HPE6-A68 Online Practice Questions and Answers

Refer to the exhibit.

An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

A. HR Local

B. Remote Employee

C. [Guest]

D. Executive

E. IOS Device

Which authorization servers are supported by ClearPass? (Select two.)

A. Aruba Controller

B. LDAP server

C. Cisco Controller

D. Active Directory

E. Aruba Mobility Access Switch

Refer to the exhibit.

Based on the Access Tracker output for the user shown, which statement describes the status?

A. The Aruba Terminate Session enforcement profile as applied because the posture check failed.

B. A Healthy Posture Token was sent to the Policy Manager.

C. A RADIUS-Access-Accept message is sent back to the Network Access Device.

D. The authentication method used is EAP-PEAP.

E. A NAP agent was used to obtain the posture token for the user.

Refer to the exhibit.

Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

A. A limited access VLAN value is sent to the Network Access Device.

B. An unhealthy role value is sent to the Network Access Device.

C. A message is sent to the Onguard Agent on the client device.

D. A RADIUS CoA message is sent to bounce the client.

E. A RADIUS access-accept message is sent to the Controller

Which licenses are included in the built-in Starter kit for ClearPass?

A. 10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

B. 25 ClearPass Profiler licenses

C. 25 ClearPass Enterprise licenses

D. 10 ClearPass Enterprise licenses

E. 25 ClearPass Redundancy licenses

Refer to the exhibit.

Under which circumstances will ClearPass select the Policy Service named `Test device group'?

A. when the NAD belongs to an Airware device group HQ

B. when the ClearPass IP address is part of the device group HQ

C. when the Aruba access point that the client is associated to is part of the device group HQ

D. when an end user IP address is part of the device group HQ

E. when the IP address of the NAD is part of the device group HQ

Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

A. DHCP server IP

B. Active Directory IP

C. Switch IP

D. Microsoft NPS server IP

E. ClearPass server IP

Refer to the exhibit.

An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD. Which roles are assigned to the user in ClearPass? (Select two.)

A. Executive

B. iOS Device

C. Vendor

D. Remote Employee

E. HR Local

Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome when `Automatically use my Windows logon name and password' are selected?

A. The client will use machine authentication.

B. The client's Windows login username and password will be sent inside a certificate to the Active Directory server.

C. The client's Windows login username and password will be sent to the Authentication server.

D. The client will need to re-authenticate every time they connect to the network.

E. The client will prompt the user to enter the logon username and password.

Refer to the exhibit.

What does the Cache Timeout Value refer to?

A. The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

B. The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

C. The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

D. The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.

E. The amount of time the Policy Manager caches the user\s client certificate.