HP HP Certifications HPE6-A15 Questions & Answers

• Question 31:

  

  Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully using connection protocol WEBAUTH?

  A. Deny Access

  B. Employee VLAN

  C. Internet VLAN

  D. Full Access VLAN

  Correct Answer: B

• Question 32:

  Refer to the exhibit.

  Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome when `Automatically use my Windows logon name and password' are selected?

  

  A. The client will use machine authentication.

  B. The client's Windows login username and password will be sent inside a certificate to the Active Directory server.

  C. The client's Windows login username and password will be sent to the Authentication server.

  D. The client will need to re-authenticate every time they connect to the network.

  E. The client will prompt the user to enter the logon username and password.

  Correct Answer: C

• Question 33:

  Refer to the exhibit.

  

  Which statement accurately reflects the status of the Policy Simulation test figure shown?

  A. The test verifies that a client with username test1 can authenticate using EAP-PEAP.

  B. Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

  C. Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

  D. The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

  E. The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

  Correct Answer: E

• Question 34:

  What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

  A. to audit client authentications

  B. to display changes made to the ClearPass configuration

  C. to display the entire configuration of the ClearPass Policy Manager

  D. to audit the network for PCI compliance

  E. to display system events like high CPU usage.

  Correct Answer: B

• Question 35:

  Refer to the exhibit.

  

  Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting `Validate server certificate'?

  A. The server and client will perform an HTTPS SSL certificate exchange.

  B. The client will verify the server certificate against a trusted CA.

  C. The client will send its private key to the server for verification.

  D. The server will send its private key to the client for verification.

  E. The client will send its certificate to the server for verification.

  Correct Answer: B

• Question 36:

  Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

  A. Username and Password

  B. Pre-shared key

  C. WPA2-PSK

  D. server Certificate

  E. Client Certificate

  Correct Answer: DE

  When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other. Certificates must meet specific requirements both on the server and on the client for successful authentication.

  References: https://support.microsoft.com/en-us/help/814394/certificate-requirements-when-you-use-eap-tls-or-peap-with-eap-tls

• Question 37:

  What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

  A. the ClearPass server must have the network device added as a valid NAD

  B. the ClearPass server certificate must be installed on the NAD

  C. a matching shared secret must be configured on both the ClearPass server and NAD

  D. an NTP server needs to be set up on the NAD

  E. a bind username and bind password must be provided

  Correct Answer: AC

• Question 38:

  Refer to the exhibit.

  

  An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown. What is a possible reason for the ErrorCode `Failed to classify request to service' shown?

  A. The user failed authentication die to an incorrect password.

  B. ClearPass could not match the authentication request to a service, but the user passed authentication.

  C. ClearPass service authentication sources were not configured correctly.

  D. The NAD did not send the authentication request.

  E. ClearPass service rules were not configured correctly.

  Correct Answer: E

• Question 39:

  What is the purpose of RADIUS CoA (RFC 3576)?

  A. to force the client to re-authenticate upon roaming to a new Controller

  B. to apply firewall policies based on authentication credentials

  C. to validate a host MAC address against a whitelist or a blacklist

  D. to authenticate users or devices before granting them access to a network

  E. to transmit messages to the NAD/NAS to modify a user's session status

  Correct Answer: E

  CoA messages modify session authorization attributes such as data filters. References: https://tools.ietf.org/html/rfc3576

• Question 40:

  Refer to the exhibit.

  

  What information can be drawn from the audit row detail shown? (Select two.)

  A. radius01 was deleted from the list of authentication sources.

  B. The policy service was moved to position number 4.

  C. radius01 was moved to position number 4.

  D. The policy service was moved to position number 3.

  E. raduis01 was added as an authentication source.

  Correct Answer: AB