Which licenses are included in the built-in Starter kit for ClearPass?

25 ClearPass Enterprise licenses

10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

25 ClearPass Enterprise licenses

10 ClearPass Enterprise licenses

25 ClearPass Redundancy licenses

An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network.How many licenses does the employee consume?

2 Policy Manager licenses, 1 Onboard License

1 Policy Manager license, 2 Guest Licenses

2 Policy Manager licenses, 1 Onboard License

1 Policy Manager license, 1 Onboard License

1 Policy Manager license, 1 Guest License

2 Policy Manager licenses, 2 Onboard Licenses

A customer would like to deploy ClearPass with these requirements: every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS every Friday, a meeting with business partners takes place and an additional 50 devices need to authenticate using Web Login Guest Authentication What should the customer do regarding licenses? (Select two.)

When counting policy manager licenses, include the additional 50 business partner devices.

When counting policy manager licenses, exclude the additional 50 business partner devices.

An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop.Which licenses are consumed in this scenario?

1 Policy Manager license, 1 Onguard License

1 Policy Manager license, 1 Onboard License

2 Policy Manager licenses, 1 Onguard License

1 Policy Manager license, 1 Profile License

2 Policy Manager licenses, 2 Onguard licenses

1 Policy Manager license, 1 Onguard License

A customer would like to deploy ClearPass with these requirements: between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS should allow for up to 1000 employee devices to be Onboarded should allow up to 100 guest users each day to authenticate using the web login feature What is the license mix that customer will need to purchase?

CP-HW-2k, 1000 Onboard, 100 Guest

CP-HW-500, 1000 Onboard, 100 Guest

CP-HW-5k, 100 Onboard, 100 Guest

Refer to the exhibit. Based on the ClearPass and Aruba Controller configuration settings for Onboarding shown, which statement accurately describes an employee's new personal device connecting to the Onboarding network? (Select two.)

Pre-Onboarding, the device will be redirected to the 'Onboarding Page' Captive Portal.

Pre-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

Post-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

Pre-Onboarding, the device will be redirected to the 'Onboarding Page' Captive Portal.

The BYOD-Provision role is a ClearPass internal role and exists in ClearPass.

The device will not be redirected to any Onboarding page.

Pre-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

An Android device goes through the single-SSID Onboarding process and successfully connects using EAP-TLS to the secure network.What is the order in which services are triggered?

Onboard Provisioning, Onboard Authorization, Onboard Provisioning

Onboard Authorization, Onboard Provisioning, Onboard Authorization

Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization, Onboard Provisioning

Onboard Provisioning, Onboard Authorization, Onboard Pre-Auth

Onboard Provisioning, Onboard Authorization, Onboard Provisioning

Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization

What is the certificate format PKCS #7, or .p7b, used for?

Binary encoded X.509 certificate

Binary encoded X.509 certificate with public key

Certificate with an encrypted private key

Refer to the exhibit. Based on the configuration for 'maximum devices' shown, which statement accurately describes its settings?

It limits the number of devices that a single user can Onboard.

The user cannot Onboard any devices.

It limits the total number of devices that can be provisioned by ClearPass.

It limits the total number of Onboarded devices connected to the network.

It limits the number of devices that a single user can Onboard.

It limits the number of devices that a single user can connect to the network.

Refer to the exhibit. Based on the Enforcement Policy configuration shown, which Enforcement Profile will an employee receive when connecting an IOS device to the network or the first time using EAP-PEAP?

Onboard Pre-Provisioning – Aruba

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Refer to the exhibit. An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS.Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Refer to the exhibit. What is the purpose of the 'Clock Skew Allowance' setting? (Select two.)

to ensure client certificate validation does not fail due to client clock sync issues

to ensure server certificate validation does not fail due to client clock sync issues

to set start time in client certificate to a few minutes before current time

to adjust clock time on client device to a few minutes before current time

to ensure client certificate validation does not fail due to client clock sync issues

to set expiry time in client certificate to a few minutes longer than the default setting

Refer to the exhibit. Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

The user cannot Onboard their device again

EAP-TLS Authentication will fail

EAP-TLS Authentication will be unaffected

The user can Onboard their device again

A new device certificate will be automatically pushed out to the device

The user cannot Onboard their device again

EAP-TLS Authentication will fail

Refer to the exhibit. Based on the configuration for the client's certificate private key as shown, which statements accurately describe the settings? (Select two.)

The private key is stored in the user device.

More bits in the private key will increase security.

The private key is stored in the ClearPass server.

The private key is stored in the user device.

The private key for TLS client certificates is not created.

More bits in the private key will increase security.

More bits in the private key will reduce security.

What does Authorization allow users to do in a Policy Service?

To use attributes in databases in role mapping and Enforcement.

To use attributes stored in databases in Enforcement only, but not role mapping.

To use attributes stored in external databases for Enforcement, but not internal databases.

To use attributes stored in databases in role mapping only, but not Enforcement.

To use attributes sored in internal databases for Enforcement, but not external databases.

Refer to the exhibit. Under which circumstances will ClearPass select the Policy Service named 'Test device group'?

when the IP address of the NAD is part of the device group HQ

when the NAD belongs to an Airware device group HQ

when the ClearPass IP address is part of the device group HQ

when the Aruba access point that the client is associated to is part of the device group HQ

when an end user IP address is part of the device group HQ

when the IP address of the NAD is part of the device group HQ

Refer to the exhibit. The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.What is the cause of this error?

The controller used an incorrect shared secret for the RADIUS authentication.

The controller's shared secret used during the certificate exchange is incorrect.

The NAS source interface IP is incorrect.

The client sent an incorrect shared secret for the 802.1X authentication.

The controller used an incorrect shared secret for the RADIUS authentication.

The client's shared secret used during the certificate exchange is incorrect.

Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

Device fingerprint dictionaries

Refer to the exhibit. What information can be drawn from the audit row detail shown? (Select two.)

radius01 was deleted from the list of authentication sources.

The policy service was moved to position number 4.

radius01 was deleted from the list of authentication sources.

The policy service was moved to position number 4.

radius01 was moved to position number 4.

The policy service was moved to position number 3.

raduis01 was added as an authentication source.

Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

the ClearPass server must have the network device added as a valid NAD

a matching shared secret must be configured on both the ClearPass server and NAD

the ClearPass server must have the network device added as a valid NAD

the ClearPass server certificate must be installed on the NAD

a matching shared secret must be configured on both the ClearPass server and NAD

an NTP server needs to be set up on the NAD

a bind username and bind password must be provided

Refer to the exhibit. An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.What is a possible reason for the ErrorCode 'Failed to classify request to service' shown?

ClearPass service rules were not configured correctly.

The user failed authentication due to an incorrect password.

ClearPass could not match the authentication request to a service, but the user passed authentication.

ClearPass service authentication sources were not configured correctly.

The NAD did not send the authentication request.

ClearPass service rules were not configured correctly.

What is the purpose of RADIUS CoA (RFC 3576)?

to transmit messages to the NAD/NAS to modify a user's session status

to force the client to re-authenticate upon roaming to a new Controller

to apply firewall policies based on authentication credentials

to validate a host MAC address against a whitelist or a blacklist

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user's session status

Refer to the exhibit. Which statement accurately reflects the status of the Policy Simulation test figure shown?

The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

The test verifies that a client with username test1 can authenticate using EAP-PEAP.

Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

to display changes made to the ClearPass configuration

to audit client authentications

to display changes made to the ClearPass configuration

to display the entire configuration of the ClearPass Policy Manager

to audit the network for PCI compliance

to display system events like high CPU usage.

Refer to the exhibit. Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting 'Validate server certificate'?

The client will verify the server certificate against a trusted CA.

The server and client will perform an HTTPS SSL certificate exchange.

The client will verify the server certificate against a trusted CA.

The client will send its private key to the server for verification.

The server will send its private key to the client for verification.

The client will send its certificate to the server for verification.

Refer to the exhibit. Which types of records will the report shown display?

all RADIUS authentications from the 10.8.10.100 NAD to ClearPass

all failed RADIUS authentications through ClearPass

only Windows devices that have authenticated through the 10.8.10.100 NAD

all successful RADIUS authentications through ClearPass

all successful RADIUS authentications from the 10.8.10.100 NAD to ClearPass

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Configuration of the management port is mandatory.

Configuration of the data port is optional.

Configuration of the management port is optional.

Configuration of the management port is mandatory.

Configuration of the data port is mandatory.

Configuration of the data port is optional.

Static IP addresses are only allowed on the management port, not the data port.

What is a benefit of ClearPass Onguard?

It enables organizations to run advanced endpoint posture assessments.

It allows a receptionist in a hotel to create accounts for guest users.

It allows employees to self-provision their personal devices on the corporate network.

It offers an easy way for users to self-configure their devices to support 802.1X authentication on wired and wireless networks.

It allows employees to create temporary accounts for Wi-Fi access.

A guest self-registered through a Publisher's Register page.Which statement accurately describes how the guest's account will be stored?

It will be stored in both the Publisher's guest user repository and the Subscriber's guest user repository.

It will be stored in the Publisher's guest user repository and the Subscriber's Onboard user repository.

It will be stored in the Publisher's local user repository and the Subscriber's guest user repository.

It will be stored in the Publisher's guest user repository permanently, but only for 14 days in the Subscriber's guest user repository,

It will be stored in both the Publisher's guest user repository and the Subscriber's guest user repository.

It will be stored in the Publisher's guest user repository, but not the Subscriber's.

Which collectors can be used for device profiling? (Select two.)

Client's role on the controller

HP HPE6-A68 Practice Test 2 - Free Online Exam Questions 41-80

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

HP HPE6-A68 Practice Test 2

Question

HP HPE6-A68 Practice Tests

Practice Tests