ACCP-V6.2 Online Practice Questions and Answers

A customer would like to deploy ClearPass with the following objectives: Every day, 100 employees authenticate with their corporate laptops using EAP-TLS. Every Friday, there is a meeting with business partners and an additional 50 devices authenticate using Web Login Guest Authentication.

Which of the following is correct? (Choose 2)

A. When counting policy manager licenses, they need to include the additional 50 business partner devices

B. When counting policy manager licenses, they can exclude the additional 50 business partner devices

C. They should purchase guest licenses

D. They should purchase onboard licenses

E. They should purchase onguard licenses

Which of the following statements is true about the Endpoint Profiler? (Choose 2)

A. The Endpoint Profiler requires the Onboard license to be enabled.

B. The Endpoint Profiler uses DHCP fingerprinting for device categorization.

C. Data obtained from the Endpoint Profiler can be used in Enforcement Policy.

D. The Endpoint Profiler can only categorize laptops and desktops.

E. Endpoint Profiler requires a profiling license.

Which of the following components can use Active Directory authorization attributes for the decision-making process? (Choose 2)

A. Role Mapping Policy

B. Posture Policy

C. Enforcement Policy

D. Service Rules

If the "Alerts" tab in an authentication session details tab in Access Tracker shows the following error message "Access denied by policy", what could be a possible cause for authentication failure?

A. Implementation of an Enforcement Policy

B. Implementation of a firewall policy

C. Failure to categorize the request in a Clearpass service

D. Implementation of a Posture Policy

E. Failure to activate the enforcement policy

The screenshot here from the Event Viewer in ClearPass shows an error when a user does an EAP-TLS authentication to ClearPass through an Aruba Controller's Wireless Network.

What is the cause of this error?

A. The client has sent an incorrect shared secret for the 802.1X authentication.

B. The controller has sent an incorrect shared secret for the RADIUS authentication.

C. The client's shared secret used during the certificate exchange is incorrect.

D. The controller's shared secret used during the certificate exchange is incorrect.

E. The NAS source interface IP is incorrect.

Refer to the screenshot below: Based on the above configuration, which of the following statements is true?

A. The visitor_phone field will be visible to operator creating the account.

B. The visitor_phone field will be visible to the guest users in the web login page.

C. The visitor_company field will be visible to operator creating the account.

D. The visitor_company field will be visible to the guest users in the web login page.

E. The email field will be visible to guest users on the web login page.

What are these RADIUS attributes used for in the Aruba RADIUS dictionary shown here?

A. To send information via RADIUS packets to clients.

B. To send information via RADIUS packets to Aruba NADs.

C. To gather information about Aruba NADs for ClearPass.

D. To gather and send Aruba NAD information to ClearPass.

E. To send CoA packets from Clearpass to the Aruba NAD.

A report is configured as follows: What type of records will this report display?

A. All successful RADIUS authentications through ClearPass.

B. All failed RADIUS authentications through ClearPass.

C. All successful RADIUS authentications from the 10.8.10.100 NAD device to ClearPass.

D. All RADIUS authentications from the 10.8.10.100 NAD device to ClearPass.

Shown here is an Aruba Instant configuration screenshot What is the purpose of enabling the 'Dynamic RADIUS proxy' feature?

A. The Instant AP will proxy all RADIUS Access-Requests sent to it from clients and will forward these to ClearPass.

B. The Instant AP will send a RADIUS Access-Reject packet to other Instant APs in the cluster if credentials are incorrect, to reduce the number of RADIUS requests sent to ClearPass.

C. All Instant APs in the cluster will use the Virtual Controller IP as the Source IP for RADIUS requests.

D. All Instant APs in the cluster will use the Virtual Controller IP as the Destination IP for RADIUS requests.

E. The Instant AP will proxy all RADIUS Access-Requests sent to it from Clearpass and will forward these to the clients.

Which of the following statements is NOT true about the configuration of a generic LDAP server as an External Authentication Server in Clearpass?

A. The bind DN can be in the administrator@domain format.

B. The list of attributes fetched from an LDAP server can be customized.

C. An LDAP Browser can be used to search the Base DN.

D. Multiple LDAP servers cannot be configured as authentication sources.

E. Generic LDAP servers can be used as authentication sources.