HPE6-A82 Online Practice Questions and Answers

DRAG DROP

Match the ClearPass system description to the best term. Options are used only once.

Select and Place:

Refer to the exhibit.

Where will the guests browser be redirected during a captive portal login attempt?

A. The redirect will time out and fail to resolve.

B. The captive portal page hosted on Aruba Central in the cloud.

C. The captive portal page hosted on the Aruba controller.

D. The captive portal page hosted on ClearPass.

A customer is setting up Guest access with ClearPass. They are considering using 802.1X for both the Employee network and the Guest network.

What are two issues the customer may encounter when deploying 802.1X with the Guest network? (Choose two.)

A. ClearPass will not be able to enforce individual Access Control policies.

B. difficult to maintain in an environment with a large number of transient guest users.

C. the lack of encryption during the authentication process.

D. Guests will not be able to be uniquely identified.

E. the high level of complexity for users to join the guest network.

What is a function of the posture token in ClearPass OnGuard? (Choose two.)

A. Identifies clients that are not security compliant.

B. Initiates the Auto-Remediation process.

C. Indicates the Health Status of the Client.

D. Denies access to unhealthy clients.

E. Controls access to network resources.

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

A. When you want to match Active Directory attributes directly to an enforcement policy.

B. When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device.

C. When you want to translate and combine Active Directory attributes into ClearPass roles.

D. When you want to enable attributes as roles directly without combining multiple attributes.

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

A. Client attempts will fail without an additional Authentication method applied.

B. All clients with unknown endpoints will be granted guest access regardless of authorization.

C. All clients with known endpoints will be granted guest access regardless of authorization.

D. This removes the reliance on the known or unknown status for MAC authentication.

Refer to the exhibit.

A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server.

Based on this service configuration, which service will be triggered?

A. No service will be triggered

B. Service Three

C. Service Two

D. Service One

Which two are required to add a Network Access Device (NAD) into ClearPass? (Choose two.)

A. HTTPS certificate

B. NAD IP address

C. ClearPass Admin login credentials

D. Shared Secret

E. SSH password

Which are valid enforcement profile types? (Choose two.)

A. ClearPass Entity Update Enforcement

B. Aruba Script Enforcement

C. Policy Service Enforcement

D. RADIUS Change of Authorization (CoA)

Which option supports DHCP profiling for devices in a network?

A. configuring ClearPass as a DHCP relay for the client

B. DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary

C. enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

D. enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

A customer with 677 employees would like to authenticate employees using a captive portal guest web login page. Employees should use their AD credentials to login on this page.

Which statement is true?

A. The customer needs to add second guest service in the policy manager for the guest network.

B. The customer needs to add the AD server as an authentication source in a guest service.

C. Employees must be taken to a separate web login page on the guest network.

D. The customer needs to add the AD servers RADIUS certificate to the guest network.

Which most accurately describes the "Select All Matches" rule evaluation algorithm in Enforcement Policies?

A. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.

B. All rules are checked, and if there is no match, no Enforcement profile is applied.

C. All rules are checked for any matching rules and their respective Enforcement profiles are applied.

D. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied, along with the default Enforcement profile.

An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again.

Which ClearPass features can be used to meet these requirements?

A. Guest access with MAC caching

B. Guest self-registration with sponsor approval

C. Enforcement based on endpoint profiling

D. ClearPass Onboard Portal

What is the benefit of installing a wild card certificate for captive portal authentication?

A. Wild card certificates provide greater security than normal certificates.

B. Allows different certificates for each controller for increased security.

C. Guests no longer are required to validate certificates during captive portal.

D. Allows the single wild card certificate to be installed on all controllers in the environment.

Which ClearPass fingerprint collectors are valid for active profiling of endpoints? (Choose two.)

A. HTTP user agents

B. IF-MAP

C. DHCP fingerprinting

D. NMAP

E. SNMP