HPE6-A15 Online Practice Questions and Answers

Refer to the exhibit.

Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

A. Only the attribute values of department and memberOf can be used in role mapping policies.

B. The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.

C. Only the attribute value of company can be used in role mapping policies, not the other attributes.

D. The attribute values of department and memberOf are directly applied as ClearPass roles.

E. Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

Refer to the exhibit.

Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

A. If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

B. If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

C. If the user is not found in the local user repository a reject message is sent back to the NAD.

D. If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

E. If the user is not found in the local user repository a timeout message is sent back to the NAD.

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.

How should the service be set up in the Policy Manager for this network?

A. Guest User Repository and Active Directory server both as authentication sources

B. Active Directory server as the authentication source, and Guest User Repository as the authorization source

C. Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

D. either the Guest User Repository or Active Directory server should be the single authentication source

E. Guest User Repository as the authentication source and the Active Directory server as the authorization source

A customer with an Aruba Controller wants it to work with ClearPass Guest.

How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

A. Add ClearPass as a RADIUS CoA server.

B. Add ClearPass as a RADIUS authentication server.

C. Add ClearPass as a TACACS+ authentication server.

D. Add ClearPass as an HTTPS authentication server.

When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

A. Endpoints repository

B. Onboard Device repository

C. MDM repository

D. Guest User repository

E. Local User repository

Refer to the exhibit.

Which statements accurately describe the cp82 ClearPass node? (Select two.)

A. It becomes the Publisher when the primary Publisher fails.

B. It operated as a Publisher in the same cluster as the primary Publisher when the primary is active.

C. It operated as a Publisher in a separate cluster when the Publisher is active.

D. It operates as a Subscriber when the Publisher is active.

E. It stays as a Subscriber when the Publisher fails.

An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop. Which licenses are consumed in this scenario?

A. 1 Policy Manager license, 1 Onboard License

B. 2 Policy Manager licenses, 1 Onguard License

C. 1 Policy Manager license, 1 Profile License

D. 2 Policy Manager licenses, 2 Onguard licenses

E. 1 Policy Manager license, 1 Onguard License

Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

A. when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

B. when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

C. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

D. when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

E. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

Which collectors can be used for device profiling? (Select two.)

A. Username and Password

B. ActiveSync Plugin

C. Client's role on the controller

D. Onguard agent

E. Active Directory Attributes

Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

A. Full Access VLAN

B. Employee VLAN

C. Internet VLAN

D. Deny Access