HP HP Certifications HPE6-A15 Questions & Answers

• Question 91:

  Refer to the exhibit.

  

  When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

  What is the Address field value `securelogin.arubanetworks.com' used for?

  A. for ClearPass to send a TACACS+ request to the NAD

  B. for appending to the Web Login URL, before the page name

  C. for the client to POST the user credentials to the NAD

  D. for ClearPass to send a RADIUS request to the NAD

  E. for appending to the Web Login URL, after the page name.

  Correct Answer: C

• Question 92:

  Refer to the exhibit.

  

  A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page.

  Based on the MAC Caching service information shown, which statement about the guests' MAC address is accurate?

  A. It will be visible in the Guest User Repository with Unknown Status

  B. It will be deleted from the Endpoint table.

  C. It will be visible in the Guest User Repository with Known Status.

  D. It will be visible in the Endpoints table with Known Status.

  E. It will be visible in the Endpoints table with Unknown Status.

  Correct Answer: D

• Question 93:

  Refer to the exhibit.

  

  When configuring a Web Login Page in ClearPass Guest, the information shown is displayed. What is the page name field used for?

  A. for forming the Web Login Page URL

  B. for Administrators to access the PHP page, but not guests

  C. for Administrators to reference the page only

  D. for forming the Web Login Page URL where Administrators add guest users

  E. for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.

  Correct Answer: A

  The Page Name is an identifier page name that will appear in the URL -- for example, "/guest/page_name.php".

  References: http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/Configuration/CreateEditWebLogin.htm

• Question 94:

  A customer wants all guests who access a company's guest network to have their accounts approved by the receptionist, before they are given access to the network. How should the network administrator set this up in ClearPass? (Select two.)

  A. Enable sponsor approval confirmation in Receipt actions.

  B. Configure SMTP messaging in the Policy Manager.

  C. Configure a MAC caching service in the Policy Manager.

  D. Configure a MAC auth service in the Policy Manager.

  E. Enable sponsor approval in the captive portal authentication profile on the NAD.

  Correct Answer: AD

  A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access until a sponsor (could even be a central help desk) has approved the request. When the registration form is completed by the guest/user, an on screen message is displayed for the guest stating the account requires approval.

  Guests are disabled upon registration and need to wait on the receipt page for the confirmation until the login button gets enabled.

  D. Device Mac Authentication is designed for authenticating guest devices based on their MAC address.

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 94 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 95:

  Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Select two.)

  A. Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

  B. Configure a RADIUS Enforcement Profile on ClearPass for the desired privilege level.

  C. Configure ClearPass as an Authentication server on the network device.

  D. Configure ClearPass roles on the network device.

  E. Enable RADIUS accounting on the NAD.

  Correct Answer: AC

  You need to make sure you modify your policy (Configuration ?Enforcement ?Policies ?Edit - [Admin Network Login Policy]) and add your AD group settings in to the corresponding privilege level.

• Question 96:

  What is the purpose of Operator Profiles?

  A. to enforce role based access control for Aruba Controllers

  B. to enforce role based access control for ClearPass Policy Manager admin users

  C. to enforce role based access control for ClearPass Guest Admin users

  D. to assign ClearPass roles to guest users

  E. to map AD attributes to admin privilege levels in ClearPass Guest

  Correct Answer: C

  An operator profile determines what actions an operator is permitted to take when using ClearPass Guest.

  References: http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/OperatorLogins/OperatorProfiles.htm

• Question 97:

  Refer to the exhibit.

  

  In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

  A. to gather and send Aruba NAD information to ClearPass

  B. to gather information about Aruba NADs for ClearPass

  C. to send information via RADIUS packets to Aruba NADs

  D. to send information via RADIUS packets to clients

  E. to send CoA packets from ClearPass to the Aruba NAD

  Correct Answer: C

• Question 98:

  Refer to the exhibit.

  

  Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?

  A. to display a role name on the Self-registration receipt page

  B. to send a firewall role back to the controller based on the Guest User's Role ID

  C. to assign Controller roles to guests

  D. to assign three roles of [Contractor], [Guest] and [Employee] to every guest user

  E. to create additional account roles for guest administrators to assign to guest accounts

  Correct Answer: C

• Question 99:

  Which authorization servers are supported by ClearPass? (Select two.)

  A. Aruba Controller

  B. LDAP server

  C. Cisco Controller

  D. Active Directory

  E. Aruba Mobility Access Switch

  Correct Answer: BD

  Authentication Sources can be one or more instances of the following examples:

  *

  Active Directory

  *

  LDAP Directory

  *

  SQL DB

  *

  Token Server

  *

  Policy Manager local DB

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 114 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 100:

  Which CLI command is used to upgrade the image of a ClearPass server?

  A. Image update

  B. System upgrade

  C. Upgrade image

  D. Reboot

  E. Upgrade software

  Correct Answer: B

  When logged in as appadmin, you can manually install the Upgrade and Patch binaries imported via the CLI using the following commands:

  *

  system update (for patches)

  *

  system upgrade (for upgrades)

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 564 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf