HP HP Certifications HPE6-A67 Questions & Answers

• Question 61:

  Which licenses are included in the built-in starter kit for ClearPass?

  A. 10 ClearPass Guest licenses,10 ClearPass OnGuard licenses and 10 ClearPass Onboard licenses

  B. 10 ClearPass Enterprise licenses

  C. 25 ClearPass Policy Manager licenses

  D. 25 ClearPass Profiler licenses

  E. 25 ClearPass Enterprise licenses

  Correct Answer: E

• Question 62:

  Refer to the exhibit.

  

  What needs to be configured for ClearPass to enforce a bandwidth limit on the Guest Network? (Choose two.)

  A. Enable Active Sessions in ClearPass Guest

  B. Configure Interim Accounting on the Network Access Device

  C. Make sure that Endpoint Profiling is configured

  D. Enable Logging of Accounting Interim-Update packets

  E. Configure a ClearPass server for Insight Master

  Correct Answer: CD

• Question 63:

  A guest user connects to an Open Guest SSID on a wireless network and is redirected to a web login page

  on ClearPass.

  How is the authentication performed?

  A. The controller will capture the credentials as they are passed to ClearPass by the Web Login page.

  B. ClearPass instructs the wireless controller to fetch the credentials from the Web Login Page.

  C. The User submits the credentials, and ClearPass instructs the browser to post the credentials to the wireless controller.

  D. When the user submits the credentials, ClearPass will capture the credentials and post them to the wireless controller.

  Correct Answer: A

• Question 64:

  When a client performs EAP-TLS authentication, what is required? (Choose two.)

  A. Root Certificate Authority

  B. User Credentials

  C. RADIUS Server Certificate

  D. RADIUS Shared Secret

  E. TLS Client Certificate

  Correct Answer: AC

• Question 65:

  Which are valid enforcement profile types? (Choose three.)

  A. Aruba Script Enforcement

  B. RADIUS Change of Authorization (CoA)

  C. CLI-Based Enforcement

  D. Policy Service Enforcement

  E. ClearPass Entity Update Enforcement

  Correct Answer: BCE

• Question 66:

  Which options are parts of the features in the ClearPass Policy Manager module? (Choose three.)

  A. Context-based Policy Engine

  B. Endpoint Context Reporting

  C. Authentication Source Management

  D. Guest Account Management

  E. Enforcement Policies and Logic

  Correct Answer: ABE

• Question 67:

  In Guest authentication without MAC caching, which statements are true? (Choose two.)

  A. When the client disconnects from the network, the user will NOT be asked to login when the client reconnects.

  B. The endpoint can be mapped to the correct Guest account for auditing.

  C. When the guest logs in, the system will remember the client as a guest for the next login.

  D. When the client disconnects from the network, the user will be asked to login when the client reconnects.

  E. When the User logs into the Guest network, the endpoint will be marked as status = "known"

  Correct Answer: BD

• Question 68:

  When a NAD sends an authentication request to ClearPass for a Guest Web Login with Username and Password, which methods can it use? (Choose three.)

  A. CHAP璕ADIUS Request

  B. EAP PEAP ?RADIUS Request

  C. MSCHAP ?RADIUS Request

  D. HTTP ?WebAuth Request

  E. PAP ?RADIUS Request

  Correct Answer: BCE

• Question 69:

  What is the purpose of ClearPass Onboarding?

  A. to remotely control devices

  B. to provision and revoke device credentials

  C. to control IoT device access

  D. to manage firmware and patches

  Correct Answer: B

• Question 70:

  What is the primary use of the ClearPass Onboard Application?

  A. Connect company-issued devices.

  B. Configure network profiles for BYOD Devices.

  C. Enforce endpoint device profiling.

  D. Provide for system validation of client posture.

  Correct Answer: B