devices, in their manufacturing network, are not getting profiled while other loT devices from the same subnet have been correctly profiled. The network switches have been configured for DHCP IP helpers and IF-MAP has been configured on the Aruba Controllers.

What can the customer do to discover those devices as well? (Select two.)

A
Update the Fingerprints Dictionary to the latest in case new devices have been added.
B
Open a TAC case to help you troubleshoot the DHCP device profile functionality.
C
Add the ClearPass Server IP as an IP helper address on the default gateway as well.
D
Allow time for IF-MAP service on the controller to discover the new devices as well.
E
Manually create a new device fingerprint for the devices that are not being profiled.

Reveal answer details Close answer details

Correct answersD, E

VOL	TYPE	QUESTIONS
1	Single choice	4
2	Multiple choice	5

Free HPE6-A81 Exam Dumps Preview

Aruba Certified ClearPass Expert Written

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9