HPE6-A68 Online Practice Questions and Answers

Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Select two.)

A. Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

B. Configure a RADIUS Enforcement Profile on ClearPass for the desired privilege level.

C. Configure ClearPass as an Authentication server on the network device.

D. Configure ClearPass roles on the network device.

E. Enable RADIUS accounting on the NAD.

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed. What is the Address field value `securelogin.arubanetworks.com' used for?

A. for ClearPass to send a TACACS+ request to the NAD

B. for appending to the Web Login URL, before the page name

C. for the client to POST the user credentials to the NAD

D. for ClearPass to send a RADIUS request to the NAD

E. for appending to the Web Login URL, after the page name.

When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

A. Endpoints repository

B. Onboard Device repository

C. MDM repository

D. Guest User repository

E. Local User repository

Refer to the exhibit.

Which statements accurately describe the cp82 ClearPass node? (Select two.)

A. It becomes the Publisher when the primary Publisher fails.

B. It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

C. It operates as a Publisher in a separate cluster when the Publisher is active.

D. It operates as a Subscriber when the Publisher is active.

E. It stays as a Subscriber when the Publisher fails.

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

A. Static IP addresses are only allowed on the management port.

B. Configuration of the data port is mandatory.

C. Configuration on the management port is mandatory.

D. Configuration of the data port if optional.

E. Configuration of the management port is optional.

Refer to the exhibit.

Based on the configuration for `maximum devices' shown, which statement accurately describes its settings?

A. The user cannot Onboard any devices.

B. It limits the total number of devices that can be provisioned by ClearPass.

C. It limits the total number of Onboarded devices connected to the network.

D. It limits the number of devices that a single user can Onboard.

E. It limits the number of devices that a single user can connect to the network.

Refer to the exhibit.

Under which circumstances will ClearPass select the Policy Service named `Test device group'?

A. when the NAD belongs to an Airware device group HQ

B. when the ClearPass IP address is part of the device group HQ

C. when the Aruba access point that the client is associated to is part of the device group HQ

D. when an end user IP address is part of the device group HQ

E. when the IP address of the NAD is part of the device group HQ

Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting `Validate server certificate'?

A. The server and client will perform an HTTPS SSL certificate exchange.

B. The client will verify the server certificate against a trusted CA.

C. The client will send its private key to the server for verification.

D. The server will send its private key to the client for verification.

E. The client will send its certificate to the server for verification.

Refer to the exhibit.

Which types of records will the report shown display?

A. all RADIUS authentications from the 10.8.10.100 NAD to ClearPass

B. all failed RADIUS authentications through ClearPass

C. only Windows devices that have authenticated through the 10.8.10.100 NAD

D. all successful RADIUS authentications through ClearPass

E. all successful RADIUS authentications from the 10.8.10.100 NAD to ClearPass

Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

A. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

B. The device will be disconnected from and reconnected to the network after Onboarding is completed.

C. The device's onboard authorization request will be denied.

D. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP- TLS authentication is performed.

E. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.