HP HP Certifications HPE6-A67 Questions & Answers

• Question 41:

  How do apple iOS 4 and iOS 5 devices download the Onboard provisioning profile and credentials from ClearPass?

  A. Bonjour

  B. Quick Connect

  C. SNMP

  D. FTP

  E. Over the air API

  Correct Answer: E

  Reference: https://community.arubanetworks.com/t5/tkb/articleprintpage/tkb-id/ASE/article-id/18

• Question 42:

  What is the purpose of a RADIUS IETP Session Timeout attribute being sent to an Aruba Controller when a guest authenticates successfully?

  A. For the controller to initiate a RADIUS re-authentication automatically when the time limit is reached.

  B. For ClearPass to send a RADIUS CoA message to the client when the time limit is reached.

  C. For the user to initiate a RADIUS re-authentication when the time limit is reached.

  D. For ClearPass to send a RADIUS CoA message when the time limit is reached.

  E. For the Controller to end the user's authenticated session when the time limit is reached.

  Correct Answer: E

• Question 43:

  Where is the web login page created in the ClearPass UI?

  A. WebAuth Service

  B. Captive Portal Profile

  C. ClearPass Policy Manager

  D. Guest LoginService

  E. ClearPass Guest

  Correct Answer: E

  Reference: http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/Configuratio n/ CreateEditWebLogin.htm

• Question 44:

  Which actions are necessary to set up a ClearPass guest captive portal web login page to authenticate guest users? (Select three.)

  A. Configure the guest pre-authentication role on ClearPass.

  B. Selectthe user login checkbox in ClearPass Guest.

  C. Create a web login page in ClearPass Guest.

  D. Create Guest Service in ClearPass policy Manager.

  E. Redirect Aruba Controller URL to ClearPass server web login page.

  Correct Answer: ABD

  Reference: https://community.arubanetworks.com/t5/Aruba-Solution-Exchange/IAP-ClearPass-Guest-Captive- Portal/ ta-p/202675

• Question 45:

  Which device uses the Quick Connect method of Onboarding? (Select two.)

  A. iPad

  B. iPhone

  C. Windows

  D. blackberry

  E. Android

  Correct Answer: CE

  Reference: http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYOD-challangeswhitepaper.pdf

• Question 46:

  What is the purpose of the pre-auth check during guest authentication?

  A. for the NAD device to do an internal authentication check before sending the credentials to ClearPass

  B. for the NAD device to check that ClearPass is active before sending it the RADIUS request

  C. for ClearPass to do an internal authentication check before the NAS login happens

  D. for the client device to do an internal sanity check before the NAS login occurs

  E. for the client device to check that ClearPass is active before sending it the credentials

  Correct Answer: C

  The way NAS devices like wireless controllers do authentication on external captive portals only allowsstandard reject message handlinglike "authentication failed".The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in. It is to do an end run around limited error handing of NAS devices on external captive portals. Reference: https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254

• Question 47:

  What is the purpose of a guest self-registration page in ClearPass?

  A. to allow employees to get their own devices securely connected to the network

  B. to allow contractors to create their own accounts inActive Directory

  C. to allow employees' sponsors to create accounts for their guests

  D. to allow employees to easily get their corporate devices on the network

  E. to allow guest users to create a login account for the web login page

  Correct Answer: B

  Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access Reference: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/Customizing SelfProvisionedAccess.htmaninternal authentication check before the NAS login happens

• Question 48:

  Refer to the exhibit.

  

  Based on the information shown, why did the Joining AD fail?

  A. the GSS is wrong

  B. the wrong FQDN of the AD was entered while joining

  C. thewrong domain name was selected while joining the AD

  D. there is a clock difference between ClearPass and AD servers

  E. there is an IP communication issue

  Correct Answer: D

• Question 49:

  What is the purpose of using a role mapping policy in an 802.1x service with Active Directory as the authentication source?

  A. to translate and combine AD attributes into ClearPass roles

  B. to send roles from ClearPass to theAD user to update a user's group membership

  C. to enable attributes as roles directly without needing role mapping rules

  D. to send Aruba firewall roles back to the Aruba Network Access Device

  E. to send details of a user's connection to the AD user to store in its database

  Correct Answer: B

• Question 50:

  Which statement most accurately describes how users with Active Directory credentials authenticate with ClearPass when Active Directory is used as an authentication source for an 802.1x service in ClearPass?

  A. A Kerberos request is sent from the Network Access Device to ClearPass which initiates a RADUIS request to the AD server.

  B. A RADIUS request is sent from the Network Access Device to the AD server which communicates with ClearPass.

  C. An LDAP request is sent from the Network AccessDevice to the AD server which communicates with ClearPass.

  D. An LDAP request is sent from the Network Access Device to ClearPass which initiates a RADIUS request to the AD server.

  E. A RADIUS request is sent from the Network Access Device to the ClearPasswhich communicates with the AD server.

  Correct Answer: C

  Reference: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/3%20Active % 20Directory/AD_auth_source_adding.htm