HP HP Certifications HPE6-A67 Questions & Answers

• Question 21:

  An organization wants to ensure a client's antivirus is installed and up to date prior to allowing network

  access.

  Which ClearPass feature can be used to accomplish this?

  A. Guest with sponsor approval

  B. OnGuard

  C. Guest with self-registration

  D. Onboarding

  E. RADIUSAuthorization

  Correct Answer: B

• Question 22:

  Which ClearPass collectors are valid for profiling information? (Select two.)

  A. FTP

  B. SNMP

  C. Active Sync

  D. On-enrollment

  E. Active Directory

  Correct Answer: BC

  Reference:

  http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_User Guide/

  PolicyProfile/Collectors.htm

  Answer:

• Question 23:

  Refer to the exhibit.

  

  Based on the information shown, what is the status of the network?

  A. ClearPass can do TCP OS finger printingbut Dictionary is not updated.

  B. ClearPass cannot do TCP OS finger printing.

  C. Device is Unknown to ClearPass.

  D. Device is not authenticated.

  E. ClearPass supports TCP finger printing but it is not enabled.

  Correct Answer: E

• Question 24:

  Which statement most accurately describes how the HTTP collector words for profiling?

  A. HTTP packets are inspected whena user accesses any guest page on ClearPass.

  B. When a user access the Aruba controller captive portal page, HTTP packets are captured by ClearPass.

  C. HTTP packets are inspected only when a user accesses the ClearPass administration UI page.

  D. When a user accesses any internet page, HTTP packets are captured by ClearPass.

  E. HTTP packets are forwarded from the Controller to ClearPass.

  Correct Answer: A

• Question 25:

  Which additional service must be added to a ClearPass server to use the OnGuard Agent health checks for 802.1x authentication?

  A. HTTP Posture Service

  B. 802.1x Authentication

  C. 802.1x Posture Service

  D. 802.1x Enforcement policy

  E. WebAuth Service

  Correct Answer: E

  Reference:

  http://community.arubanetworks.com/t5/Security/Clearpass-Onguard-implementation-and- documentation/

  td-p/121057

• Question 26:

  Which type of ClearPass service is used to process health checks from the OnGuard agent?

  A. WebAuth

  B. RADIUS

  C. TACACS

  D. HTTP

  E. AppAuth

  Correct Answer: A

  Reference:

  https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access- byod/21122/1/

  OnGuard%20config%20Tech%20Note%20v1.pdf Answer:

• Question 27:

  How is ClearPass enabled to perform DHCP profiling for devices in a network?

  A. by enabling a port mirror on the network access device to mirror all user traffic toClearPass

  B. by enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

  C. by enabling the `DHCP ignore' feature on network access devices

  D. by configuring ClearPass as a secondary DHCP server on the client

  E. by enabling profiling on ClearPass; configuration of the network access devices is not necessary

  Correct Answer: B

  Reference: https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass % 20Profiling%20TechNote.pdf

• Question 28:

  Which checks are made with OnGuard posture evaluation in ClearPass? (Select three.)

  A. Client role check

  B. Registry keys

  C. Peer-to-peer application checks

  D. EAP TLS certificate validity

  E. Operating System version

  Correct Answer: BCE

• Question 29:

  Which Operating Systems can use Network Access Protection (NAP) policy agents? (Select two.)

  A. Windows XP

  B. Android

  C. Windows 7

  D. Mac OS X

  E. iOS 6 and higher

  Correct Answer: AC

• Question 30:

  Which statement is a valid "Native Dissolvable Agent Installer" requirement?

  A. Agent can be installed for only current users.

  B. Native Dissolvable agent installer requires admin rights.

  C. Agent can be installed for current user but does not require admin rights.

  D. ClearPass does not support"Native dissolvable agent."

  E. It does not require admin rights but needs a license.

  Correct Answer: C

  Reference: http://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.6.1/Content/PriorKnown/ OldKnown_DissolvableAgent.htm