HP HP Certifications HPE6-A68 Questions & Answers

• Question 31:

  What does a Windows client need for it to perform EAS-PEAP successfully when `Validate server Certificate' is not enabled?

  A. Pre-shared key

  B. Client Certificate

  C. WPA2-PSK

  D. Username and Password

  E. Server Certificate

  Correct Answer: D

• Question 32:

  Refer to the exhibit.

  

  Based on the information shown on a client's laptop, what will happen next?

  A. The web login page will be displayed.

  B. The client will send a NAS authentication request to ClearPass.

  C. ClearPass will send a NAS authentication request to the NAD.

  D. the NAD will send an authentication request to ClearPass.

  E. The user will be presented with a self-registration receipt.

  Correct Answer: D

• Question 33:

  A client's authentication is failing and there are no entries in the ClearPass Access tracker. What is a possible reason for the authentication failure?

  A. The user account has expired.

  B. The client used a wrong password.

  C. The shared secret between the NAD and ClearPass does not match.

  D. The user's certificate is invalid.

  E. The user is not found in the database.

  Correct Answer: C

• Question 34:

  Refer to the exhibit.

  

  Based on the Enforcement Policy configuration shown, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

  A. EMPLOYEE_VLAN

  B. RestrictedACL

  C. Deny Access Profile

  D. HR VLAN

  E. Remote Employee ACL

  Correct Answer: C

• Question 35:

  Why is a terminate session enforcement profile used during posture checks with 802.1x authentication?

  A. To send a RADIUS CoA message from the ClearPass server to the client

  B. To disconnect the user for 30 seconds when they are in an unhealthy posture state

  C. To blacklist the user when they are in an unhealthy posture state

  D. To force the user to re-authenticate and run through the service flow again

  E. To remediate the client applications and firewall do that updates can be installed

  Correct Answer: A

• Question 36:

  Which checks are made with Onguard posture evaluation in ClearPass? (Select three.)

  A. Registry keys

  B. EAP TLS certificate validity

  C. Client role check

  D. Peer-to-peer application checks

  E. Operating System version

  Correct Answer: ADE

• Question 37:

  Which collectors can be used for device profiling? (Select two.)

  A. Username and Password

  B. ActiveSync Plugin

  C. Client's role on the controller

  D. Onguard agent

  E. Active Directory Attributes

  Correct Answer: BD

• Question 38:

  Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

  A. DHCP server IP

  B. Active Directory IP

  C. Switch IP

  D. Microsoft NPS server IP

  E. ClearPass server IP

  Correct Answer: E

• Question 39:

  A guest self-registered through a Publisher's Register page. Which statement accurately describes how the guest's account will be stored?

  A. It will be stored in the Publisher's guest user repository and the Subscriber's Onboard user repository.

  B. It will be stored in the Publisher's local user repository and the Subscriber's guest user repository.

  C. It will be stored in the Publisher's guest user repository permanently, but only for 14 days in the Subscriber's guest user repository,

  D. It will be stored in both the Publisher's guest user repository and the Subscriber's guest user repository.

  E. It will be stored in the Publisher's guest user repository, but not the Subscriber's.

  Correct Answer: D

• Question 40:

  What is a benefit of ClearPass Onguard?

  A. It enables organizations to run advanced endpoint posture assessments.

  B. It allows a receptionist in a hotel to create accounts for guest users.

  C. It allows employees to self-provision their personal devices on the corporate network.

  D. It offers an easy way for users to self-configure their devices to support 802.1X authentication on wired and wireless networks.

  E. It allows employees to create temporary accounts for Wi-Fi access.

  Correct Answer: A