HP HP Certifications HPE6-A68 Questions & Answers

• Question 41:

  Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

  A. Configuration of the management port is optional.

  B. Configuration of the management port is mandatory.

  C. Configuration of the data port is mandatory.

  D. Configuration of the data port is optional.

  E. Static IP addresses are only allowed on the management port, not the data port.

  Correct Answer: BD

• Question 42:

  Refer to the exhibit.

  

  Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully using connection protocol WEBAUTH?

  A. Deny Access

  B. Employee VLAN

  C. Internet VLAN

  D. Full Access VLAN

  Correct Answer: B

• Question 43:

  Refer to the exhibit.

  

  Which types of records will the report shown display?

  A. all RADIUS authentications from the 10.8.10.100 NAD to ClearPass

  B. all failed RADIUS authentications through ClearPass

  C. only Windows devices that have authenticated through the 10.8.10.100 NAD

  D. all successful RADIUS authentications through ClearPass

  E. all successful RADIUS authentications from the 10.8.10.100 NAD to ClearPass

  Correct Answer: A

• Question 44:

  Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

  A. Username and Password

  B. Pre-shared key

  C. WPA2-PSK

  D. Server Certificate

  E. Client Certificate

  Correct Answer: DE

  When you use EAP with a strong EAP type, such as TLS with smart cards or TLS with certificates, both the client and the server use certificates to verify their identities to each other. Certificates must meet specific requirements both on the server and on the client for successful authentication. References: https://support.microsoft.com/en-us/help/814394/certificate-requirements-when-you-use-eap-tls-or-peap-with-eap-tls

• Question 45:

  Refer to the exhibit.

  

  Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting `Validate server certificate'?

  A. The server and client will perform an HTTPS SSL certificate exchange.

  B. The client will verify the server certificate against a trusted CA.

  C. The client will send its private key to the server for verification.

  D. The server will send its private key to the client for verification.

  E. The client will send its certificate to the server for verification.

  Correct Answer: B

• Question 46:

  What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

  A. to audit client authentications

  B. to display changes made to the ClearPass configuration

  C. to display the entire configuration of the ClearPass Policy Manager

  D. to audit the network for PCI compliance

  E. to display system events like high CPU usage.

  Correct Answer: B

• Question 47:

  Refer to the exhibit.

  

  Which statement accurately reflects the status of the Policy Simulation test figure shown?

  A. The test verifies that a client with username test1 can authenticate using EAP-PEAP.

  B. Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

  C. Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

  D. The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

  E. The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

  Correct Answer: E

• Question 48:

  What is the purpose of RADIUS CoA (RFC 3576)?

  A. to force the client to re-authenticate upon roaming to a new Controller

  B. to apply firewall policies based on authentication credentials

  C. to validate a host MAC address against a whitelist or a blacklist

  D. to authenticate users or devices before granting them access to a network

  E. to transmit messages to the NAD/NAS to modify a user's session status

  Correct Answer: E

  CoA messages modify session authorization attributes such as data filters. References: https://tools.ietf.org/html/rfc3576

• Question 49:

  Refer to the exhibit.

  

  An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown. What is a possible reason for the ErrorCode `Failed to classify request to service' shown?

  A. The user failed authentication due to an incorrect password.

  B. ClearPass could not match the authentication request to a service, but the user passed authentication.

  C. ClearPass service authentication sources were not configured correctly.

  D. The NAD did not send the authentication request.

  E. ClearPass service rules were not configured correctly.

  Correct Answer: E

• Question 50:

  What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

  A. the ClearPass server must have the network device added as a valid NAD

  B. the ClearPass server certificate must be installed on the NAD

  C. a matching shared secret must be configured on both the ClearPass server and NAD

  D. an NTP server needs to be set up on the NAD

  E. a bind username and bind password must be provided

  Correct Answer: AC