HP HP Certifications HPE6-A81 Questions & Answers

• Question 1:

  Refer to the exhibit:

  

  

  

  You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password. Using the screenshots as a reference, how would you fix this issue?

  A. Check the network settings for the correct SSID name spelling.

  B. Change the network settings to use EAP-TLS for the authentication protocol.

  C. Install a public signed HTTPs web server certificate on the ClearPass server.

  D. Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method.

  Correct Answer: A

• Question 2:

  What is the Secure SSID {otherwise referred to as Single SSID) OnBoard deployment service workflow?

  A. OnBoard Provisioning RADIUS service, OnBoard Authorization RADIUS service. OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service

  B. OnBoard Provisioning RADIUS service, OnBoard Pre-Auth RADIUS service, OnBoard Authorization Application service. OnBoard Provisioning RADIUS service

  C. OnBoard Provisioning RADIUS service, OnBoard Pre-Auth Application service. OnBoard Authorization Application service, OnBoard Provisioning RADIUS service

  D. OnBoard Provisioning RADIUS service, OnBoard Authorization Application service, OnBoard Pre- Auth Application service, OnBoard Provisioning RADIUS service

  Correct Answer: A

• Question 3:

  Refer to the exhibit:

  

  

  

  

  You configured the 802 1 x service enforcement conditions with the Endpoint profiling data. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly. What is the cause of the issue?

  A. An additional authorization source should be configured for profiling to work.

  B. The enforcement policy conditions configured with profiling data are not correct.

  C. The enforcement policy rules evaluation algorithm Is not configured correctly.

  D. The option, use cached roles and posture from previous sessions should be enabled.

  Correct Answer: B

• Question 4:

  A customer has a ClearPass cluster deployment with one Publisher and one Subscriber configured as a Standby Publisher at the Headquarters DataCenter They also have a large remote site that is connected with an Aruba SD Branch solution over a two Mbps Internet connection. The Remote Site has two ClearPass servers acting as Subscribers. The solution implemented for the customer includes OnGuard, Guest Self Registration, and Employee 802. ix authentication. The client is complaining that users connecting to an IAP Clusters Guest SSID located at the Remote Site are experiencing a significant delay in accessing the Guest Captive Portal page. What could be a possible cause of this behavior?

  A. The configuration of the captive portal is pointing to a link located on one of the servers in the Headquarters

  B. The ClearPass Cluster has no zones defined and the guest captive portal request is being redirected to the Publisher

  C. The guest page is not optimized to work with the client browser and a proper theme should be applied

  D. The captive portal page was only created on the Publisher and requests are getting redirected to a Subscriber

  Correct Answer: A

• Question 5:

  Refer to the exhibit: What are valid options for Network Access Device Settings? (Select two.)

  

  A. You can configure SNMP Read Settings to monitor the load of a NAD in order not to overload it with the requests.

  B. In CLI settings, you can define the access credentials and the command templates that will be used.

  C. You can configure SNMP Write Settings to send commands to the devices that do not support other methods.

  D. On the Attributes tab. you can enable the service to write attributes like Location and Device type based on policy.

  E. The OnConnect Enforcement allows you to enable specific ports that trigger Enforcement when any device connects.

  Correct Answer: DE

• Question 6:

  What type of EAP certificate are you able to use on ClearPass? (Select two.)

  A. Self signed, when all the clients are Onboarded with the same Root CA as the Self signed certificate.

  B. Private signed, when the clients are onboarded or are part of the organization domain.

  C. Private signed, when some clients are onboarded and some are not part of the organization.

  D. Public signed, when not all of the clients are part of the organization domain.

  E. Self signed, when all the clients are part of the organization domain.

  Correct Answer: CD

• Question 7:

  A customer has configured Onboard with Single SSID provision for Aruba IAP Windows devices work as expected but cannot get the Apple iOS devices to work. The Apple iOS devices automatically get redirected to a blank page and do not get the Onboard portal page. What would you check to fix the issue?

  A. Verify if the checkbox "Enable bypassing the Apple Captive Network Assistant" is checked.

  B. Verify if the Onboard URL is updated correctly in the external captive portal profile.

  C. Verify if Onboard Pre-Provisioning enforcement profile sends the correct Aruba user role.

  D. Verify if the external captive portal profile is enabled to use HTTPS with port 443.

  Correct Answer: B

• Question 8:

  A Customer has these requirements:

  *

  2.000 loT endpoints that use MAC authentication

  *

  6,000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication

  *

  1,000 guest endpoints at peak usage that use guest self-registration

  *

  1500 BYOD devices estimated as 3 devices per User (500 users)

  *

  2,500 endpoints that have OnGuard installed and connect on a daily basis

  What licenses should be installed to meet customer requirements?

  A. 11,500 Access, 500 Onboard, 2,500 Onguard

  B. 13.000 Access, 1.500 Onboard, 2,500 Onguard

  C. 11,500 Access, 1,500 Onboard, 2.500 Onguard

  D. 9,000 Access, 500 Onboard. 2.500 Onguard

  Correct Answer: C

• Question 9:

  A customer would like to allow only the AD users with the "Manager" title from the "HQ" location to

  Onboard their personal devices. Any other AD users should not be authorized to pass beyond the initial

  device provisioning page.

  Which Onboard service will you use to implement this requirement?

  A. Onboard CP login service

  B. Onboard Authorization service

  C. Onboard Provisioning service

  D. Onboard Pre-Auth service

  Correct Answer: A

• Question 10:

  Refer to the exhibit: A customer has configured a Guest Self registration page for their Cisco Wireless network with the settings shown. What should be changed in order to successfully authenticate guests users?

  

  

  A. Secure Login should use HTTP

  B. Change the Vendor Settings to Airespace Networks

  C. Change \he IP Address to the Cisco Controller DNS name

  D. Login Method should be Controller-initiated - using HTTPs form submit

  Correct Answer: C