HP HP Certifications HPE6-A68 Questions & Answers

• Question 51:

  Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

  A. when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

  B. when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

  C. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

  D. when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

  E. when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

  Correct Answer: C

• Question 52:

  Refer to the exhibit.

  

  What information can be drawn from the audit row detail shown? (Select two.)

  A. radius01 was deleted from the list of authentication sources.

  B. The policy service was moved to position number 4.

  C. radius01 was moved to position number 4.

  D. The policy service was moved to position number 3.

  E. raduis01 was added as an authentication source.

  Correct Answer: AB

• Question 53:

  Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

  A. Software image

  B. Backup files

  C. Log files

  D. Device fingerprint dictionaries

  E. Posture dictionaries

  Correct Answer: BC

• Question 54:

  Refer to the exhibit.

  

  The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network. What is the cause of this error?

  A. The controller's shared secret used during the certificate exchange is incorrect.

  B. The NAS source interface IP is incorrect.

  C. The client sent an incorrect shared secret for the 802.1X authentication.

  D. The controller used an incorrect shared secret for the RADIUS authentication.

  E. The client's shared secret used during the certificate exchange is incorrect.

  Correct Answer: D

• Question 55:

  Refer to the exhibit.

  

  An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ. Which role is assigned to the user in ClearPass?

  A. HR Local

  B. [Guest]

  C. [Employee]

  D. Linux User

  E. Executive

  Correct Answer: E

  The conditions of the Executive Role is met.

• Question 56:

  Refer to the exhibit.

  

  Under which circumstances will ClearPass select the Policy Service named `Test device group'?

  A. when the NAD belongs to an Airware device group HQ

  B. when the ClearPass IP address is part of the device group HQ

  C. when the Aruba access point that the client is associated to is part of the device group HQ

  D. when an end user IP address is part of the device group HQ

  E. when the IP address of the NAD is part of the device group HQ

  Correct Answer: E

• Question 57:

  Which components of a ClearPass is mandatory?

  A. Authorization Source

  B. Profiler

  C. Role Mapping Policy

  D. Enforcement

  E. Posture

  Correct Answer: D

  An enforcement policy is a way to organize enforcement profiles and apply them to users or Policy Manager roles. Based on the enforcement policy assigned to the role, enforcement profiles are applied to the service request.

• Question 58:

  What does Authorization allow users to do in a Policy Service?

  A. To use attributes in databases in role mapping and Enforcement.

  B. To use attributes stored in databases in Enforcement only, but not role mapping.

  C. To use attributes stored in external databases for Enforcement, but not internal databases.

  D. To use attributes stored in databases in role mapping only, but not Enforcement.

  E. To use attributes sored in internal databases for Enforcement, but not external databases.

  Correct Answer: A

• Question 59:

  Refer to the exhibit.

  

  Based on the configuration for the client's certificate private key as shown, which statements accurately describe the settings? (Select two.)

  A. The private key is stored in the ClearPass server.

  B. The private key is stored in the user device.

  C. The private key for TLS client certificates is not created.

  D. More bits in the private key will increase security.

  E. More bits in the private key will reduce security.

  Correct Answer: BD

• Question 60:

  Refer to the exhibit.

  

  Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

  A. EAP-TLS Authentication will be unaffected

  B. The user can Onboard their device again

  C. A new device certificate will be automatically pushed out to the device

  D. The user cannot Onboard their device again

  E. EAP-TLS Authentication will fail

  Correct Answer: DE

  The Device Management (View by Device) page lists all devices and lets you manage the devices' access to the network. For each device, you can allow or deny network access. When you select the Deny option, a message advises you that any certificates associated with it will be revoked. The device cannot be re-enrolled as long as access is denied. To re-enroll the device, you must use this field to allow access again.

  References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/DeviceManagem ent.htm