HP HP Certifications HPE6-A15 Questions & Answers

• Question 41:

  Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

  A. when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

  B. when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

  C. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

  D. when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

  E. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

  Correct Answer: C

• Question 42:

  Refer to the exhibit.

  

  The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.

  What is the cause of this error?

  A. The controller's shared secret used during the certificate exchange is incorrect.

  B. The NAS source interface IP is incorrect.

  C. The client sent an incorrect shared secret for the 802.1X authentication.

  D. The controller used an incorrect shared secret for the RADIUS authentication.

  E. The client's shared secret used during the certificate exchange is incorrect.

  Correct Answer: D

• Question 43:

  Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

  A. Software image

  B. Backup files

  C. Log files

  D. Device fingerprint dictionaries

  E. Posture dictionaries

  Correct Answer: BC

• Question 44:

  Which component of a ClearPass Service is mandatory?

  A. Authorization Source

  B. Profiler

  C. Role Mapping Policy

  D. Enforcement

  E. Posture

  Correct Answer: D

  An enforcement policy is a way to organize enforcement profiles and apply them to users or Policy Manager roles. Based on the enforcement policy assigned to the role, enforcement profiles are applied to the service request.

• Question 45:

  Refer to the exhibit.

  

  Under which circumstances will ClearPass select the Policy Service named `Test device group'?

  A. when the NAD belongs to an Airware device group HQ

  B. when the ClearPass IP address is part of the device group HQ

  C. when the Aruba access point that the client is associated to is part of the device group HQ

  D. when an end user IP address is part of the device group HQ

  E. when the IP address of the NAD is part of the device group HQ

  Correct Answer: E

• Question 46:

  Refer to the exhibit.

  

  An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ. Which role is assigned to the user in ClearPass?

  A. HR Local

  B. [Guest]

  C. [Employee]

  D. Linux User

  E. Executive

  Correct Answer: E

  The conditions of the Executive Role is met.

• Question 47:

  Refer to the exhibit.

  

  Based on the configuration for the client's certificate private key as shown, which statements accurately describe the settings? (Select two.)

  A. The private key is stored in the ClearPass server.

  B. The private key is stored in the user device.

  C. The private key for TLS client certificates is not created.

  D. More bits in the private key will increase security.

  E. More bits in the private key will reduce security.

  Correct Answer: BD

• Question 48:

  What does Authorization allow users to do in a Policy Service?

  A. use only attributes stored in external databases for Enforcement, but not internal databases

  B. use attributes stored in databases in role mapping and Enforcement

  C. use only attributes stored in internal databases for Enforcement, but not external databases

  D. use attributes stored in databases in role mapping, but not Enforcement

  E. use attributes stored in databases in Enforcement, but not role mapping

  Correct Answer: B

• Question 49:

  Refer to the exhibit.

  

  Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

  A. EAP-TLS Authentication will be unaffected

  B. The user can Onboard their device again

  C. A new device certificate will be automatically pushed out to the device

  D. The user cannot Onboard their device again

  E. EAP-TLS Authentication will fail

  Correct Answer: DE

  The Device Management (View by Device) page lists all devices and lets you manage the devices' access to the network. For each device, you can allow or deny network access.

  When you select the Deny option, a message advises you that any certificates associated with it will be revoked. The device cannot be re-enrolled as long as access is denied. To re-enroll the device, you must use this field to allow access again. References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/DeviceManagement.htm

• Question 50:

  Which device type supports Exchange ActiveSync configuration with Onboard?

  A. Linux laptop

  B. Mac OS X device

  C. Apple iOS device

  D. Windows laptop

  E. Android device

  Correct Answer: C

  Exchange ActiveSync configurations you define can be used in configuration profiles to automatically configure an email account on an iOS device.

  References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/CreateEditActiveSync.htm