HP HP Certifications HPE6-A68 Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  What is the purpose of the `Clock Skew Allowance' setting? (Select two.)

  A. to ensure server certificate validation does not fail due to client clock sync issues

  B. to set start time in client certificate to a few minutes before current time

  C. to adjust clock time on client device to a few minutes before current time

  D. to ensure client certificate validation does not fail due to client clock sync issues

  E. to set expiry time in client certificate to a few minutes longer than the default setting

  Correct Answer: D

  Clock Skew Allowance adds a small amount of time to the start and end of the client certificate's, not the server certificate's, validity period. This permits a newly issued certificate to be recognized as valid in a network where not all devices are

  perfectly synchronized.

  References:

  http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/EditingCASettings.htm

• Question 62:

  Refer to the exhibit.

  

  An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS. Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

  A. Onboard Post-Provisioning - Aruba

  B. Onboard Pre-Provisioning - Aruba

  C. Deny Access Profile

  D. Onboard Device Repository

  Correct Answer: A

• Question 63:

  Which device type supports Exchange ActiveSync configuration with Onboard?

  A. Linux laptop

  B. Mac OS X device

  C. Apple iOS device

  D. Windows laptop

  E. Android device

  Correct Answer: C

  Exchange ActiveSync configurations you define can be used in configuration profiles to automatically configure an email account on an iOS device.

  References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/CreateEditActive Sync.htm

• Question 64:

  Refer to the exhibit.

  

  Based on the Enforcement Policy configuration shown, which Enforcement Profile will an employee receive when connecting an IOS device to the network or the first time using EAP-PEAP?

  A. Deny Access Profile

  B. Onboard Device Repository

  C. Cannot be determined

  D. Onboard Post-Provisioning - Aruba

  E. Onboard Pre-Provisioning - Aruba

  Correct Answer: E

• Question 65:

  Refer to the exhibit.

  

  Based on the configuration for `maximum devices' shown, which statement accurately describes its settings?

  A. The user cannot Onboard any devices.

  B. It limits the total number of devices that can be provisioned by ClearPass.

  C. It limits the total number of Onboarded devices connected to the network.

  D. It limits the number of devices that a single user can Onboard.

  E. It limits the number of devices that a single user can connect to the network.

  Correct Answer: D

• Question 66:

  What is the certificate format PKCS #7, or .p7b, used for?

  A. Certificate Signing Request

  B. Binary encoded X.509 certificate

  C. Binary encoded X.509 certificate with public key

  D. Certificate with an encrypted private key

  E. Certificate chain

  Correct Answer: E

  The PKCS#7 or P7B format is usually stored in Base64 ASCII format and has a file extension of .p7b or .p7c. P7B certificates contain "-----BEGIN PKCS7-----" and "-----END PKCS7-----" statements. A P7B file only contains certificates and chain certificates, not the private key. Several platforms support P7B files including Microsoft Windows and Java Tomcat.

  References: https://community.arubanetworks.com/t5/Controller-Based-WLANs/Various-Certificate-Formats/ta-p/176548

• Question 67:

  An Android device goes through the single-SSID Onboarding process and successfully connects using EAP-TLS to the secure network. What is the order in which services are triggered?

  A. Onboard Authorization, Onboard Provisioning, Onboard Authorization

  B. Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization, Onboard Provisioning

  C. Onboard Provisioning, Onboard Authorization, Onboard Pre-Auth

  D. Onboard Provisioning, Onboard Authorization, Onboard Provisioning

  E. Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization

  Correct Answer: D

• Question 68:

  Which devices support Apple over-the-air provisioning? (Select two.)

  A. IOS 5

  B. Laptop running Mac OS X 10.8

  C. Laptop running Mac OS X 10.6

  D. Android 2.2

  E. Windows XP

  Correct Answer: AB

  Apple over-the-air provisioning is supported by IOS and OSX above version 10.6.

  References:

  https://community.arubanetworks.com/aruba/attachments/aruba/tkb@tkb/286/1/BYODwithClearPass_Cameron_Esdaile.pdf

• Question 69:

  Which authentication protocols can be used for authenticating Windows clients that are Onboarded? (Select two.)

  A. EAP-GTC

  B. PAP

  C. EAP-TLS

  D. CHAP

  E. PEAP with MSCHAPv2

  Correct Answer: CE

• Question 70:

  Refer to the exhibit.

  

  Based on the ClearPass and Aruba Controller configuration settings for Onboarding shown, which statement accurately describes an employee's new personal device connecting to the Onboarding network? (Select two.)

  A. Post-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

  B. Pre-Onboarding, the device will be redirected to the `Onboarding Page' Captive Portal.

  C. The BYOD-Provision role is a ClearPass internal role and exists in ClearPass.

  D. The device will not be redirected to any Onboarding page.

  E. Pre-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

  Correct Answer: BE

  You can pre-provision with the Aruba controller firewall role of BYOD-Provision. From the Firewall policies part of the exhibit, we see that the onboarding page is set to captive portal. References: https://community.arubanetworks.com/t5/Security/CP-OnBoard-not-redirecting-to-portal-on-single-SSID/td-p/284506