HP HP Certifications HPE6-A68 Questions & Answers

• Question 111:

  Which authorization servers are supported by ClearPass? (Select two.)

  A. Aruba Controller

  B. LDAP server

  C. Cisco Controller

  D. Active Directory

  E. Aruba Mobility Access Switch

  Correct Answer: BD

  Authentication Sources can be one or more instances of the following examples:

  1.

  Active Directory

  2.

  LDAP Directory

  3.

  SQL DB

  4.

  Token Server

  5.

  Policy Manager local DB

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 114 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 112:

  Refer to the exhibit.

  

  Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

  A. If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

  B. If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

  C. If the user is not found in the local user repository a reject message is sent back to the NAD.

  D. If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

  E. If the user is not found in the local user repository a timeout message is sent back to the NAD.

  Correct Answer: D

  Policy Manager looks for the device or user by executing the first filter associated with the authentication source.

  After the device or user is found, Policy Manager then authenticates this entity against this authentication source. The flow is outlined below:

  1.

  On successful authentication, Policy Manager moves on to the next stage of policy evaluation, which collects role mapping attributes from the authorization sources.

  2.

  Where no authentication source is specified (for example, for unmanageable devices), Policy Manager passes the request to the next configured policy component for this service.

  3.

  If Policy Manager does not find the connecting entity in any of the configured authentication sources, it rejects the request.

  References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 134 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

• Question 113:

  Which components can use Active Directory authorization attributes for the decision-making process? (Select two.)

  A. Profiling policy

  B. Certificate validation policy

  C. Role Mapping policy

  D. Enforcement policy

  E. Posture policy

  Correct Answer: CD

  C: Role Mappings Page - Rules Editor Page Parameters

  

  D: Enforcement Policy Attributes tab Parameters

  

  References:

  http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/identity/RoleMappingPolicies.html http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/

  CPPM_UserGuide/PolicySim/PS_Enforcement_Policy.htm

• Question 114:

  Refer to the exhibit.

  

  An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

  A. HR Local

  B. Remote Employee

  C. [Guest]

  D. Executive

  E. IOS Device

  Correct Answer: C

  None of the Listed Role Name conditions are met.

• Question 115:

  Refer to the exhibit.

  

  Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

  A. Only the attribute values of department and memberOf can be used in role mapping policies.

  B. The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.

  C. Only the attribute value of company can be used in role mapping policies, not the other attributes.

  D. The attribute values of department and memberOf are directly applied as ClearPass roles.

  E. Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

  Correct Answer: D

• Question 116:

  DRAG DROP

  Use the arrows to sort the steps to request a Policy Service on the left into the order they are performed on the right.

  Select and Place:

  

  Correct Answer: