Refer to the exhibit. Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

The attribute values of department and memberOf are directly applied as ClearPass roles.

Only the attribute values of department and memberOf can be used in role mapping policies.

The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.

Only the attribute value of company can be used in role mapping policies, not the other attributes.

The attribute values of department and memberOf are directly applied as ClearPass roles.

Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

Refer to the exhibit. Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

If the user is not found in the local user repository a reject message is sent back to the NAD.

If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

If the user is not found in the local user repository a timeout message is sent back to the NAD.

Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device?(Select two.)

Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

Configure ClearPass as an Authentication server on the network device.

Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

Configure a RADIUS Enforcement Profile on ClearPass for the desired privilege level.

Configure ClearPass as an Authentication server on the network device.

Configure ClearPass roles on the network device.

Enable RADIUS accounting on the NAD.

What are Operator Profiles used for?

to enforce role based access control for ClearPass Guest Admin users

to enforce role based access control for Aruba Controllers

to enforce role based access control for ClearPass Policy Manager admin users

to enforce role based access control for ClearPass Guest Admin users

to assign ClearPass roles to guest users

to map AD attributes to admin privilege levels in ClearPass Guest

Refer to the exhibit. In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

to send information via RADIUS packets to clients

to send information via RADIUS packets to Aruba NADs

to gather and send Aruba NAD information to ClearPass

to send information via RADIUS packets to clients

to gather information about Aruba NADs for ClearPass

to send CoA packets from ClearPass to the Aruba NAD

Refer to the exhibit. Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?

to assign Controller roles to guests

to display a role name on the Self-registration receipt page

to send a firewall role back to the controller based on the Guest User's Role ID

to assign Controller roles to guests

to assign three roles of [Contractor], [Guest] and [Employee] to every guest user

to create additional account roles for guest administrators to assign to guest accounts

A customer wants all guests who access a company's guest network to have their accounts approved by the receptionist, before they are given access to the network.How should the network administrator set this up in ClearPass? (Select two.)

Enable sponsor approval confirmation in Receipt actions.

Configure a MAC auth service in the Policy Manager.

Enable sponsor approval confirmation in Receipt actions.

Configure SMTP messaging in the Policy Manager.

Configure a MAC caching service in the Policy Manager.

Configure a MAC auth service in the Policy Manager.

Enable sponsor approval in the captive portal authentication profile on the NAD.

Refer to the exhibit. When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.What is the page name field used for?

for forming the Web Login Page URL

for Administrators to access the PHP page, but not guests

for Administrators to reference the page only

for forming the Web Login Page URL where Administrators add guest users

for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.

Refer to the exhibit. When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.What is the Address field value 'securelogin.arubanetworks.com' used for?

for the client to POST the user credentials to the NAD

for ClearPass to send a TACACS+ request to the NAD

for appending to the Web Login URL, before the page name

for the client to POST the user credentials to the NAD

for ClearPass to send a RADIUS request to the NAD

for appending to the Web Login URL, after the page name.

Refer to the exhibit. A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page.Based on the MAC Caching service information shown, which statement about the guests' MAC address is accurate?

It will be visible in the Endpoints table with Known Status.

It will be visible in the Guest User Repository with Unknown Status

It will be deleted from the Endpoint table.

It will be visible in the Guest User Repository with Known Status.

It will be visible in the Endpoints table with Known Status.

It will be visible in the Endpoints table with Unknown Status.

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.How should the service be set up in the Policy Manager for this network?

Guest User Repository and Active Directory server both as authentication sources

Active Directory server as the authentication source, and Guest User Repository as the authorization source

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

Either the Guest User Repository or Active Directory server should be the single authentication source

Guest User Repository as the authentication source and the Active Directory server as the authorization source

An administrator enabled the Pre-auth check for their guest self-registration.At what stage in the registration process in this check performed?

after the user clicks the login button but before the NAD sends an authentication request

after the user clicks the login button and after the NAD sends an authentication request

after the user self-registers but before the user logs in

after the user clicks the login button but before the NAD sends an authentication request

when a user is re-authenticating to the network

Refer to the exhibit. Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an email request sent to the sponsor?

after 'Automated NAS login (6)'

Refer to the exhibit. A user logged in to the Self-Service Portal as shown.What do the traffic received and sent statistics present?

These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass.

These show the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.

These show the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the client to ClearPass.

These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

Refer to the exhibit. Based on the configuration of the create_user form shown, which statement accurately describes the status?

The email field will be visible to guest users when they access the web login page.

The visitor_company field will be visible to operators creating the account.

The visitor_company field will be visible to the guest users when they access the web login page.

The visitor_phone field will be visible to the guest users in the web login page.

The visitor_phone field will be visible to operators creating the account.

A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.What are the likely causes of this? (Select two.)

The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.

The DNS server is not replying with an IP address for www.google.com.

The ClearPass server has a trusted server certificate issued by Verisign.

The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.

The ClearPass server does not recognize the client's certificate.

The DNS server is not replying with an IP address for www.google.com.

Refer to the exhibit. An Enforcement Profile has been created in the Policy Manager as shown.Which action will ClearPass take based on this Enforcement Profile?

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the user to end the user's session after this time is up.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user's session after this time is up.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.

Refer to the exhibit. Based on the information shown, what is the purpose of using [Time Source] for authorization?

to check whether the MAC address status is known in the endpoints table

to check how long it has been since the last login authentication

to check whether the guest account expired

to check whether the MAC address is in the MAC Caching repository

to check whether the MAC address status is known in the endpoints table

to check whether the MAC address status is unknown in the endpoints table

A customer with an Aruba Controller wants it to work with ClearPass Guest.How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

Add ClearPass as a RADIUS authentication server.

Add ClearPass as a RADIUS CoA server.

Add ClearPass as a RADIUS authentication server.

Add ClearPass as a TACACS+ authentication server.

Add ClearPass as an HTTPS authentication server.

Refer to the exhibit. Based on the Access Tracker output for the user shown, which statement describes the status?

A Healthy Posture Token was sent to the Policy Manager.

The Aruba Terminate Session enforcement profile as applied because the posture check failed.

A Healthy Posture Token was sent to the Policy Manager.

A RADIUS-Access-Accept message is sent back to the Network Access Device.

The authentication method used is EAP-PEAP.

A NAP agent was used to obtain the posture token for the user.

Why can the Onguard posture check not be performed during 802.1x authentication?

Onguard uses HTTPS, so an additional service must be created.

Health Checks cannot be used with 802.1x.

Onguard uses RADIUS, so an additional service must be created.

Onguard uses HTTPS, so an additional service must be created.

Onguard uses TACACS, so an additional service must be created.

802.1x is already secure, so Onguard is not needed.

Refer to the exhibit. Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

A message is sent to the Onguard Agent on the client device.

A limited access VLAN value is sent to the Network Access Device.

An unhealthy role value is sent to the Network Access Device.

A message is sent to the Onguard Agent on the client device.

A RADIUS CoA message is sent to bounce the client.

A RADIUS access-accept message is sent to the Controller

An SNMP probe is sent from ClearPass to a network access device, but ClearPass is unable to obtain profiling information.What are likely causes? (Select three.)

An external firewall is blocking SNMP traffic.

SNMP is not enabled on the NAD.

SNMP community string in the ClearPass and NAD configuration is mismatched.

Only SNMP read has been configured but SNMP write is needed for profiling information.

An external firewall is blocking SNMP traffic.

SNMP is not enabled on the NAD.

SNMP community string in the ClearPass and NAD configuration is mismatched.

SNMP probing is not supported between ClearPass and NADs.

Refer to the exhibit. Which statements accurately describe the cp82 ClearPass node? (Select two.)

It becomes the Publisher when the primary Publisher fails.

It operates as a Subscriber when the Publisher is active.

It becomes the Publisher when the primary Publisher fails.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

It operates as a Publisher in a separate cluster when the Publisher is active.

It operates as a Subscriber when the Publisher is active.

It stays as a Subscriber when the Publisher fails.

Refer to the exhibit. A customer wants to enable Publisher redundancy.Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

Subscriber in the main data center

Publisher in the regional office

Any of the other three Publishers

Publisher in the mid-size branch

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.Which statements accurately describe next steps? (Select two.)

The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

A new Virtual IP address should be created for each NAD.

Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.What will be the outcome of this state?

RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.

During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.

RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.

RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Configuration on the management port is mandatory.

Configuration of the data port if optional.

Static IP addresses are only allowed on the management port.

Configuration of the data port is mandatory.

Configuration on the management port is mandatory.

Configuration of the data port if optional.

Configuration of the management port is optional.

HP HPE6-A68 Practice Test 1 - Free Online Exam Questions 1-40

Refer to the exhibit.

HP HPE6-A68 image Question 1 14135 09162024180625000000

An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X.

Which role is assigned to the user in ClearPass?

A.

HR Local

B.

Remote Employee

C.

[Guest]

D.

Executive

E.

IOS Device

HP HPE6-A68 Practice Test 1

Question

HP HPE6-A68 Practice Tests

Practice Tests