HP HP Certifications HPE6-A68 Questions & Answers

• Question 21:

  Which use cases will require a ClearPass Guest application license? (Select two.)

  A. Guest device fingerprinting

  B. Guest endpoint health assessment

  C. Sponsor based guest user access

  D. Guest user self-registration for access

  E. Guest personal device onboarding

  Correct Answer: CD

• Question 22:

  Refer to the exhibit.

  

  Which statements accurately describe the status of the Onboarded devices in the configuration for the network settings shown? (Select two.)

  A. They will connect to Employee_Secure SSID after provisioning.

  B. They will connect to Employee_Secure SSID for provisioning their devices.

  C. They will use WPA2-PSK with AES when connecting to the SSID.

  D. They will connect to secure_emp SSID after provisioning.

  E. They will perform 802.1X authentication when connecting to the SSID.

  Correct Answer: DE

• Question 23:

  An organization implements dual SSID Onboarding. The administrator used the Onboard service template to create services for dual SSID Onboarding. Which statement accurately describes the outcome?

  A. The Onboard Provisioning service is triggered when the user connects to the provisioning SSID to Onboard their device.

  B. The Onboard Authorization service is triggered when the user connects to the secure SSID.

  C. The Onboard Authorization service is triggered during the Onboarding process.

  D. The device connects to the secure SSID for provisioning.

  E. The Onboard Authorization service is never triggered.

  Correct Answer: C

• Question 24:

  In a single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

  A. Active Directory Attributes

  B. Network Access Device used

  C. Endpoint OS Category

  D. Onguard Agent used

  E. Authentication Method used

  Correct Answer: E

• Question 25:

  Refer to the exhibit.

  

  Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

  A. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

  B. The device will be disconnected from and reconnected to the network after Onboarding is completed.

  C. The device's onboard authorization request will be denied.

  D. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP- TLS authentication is performed.

  E. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

  Correct Answer: B

• Question 26:

  When is the RADIUS server certificate used? (Select two.)

  A. During dual SSID onboarding, when the client connects to the Guest network

  B. During EAP-PEAP authentication in single SSID onboarding

  C. During post-Onboard EAP-TLS authentication, when the client verifies the server certificate

  D. During Onboard Web Login Pre-Auth, when the client loads the Onboarding web page

  E. During post-Onboard EAP-TLS authentication, when the server verifies the client certificate

  Correct Answer: CD

• Question 27:

  Refer to the exhibit.

  

  An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD. Which roles are assigned to the user in ClearPass? (Select two.)

  A. Executive

  B. iOS Device

  C. Vendor

  D. Remote Employee

  E. HR Local

  Correct Answer: DE

• Question 28:

  If the "Alerts" tab in an access tracker entry shows the following error message: "Access denied by policy", what could be a possible cause for authentication failure?

  A. Configuration of the Enforcement Policy.

  B. An error in the role mapping policy.

  C. Failure to select an appropriate authentication method for the authentication request.

  D. Implementation of a firewall policy on ClearPass.

  E. Failure to find an appropriate service to process the authentication request.

  Correct Answer: A

• Question 29:

  Refer to the exhibit.

  

  Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

  A. Full Access VLAN

  B. Employee VLAN

  C. Internet VLAN

  D. Deny Access

  Correct Answer: B

• Question 30:

  Refer to the exhibit.

  

  What can be concluded from the Access Tracker output shown?

  A. The client used incorrect credentials to authenticate to the network.

  B. ClearPass does not have a service enabled for MAC authentication.

  C. The client MAC address is not present in the Endpoints table in the CrearPass database.

  D. The RADIUS client on the Windows server failed to categorize the service correctly.

  E. The client wireless profile is incorrectly setup.

  Correct Answer: B