HP HP Certifications HPE6-A67 Questions & Answers

• Question 71:

  ClearPass Onboard can be configured for which three types of security? (Choose three.)

  A. SSL-VPN

  B. EAP-RADIUS

  C. EAP-TLS

  D. EAP-PEAP

  E. Personal PSK

  Correct Answer: BCD

• Question 72:

  What must be configured when a network administrator wants to configure RADIUS authentication with a network access device (NAD)? (Choose two.)

  A. The NAD and ClearPass must be configured for NTP time synchronization.

  B. The NAD must be configured for RADIUS accouning.

  C. The ClearPass EAP/RADIUS server certificate must be installed on the NAD.

  D. ClearPass and the NAD must have the same shared secret.

  E. The NAD must be configured as a known network device in ClearPass.

  Correct Answer: DE

• Question 73:

  When using an Active Directory authentication source, you must configure a Bind DN. Which two statements are true about Bind DN? (Choose two.)

  A. The Bind DN needs to be a Service Account Type.

  B. The Bind DN must be an Administrator Account.

  C. ClearPass Uses the Bind DN to search the Directory.

  D. ClearPass Uses the Bind DN to update User Attributes.

  E. The Bind DN needs Read/Write access to the Directory.

  Correct Answer: BC

• Question 74:

  An administrator wants to specify the ClearPass role named "BYOD" for phones and tablets and the

  "CORP" role for laptops.

  How should the administrator configure ClearPass to specify the roles by device type? (Choose two.)

  A. Create the roles and add them as attributes in the Endpoints database.

  B. Create the Roles and apply them to the authorization tab in the service.

  C. Create the Roles and add the Endpoints Repository to the authorization in the service.

  D. Ensure that the role is specified by device type in the Endpoints database.

  E. Create a Role Mapping policy, and apply it to the RADIUS service.

  Correct Answer: BD

• Question 75:

  An organization wants to ensure a client's antivirus is installed and up-to-date prior to allowing guest

  network access.

  Which ClearPass feature can be used to meet the organization's requirement?

  A. OnGuard with Persistent Agent

  B. ClearPass Onboard with sponsorship

  C. Guest with sponsor approval

  D. Guest with self-registration

  Correct Answer: A

• Question 76:

  Which three items can be obtained from device profiling? (Choose three.)

  A. Device Location

  B. Device Type

  C. Device Family

  D. Device Category

  E. Device Health

  Correct Answer: ABD

• Question 77:

  Which enforcement actions are used in ClearPass to bounce a client? (Choose two.)

  A. Filter-ID Based

  B. Agent Enforcement

  C. VLAN Enforcement

  D. RADIUS CoA

  E. Session Notification

  Correct Answer: AB

• Question 78:

  Refer to the exhibit.

  

  Based on the self-registration customization, which statements are true? (Choose two.)

  A. The client's browser will submit the credentials in plain text to the controllers.

  B. The user will automatically be logged in when they submit the self-registration form.

  C. The HTTPS certificate on ClearPass has been changed to a wildcard certificate.

  D. The client's browser will submit the credentials encrypted, but over HTTP.

  E. The user will have to press the logon button to submit the credentials to the controller.

  Correct Answer: AB

• Question 79:

  How can Enforcement Policy rules be evaluated? (Choose two.)

  A. It is checked top down, as configured in the rules tab.

  B. All rules are checked, and all matches are used.

  C. If no rules match, the request is rejected.

  D. It is checked bottom up, as configured in the rules tab.

  E. All rules are checked, and the best match is used.

  Correct Answer: AC

• Question 80:

  Which collectors can help to distinguish between an iPhone and an iPad? (Choose two.)

  A. RADIUS

  B. MAC OUI

  C. TCP header capture

  D. HHTP

  E. IF-MAP

  Correct Answer: BE