HP HP Certifications HPE6-A82 Questions & Answers

• Question 11:

  An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again.

  Which ClearPass features can be used to meet these requirements?

  A. Guest access with MAC caching

  B. Guest self-registration with sponsor approval

  C. Enforcement based on endpoint profiling

  D. ClearPass Onboard Portal

  Correct Answer: C

• Question 12:

  When joining ClearPass to an Active Directory (AD) domain, what information is required? (Choose two.)

  A. Fully Qualified Domain Name (FQDN) of the AD Domain Controller.

  B. ClearPass Policy Manager (CPPM) enterprise credentials.

  C. Domain Administrator credentials with at least read access.

  D. Cache Timeout value set to at least 10 hours.

  E. Domain User credentials with read-write access.

  Correct Answer: AC

• Question 13:

  Aruba self-registration with sponsorship is a solution best applied to which type of network?

  A. a large corporate environment with hundreds of contractors requiring wireless access to printers and internet but no other guest access is allowed

  B. a chain of auto part stores where employees are assigned mobile devices using a Mobile Device Manager (MDM) and public wireless is available for customers

  C. a hotel where hundreds of guests are checked in and out of the building daily that may want access to wireless internet

  D. a chain of coffee shops using in a public downtown area with a high amount of guest turnover needing access to public wireless

  Correct Answer: A

• Question 14:

  Which authentication method requires a client certificate?

  A. EAP-TLS

  B. Guest self-registration

  C. PEAP

  D. MAC Authentication

  Correct Answer: A

• Question 15:

  What needs to be configured for ClearPass use an enforcement rule base on client Data Cap?

  A. Enable Logging of Accounting Start-Stop packets.

  B. Interim Accounting on the Network Access Device (NAD).

  C. Make sure the Endpoint Profiling is configured.

  D. Enable Active Sessions in ClearPass Guest

  Correct Answer: B

• Question 16:

  Refer to the Endpoint in the screenshot.

  

  What are possible ways that it was profiled? (Choose two.)

  A. Exchange Plugging agent

  B. NAD ARP listening handler

  C. 3rd part MDM

  D. DNS fingerprinting

  E. Cisco Device Sensor

  Correct Answer: BC

• Question 17:

  What are benefits of using Network Device Groups in ClearPass? (Choose two.)

  A. Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group.

  B. Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to.

  C. A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group.

  D. Another way to add a customizable "attribute" field to reference when processing authentication requests.

  E. Can apply to both Network Access Devices (NADs) as well as client machines as a way to filter authentication requests.

  Correct Answer: AD

• Question 18:

  Refer to the exhibit.

  

  What is true regarding leaving the indicated option "Use cached Roles and Posture attributes from previous sessions" unchecked?

  A. A posture change applied to an endpoint is going to be lost each time the client re-authenticates.

  B. The service will make the enforcement decision based upon the updated Posture regardless of caching.

  C. Posturing will no longer be evaluated in determining the enforcement policy for current or future sessions.

  D. Cached posture results are no longer stored by ClearPass but instead are saved to the endpoint of the client.

  Correct Answer: A

• Question 19:

  When using Guest Authentication with MAC Caching service template, which statements are true? (Choose two.)

  A. The guest authentication is provided better security than without using MAC caching.

  B. The endpoint status of the client will be treated as "known" the first time the client associates to the network.

  C. Which wireless SSID and wireless controller must be indicated when configuring the template.

  D. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.

  Correct Answer: AC

• Question 20:

  Which most accurately describes the "Select All Matches" rule evaluation algorithm in Enforcement Policies?

  A. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.

  B. All rules are checked, and if there is no match, no Enforcement profile is applied.

  C. All rules are checked for any matching rules and their respective Enforcement profiles are applied.

  D. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied, along with the default Enforcement profile.

  Correct Answer: C