Latest HP HPE6-A68 Practice Test Questions, Aruba Certified ClearPass Professional Exam Exam Dumps [Q17-Q37] : IT Certification Exam Braindumps : http://blog.braindumpsit.com

QUESTION 17
Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Select two.)

Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

Configure a RADIUS Enforcement Profile on ClearPass for the desired privilege level.

Configure ClearPass as an Authentication server on the network device.

Configure ClearPass roles on the network device.

Enable RADIUS accounting on the NAD.

QUESTION 18
Refer to the exhibit.

An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Deny Access Profile

Onboard Device Repository

QUESTION 19
Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.
Which action will ClearPass take based on the Enforcement Profile?

it will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds

it will count down 600 seconds and send a RADIUS CoA message to the user to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user’s session will be terminated after 600 seconds

QUESTION 20
Which authorization servers are supported by ClearPass? (Select two.)

Aruba Controller

LDAP server

Cisco Controller

Active Directory

Aruba Mobility Access Switch

QUESTION 21
Why can the Onguard posture check not be performed during 802.1x authentication?

Health Checks cannot be used with 802.1x.

Onguard uses RADIUS, so an additional service must be created.

Onguard uses HTTPS, so an additional service must be created.

Onguard uses TACACS, so an additional service must be created.

802.1x is already secure, so Onguard is not needed.

QUESTION 22
Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

Software image

Backup files

Log files

Device fingerprint dictionaries

Posture dictionaries

QUESTION 23
Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.
Which action will ClearPass take based on the Enforcement Profile?

It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user’s session after this time is up.

It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user’s session after this time is up.

It will send the session -Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

QUESTION 24
What is a benefit of ClearPass Onguard?

It enables organizations to run advanced endpoint posture assessments.

It allows a receptionist in a hotel to create accounts for guest users.

It allows employees to self-provision their personal devices on the corporate network.

It offers an easy way for users to self-configure their devices to support 802.1X authentication on wired and wireless networks.

It allows employees to create temporary accounts for Wi-Fi access.

QUESTION 25
Refer to the exhibit.

Which statement accurately describes the cp82 ClearPass node? (Choose two.)

It stays as a Subscriber when the Publisher fails.

It becomes the Publisher when the primary Publisher fails.

It operates as a Publisher in a separate cluster when the Publisher is active.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

It operates as a Subscriber when the Publisher is active.

QUESTION 26
An SNMP probe is sent from ClearPass to a network access device but ClearPass is unable to get profiling information.
What could be a valid cause? (Choose three.)

Mismatching SNMP community string in the ClearPass and NAD configuration.

Only SNMP read has been configured but SNMP write is needed for profiling information.

SNMP is not enabled on the NAD.

An external firewall is blocking SNMP traffic.

SNMP probing is not supported between ClearPass and NADs.

QUESTION 27
A client’s authentication is failing and there are no entries in the ClearPass Access tracker.
What is a possible reason for the authentication failure?

The user account has expired.

The client used a wrong password.

The shared secret between the NAD and ClearPass does not match.

The user’s certificate is invalid.

The user is not found in the database.

QUESTION 28
Which statement is true about the databases in ClearPass?

Entries in the guest user database do not expire.

A Static host list can only contain a list of IP addresses.

Entries in the guest user database can be deleted.

Entries in the local user database cannot be modified.

The endpoints database can only be populated by manually adding MAC addresses to the table.

QUESTION 29
Why is a terminate session enforcement profile used during posture checks with 802.1x authentication?

To send a RADIUS CoA message from the ClearPass server to the client

To disconnect the user for 30 seconds when they are in an unhealthy posture state

To blacklist the user when they are in an unhealthy posture state

To force the user to re-authenticate and run through the service flow again

To remediate the client applications and firewall do that updates can be installed

QUESTION 30
Refer to the exhibit.

Based on the network topology diagram shown, how many clusters are needed for this deployment?

1

2

3

4

8

QUESTION 31
Which devices support Apple over-the-air provisioning? (Select two.)

IOS 5

Laptop running Mac OS X 10.8

Laptop running Mac OS X 10.6

Android 2.2

Windows XP

QUESTION 32
Refer to the exhibit.

An administrator logs in to the Guest module in ClearPass and ‘Manage Accounts’ displays as shown.
When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

QUESTION 33
Refer to the exhibit.

Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

Only the attribute values of department and memberOf can be used in role mapping policies.

The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.

Only the attribute value of company can be used in role mapping policies, not the other attributes.

The attribute values of department and memberOf are directly applied as ClearPass roles.

Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

QUESTION 34
What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

to audit client authentications

to display changes made to the ClearPass configuration

to display the entire configuration of the ClearPass Policy Manager

to audit the network for PCI compliance

to display system events like high CPU usage.

QUESTION 35
Refer to the exhibit.

What is the purpose of the ‘Clock Skew Allowance’ setting? (Choose tow.)

to ensure server certificate validation does not fail due to client clock sync issues

to set expiry time in client certificate to a few minutes longer that the default setting

to adjust clock time on client device to a few minutes before current time

to ensure client certificate validation does not fail due to client clock sync issues

to set start time in client certificate to a few minutes before current time

QUESTION 36
An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop.
Which licenses are consumed in this scenario?

1 Policy Manager license, 1 Onboard License

2 Policy Manager licenses, 1 Onguard License

1 Policy Manager license, 1 Profile License

2 Policy Manager licenses, 2 Onguard licenses

1 Policy Manager license, 1 Onguard License

QUESTION 37
A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statements accurately describe next steps? (Select two.)

The NAD should be configured with the primary node IP address for RADIUS authentication on the
802.1x network.

A new Virtual IP address should be created for each NAD.

Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.