HP HP Certifications HPE6-A68 Questions & Answers

• Question 71:

  A customer would like to deploy ClearPass with these requirements:

  between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS should allow for up to 1000 employee devices to be should allow up to 100 guest users each day to authenticate using the web login feature What is the license mix that customer will need to purchase?

  A. CP-HW-2k, 1000 Onboard, 100 Guest

  B. CP-HW-500, 1000 Onboard, 100 Guest

  C. CP-HW-5k, 2500 Enterprise

  D. CP-HW-5k, 1000 Enterprise

  E. CP-HW-5k, 100 Onboard, 100 Guest

  Correct Answer: C

• Question 72:

  An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop. Which licenses are consumed in this scenario?

  A. 1 Policy Manager license, 1 Onboard License

  B. 2 Policy Manager licenses, 1 Onguard License

  C. 1 Policy Manager license, 1 Profile License

  D. 2 Policy Manager licenses, 2 Onguard licenses

  E. 1 Policy Manager license, 1 Onguard License

  Correct Answer: E

• Question 73:

  A customer would like to deploy ClearPass with these requirements:

  every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS every Friday, a meeting with business partners takes place and an additional 50 devices need to authenticate using Web Login Guest Authentication

  What should the customer do regarding licenses? (Select two.)

  A. When counting policy manager licenses, include the additional 50 business partner devices.

  B. When counting policy manager licenses, exclude the additional 50 business partner devices.

  C. Purchase Onboard licenses.

  D. Purchase guest licenses.

  E. Purchase Onguard licenses.

  Correct Answer: AC

• Question 74:

  An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network. How many licenses does the employee consume?

  A. 1 Policy Manager license, 2 Guest Licenses

  B. 2 Policy Manager licenses, 1 Onboard License

  C. 1 Policy Manager license, 1 Onboard License

  D. 1 Policy Manager license, 1 Guest License

  E. 2 Policy Manager licenses, 2 Onboard Licenses

  Correct Answer: B

• Question 75:

  Which licenses are included in the built-in Starter kit for ClearPass?

  A. 10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

  B. 25 ClearPass Profiler licenses

  C. 25 ClearPass Enterprise licenses

  D. 10 ClearPass Enterprise licenses

  E. 25 ClearPass Redundancy licenses

  Correct Answer: C

  All CPPM's comes bundled with 25 Enterprise application licenses so you can test the functionality of the Applications as this license can be used for any of them.

  References: http://community.arubanetworks.com/t5/Security/ClearPass-licensing-explained-August-MHC/td-p/195719

• Question 76:

  Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

  A. Static IP addresses are only allowed on the management port.

  B. Configuration of the data port is mandatory.

  C. Configuration on the management port is mandatory.

  D. Configuration of the data port if optional.

  E. Configuration of the management port is optional.

  Correct Answer: CD

  The Management port (ethernet 0) provides access for cluster administration and appliance maintenance using the WebUI, CLI, or internal cluster communication. This configuration is mandatory. The configuration of the data port is optional. If this port is not configured, requests are redirected to the Management port.

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/1%20About%20ClearPass/Hardware_Appliance.htm

• Question 77:

  ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass. What will be the outcome of this state?

  A. RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.

  B. During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.

  C. RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.

  D. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

  E. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

  Correct Answer: D

• Question 78:

  A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers. Which statements accurately describe next steps? (Select two.)

  A. The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

  B. A new Virtual IP address should be created for each NAD.

  C. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

  D. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

  E. The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

  Correct Answer: DE

  In an Aruba network, APs are controlled by a controller. The APs tunnel all data to the controller for processing, including encryption/decryption and bridging/forwarding data. Local controller redundancy provides APs with failover to a backup

  controller if a controller becomes unavailable. Local controller redundancy is provided by running VRRP between a pair of controllers. The APs are then configured to connect to the "virtual-IP" configured for the VRRP instance.

  References:

  http://www.arubanetworks.com/techdocs/ArubaOS_64x_WebHelp/Content/ArubaFrameStyles/VRRP/Redundancy_Parameters.htm

• Question 79:

  Refer to the exhibit.

  

  A customer wants to enable Publisher redundancy.

  Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

  A. Subscriber in the main data center

  B. Publisher in the regional office

  C. Any of the other three Publishers

  D. Publisher in the mid-size branch

  E. Publisher in the DMZ

  Correct Answer: A

  ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.

  References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Standby_publisher.htm

• Question 80:

  Refer to the exhibit.

  

  Which statements accurately describe the cp82 ClearPass node? (Select two.)

  A. It becomes the Publisher when the primary Publisher fails.

  B. It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

  C. It operates as a Publisher in a separate cluster when the Publisher is active.

  D. It operates as a Subscriber when the Publisher is active.

  E. It stays as a Subscriber when the Publisher fails.

  Correct Answer: AD

  ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the

  Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.

  When a Publisher failure is detected, the designated subscriber node is promoted to active Publisher status.

  References:

  http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Standby_publisher.htm