HPE6-A15 Online Practice Questions and Answers

DRAG DROP

Use the arrows to soft the steps to request a Policy on the left into the order they are performed on the right.

Select and Place:

Refer to the exhibit.

Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

A. If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

B. If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

C. If the user is not found in the local user repository a reject message is sent back to the NAD.

D. If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

E. If the user is not found in the local user repository a timeout message is sent back to the NAD.

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.

How should the service be set up in the Policy Manager for this network?

A. Guest User Repository and Active Directory server both as authentication sources

B. Active Directory server as the authentication source, and Guest User Repository as the authorization source

C. Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

D. either the Guest User Repository or Active Directory server should be the single authentication source

E. Guest User Repository as the authentication source and the Active Directory server as the authorization source

Refer to the exhibit.

Based on the information shown, what is the purpose of using [Time Source] for authorization?

A. to check whether the MAC address status is unknown in the endpoints table

B. to check whether the MAC address is in the MAC Caching repository

C. to check how long it has been since the last web login authentication

D. to check whether the MAC address status is known in the endpoint table.

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

A. Static IP addresses are only allowed on the management port.

B. Configuration of the data port is mandatory.

C. Configuration on the management port is mandatory.

D. Configuration of the data port if optional.

E. Configuration of the management port is optional.

An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network. How many licenses does the employee consume?

A. 1 Policy Manager license, 2 Guest Licenses

B. 2 Policy Manager licenses, 1 Onboard License

C. 1 Policy Manager license, 1 Onboard License

D. 1 Policy Manager license, 1 Guest License

E. 2 Policy Manager licenses, 2 Onboard Licenses

Refer to the exhibit.

An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ. Which role is assigned to the user in ClearPass?

A. HR Local

B. [Guest]

C. [Employee]

D. Linux User

E. Executive

Refer to the exhibit.

Which statement accurately reflects the status of the Policy Simulation test figure shown?

A. The test verifies that a client with username test1 can authenticate using EAP-PEAP.

B. Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

C. Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

D. The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

E. The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

What does a Windows client need for it to perform EAS-PEAP successfully when `Validate server Certificate' is not enabled?

A. Pre-shared key

B. Client Certificate

C. WPA2-PSK

D. Username and Password

E. Server Certificate

Refer to the exhibit.

Based on the Aruba TACACS+ dictionary shown, how is the Aruba-Role attribute used?

A. The Aruba-Admin-Role on the controller is applies to users using TACACS+ to login to the Policy Manager

B. To assign different privileges to clients during 802.1X authentication

C. To assign different privileges to administrators logging into an Aruba NAD

D. It is used by ClearPass to assign TIPS roles to clients during 802.1X authentication

E. To assign different privileges to administrators logging into ClearPass