HP HP Certifications HPE6-A67 Questions & Answers

• Question 51:

  What is Radius CoA used for?

  A. to validate a host MAC against a white and a black list

  B. to force the client to re-authenticate upon roaming to a new controller

  C. to authenticate users or devices before granting them access to a network

  D. to transmit messages to the NAD/NAS to modify a user's session status

  E. to apply firewall policies based on authentication credentials

  Correct Answer: D

  Reference: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_User Guide/ Enforce/EPRADIUS_CoA.htm

• Question 52:

  Refer to the exhibit.

  

  A user connects to an Aruba Access Point wireless SSID named "secure-corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

  A. pod8-mac auth

  B. Noservice will be triggered

  C. pod8wireless

  D. [Policy Manager Admin Network Service]

  E. pod8wired

  Correct Answer: A

• Question 53:

  A ClearPass deployment needs to be designed to determine whether a user authenticating is an HR department employee in the Active Directory Server and whether the user's device is healthy. Which policy service components will the network administrator need to use?

  A. Posture, Authentication and Authorization

  B. Posture and Firewall Roles

  C. Posture and Onboard

  D. Authentication andAuthorization

  E. Posture, Authentication and Onboarding

  Correct Answer: A

  Reference: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_User Guide/ About%20ClearPass/About_ClearPass.htm

• Question 54:

  When enforcement action is used in ClearPass to bounce a client?

  A. Webpage redirect

  B. ACL

  C. VLAN attribute

  D. RADIUS VSA

  E. RADIUS CoA

  Correct Answer: E

  In the Profiler tab, change the RADIUS CoA Action to "[Cisco - Bounce-Host-Port]". Make sure your switch is configured for this.

  Reference: http://community.arubanetworks.com/t5/Security/MAC-Auth-Service-for-AP-s-Printers-Etc/td- p/243252

• Question 55:

  What happens when a client successfully authenticates but does not match any Enforcement Policy rules?

  A. no role is applied to the device

  B. logon profile is applied to the device

  C. default Enforcement profile is applied

  D. guest rule is applied to the device

  E. default rule is applied to the device

  Correct Answer: C

• Question 56:

  When Active Directory is added as an authentication source, what should the format be for the Active Directory bin DN?

  A. admin.domain.com

  B. domain.com\admin

  C. domain.com

  D. [email protected]

  E. admin\domain.com

  Correct Answer: D

• Question 57:

  Refer to the exhibit.

  

  A user has enabled `department' and `memberOf' as roles. What is the direct effect of the user's action?

  A. The user's authentication will be rejected if the user does not have an admin user group membership in AD.

  B. The user's memberOf attribute is sent back to the controller as a firewall role.

  C. The user's department and group membership will be seen in the Access tracker roles section.

  D. The user's authentication will be rejected if the user does nothave a department attribute in AD.

  E. The user's department is sent back to the controller as a firewall role.

  Correct Answer: A

• Question 58:

  In ClearPass, which two service configuration can process credentials from a web Login Page? (Choose two.)

  A. Guest Service MAC Authentication

  B. MSCHAP RADIUS Service

  C. Aruba Application Authentication

  D. WebAuth Service

  E. EAP-PEAP RADIUS Service

  Correct Answer: CE

• Question 59:

  Refer to the exhibit.

  

  A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

  A. Service Three

  B. Service Two

  C. No service will be triggered.

  D. Service One

  Correct Answer: A

• Question 60:

  Refer to the exhibit.

  

  What will be the enforcement for the user "neil"?

  A. Allow Internet Only Access

  B. Allow Full Access

  C. Corp Secure Contractor

  D. Secure Corp BYOD Access

  Correct Answer: B