HP HP Certifications HPE6-A67 Questions & Answers

• Question 11:

  A customer wants to use the OS information of devices in the Enforcement policy. Which source should be added as an authorization source?

  A. OnGuard Repository

  B. Guest User Repository

  C. Local User Repository

  D. Endpoints Repository

  E. Active Directory

  Correct Answer: D

• Question 12:

  Which two configuration options are necessary to add a Network Access Device into the ClearPass Policy Manager? (Select two.)

  A. Admin Password

  B. NAD IP Address

  C. Shared Secret

  D. Console Password

  E. HTTPS address

  Correct Answer: BC

• Question 13:

  Which policy component is the final step in the policy service flow in ClearPass?

  A. Enforcement

  B. Posture

  C. Authorization

  D. Rotes

  E. Authentication

  Correct Answer: A

• Question 14:

  In which stage of the Onboard process is the device dotlx supplicant configured?

  A. Provisioning

  B. Pre-provisioning

  C. Authentication

  D. Authorization

  E. EAP authentication

  Correct Answer: C

• Question 15:

  Refer to the exhibit.

  

  Which user authentication request will match the service rules of the Policy Service shown?

  A. a wireless user connecting to the SSID Corporate

  B. a guest user authenticating via captive portal

  C. a wireless user connecting to any network

  D. all authentication requests

  E. a wired user connecting to an Aruba Controller

  Correct Answer: A

• Question 16:

  What must a network administrator configure on ClearPass to enable RADIUS authentication with a network access device (NAD)'? (Select two.)

  A. An NTP server needs to be set up on the NAD

  B. The ClearPass server certificate must be installed on the NAD

  C. A shared secret must be configured on the ClearPass server and NAD

  D. The ClearPass server must have the network device added as a valid NAD

  E. A bind usemame and bind password must be provided

  Correct Answer: CD

• Question 17:

  When adding an Active Directory server as an authentication source in ClearPass, what is the purpose of the 'Search Base DN' feature?

  A. to indicate to ClearPass the node in the AD tree structure where it should start to search for records

  B. to find the distinguished name of a particular user in Active Directory

  C. to indicate to ClearPass the Active Directory domain to append to the username

  D. to find the base DN of a particular user in Active Directory

  E. to search for AD user and group account to authenticate users from ClearPass

  Correct Answer: A

• Question 18:

  What Information is needed to add ClearPass to an Active Directory Domain? (Select two.)

  A. domain user credentials

  B. CPPM enterprise credentials

  C. Administrator FQDN

  D. domain controller FQDN

  E. Administrator user credentials

  Correct Answer: DE

• Question 19:

  What is the purpose of service rules in ClearPass?

  A. applies health checks to clients

  B. differentiates between different authentication requests

  C. authenticates clients

  D. authorizes clients against the RADIUS server

  E. determines the client OS

  Correct Answer: D

• Question 20:

  What will be the initial posture token of a device connecting with 802.1x authentication for the first time?

  A. Unhealthy

  B. Quarantine

  C. Checkup

  D. Unknown

  E. Healthy

  Correct Answer: D

  When the userconnects to the 802.1x SSID for the first time the Posture token will be Unknown, the initial role will be returned to the controller and the user will be redirected to OnGuard Agent page. The user will download and run the dissolvable or persistent agent and the agent will send the health results to the Webauth Health Check service, which will update the posture token in the Endpoint database and send a Bounce User request to the controller. That will cause the user to re-authenticate and this time the posture token will be known. Reference: https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access- byod/21122/1/ OnGuard%20config%20Tech%20Note%20v1.pdf