HP HP Certifications HPE6-A07 Questions & Answers

• Question 41:

  What does a client need for it to perform EAP-TLS successfully? (Select two.)

  A. Username and Password

  B. Server Certificate

  C. Pre-shared key

  D. Certificate Authority

  E. Client Certificate

  Correct Answer: BE

  Reference https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Binary-comparisonin-EAP-TLS-Authentication/ta-p/257857

• Question 42:

  Which device uses the Quick Connect method of Onboarding? (Select two.)

  A. iPad

  B. iPhone

  C. Windows

  D. blackberry

  E. Android

  Correct Answer: CE

  Reference http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYODchallanges-whitepaper.pdf (page 7)

• Question 43:

  How do apple iOS 4 and iOS 5 devices download the Onboard provisioning profile and credentials from ClearPass?

  A. Bonjour

  B. Quick Connect

  C. SNMP

  D. FTP

  E. Over the air API

  Correct Answer: E

• Question 44:

  Where is the web login page created in the ClearPass UI?

  A. WebAuth Service

  B. Captive Portal Profile

  C. ClearPass Policy Manager

  D. Guest Login Service

  E. ClearPass Guest

  Correct Answer: E

• Question 45:

  Which actions are necessary to set up a ClearPass guest captive portal web login page to authenticate guest users? (Select three.)

  A. Configure the guest pre-authentication role on ClearPass.

  B. Select the user login checkbox in ClearPass Guest.

  C. Create a web login page in ClearPass Guest.

  D. Create Guest Service in ClearPass policy Manager.

  E. Redirect Aruba Controller URL to ClearPass server web login page.

  Correct Answer: ABD

  Reference https://community.arubanetworks.com/t5/Aruba-Solution-Exchange/IAP-ClearPass-GuestCaptive-Portal/ta-p/202675

• Question 46:

  What is the purpose of the pre-auth check during guest authentication?

  A. for the NAD device to do an internal authentication check before sending the credentials to ClearPass

  B. for the NAD device to check that ClearPass is active before sending it the RADIUS request

  C. for ClearPass to do an internal authentication check before the NAS login happens

  D. for the client device to do an internal sanity check before the NAS login occurs

  E. for the client device to check that ClearPass is active before sending it the credentials

  Correct Answer: C

  The way NAS devices like wireless controllers do authentication on external captive portals only allows standard reject message handling like "authentication failed". The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in. It is to do an end run around limited error handing of NAS devices on external captive portals.

  Reference https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254

• Question 47:

  What is the purpose of using a role mapping policy in an 802.1x service with Active Directory as the authentication source?

  A. to translate and combine AD attributes into ClearPass roles

  B. to send roles from ClearPass to the AD user to update a user's group membership

  C. to enable attributes as roles directly without needing role mapping rules

  D. to send Aruba firewall roles back to the Aruba Network Access Device

  E. to send details of a user's connection to the AD user to store in its database

  Correct Answer: B

• Question 48:

  What is the purpose of a guest self-registration page in ClearPass?

  A. to allow employees to get their own devices securely connected to the network

  B. to allow contractors to create their own accounts in Active Directory

  C. to allow employees' sponsors to create accounts for their guests

  D. to allow employees to easily get their corporate devices on the network

  E. to allow guest users to create a login account for the web login page

  Correct Answer: B

  Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access

  Reference http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/ CustomizingSelfProvisionedAccess.htm

• Question 49:

  Which most accurately describes the First Applicable rule evaluation algorithm in Enforcement Policies?

  A. Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.

  B. All rules are checked and if there is no match, no Enforcement profile is applied.

  C. Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied. along with the default Enforcement profile.

  D. All rules are checked for any matching rules and their respective Enforcement profiles are applied.

  Correct Answer: D

• Question 50:

  

  Refer to the exhibit. Based on the information shown, why did the Joining AD fail?

  A. the GSS is wrong

  B. the wrong FQDN of the AD was entered while joining

  C. the wrong domain name was selected while joining the AD

  D. there is a clock difference between ClearPass and AD servers

  E. there is an IP communication issue

  Correct Answer: D