HP HP Certifications HPE6-A82 Questions & Answers

• Question 31:

  Which are valid enforcement profile types? (Choose two.)

  A. ClearPass Entity Update Enforcement

  B. Aruba Script Enforcement

  C. Policy Service Enforcement

  D. RADIUS Change of Authorization (CoA)

  Correct Answer: AD

• Question 32:

  Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?

  A. When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information.

  B. Because DHCP fingerprinted is a Layer-3 function, it cannot be used with an 802.1X authentication service.

  C. The client needs to connect to an open network first to be profiled, then shifted to the secure 802.1x network.

  D. The client needs to be granted limited access before the enforcement policy can take into account the device type.

  Correct Answer: A

• Question 33:

  Which configuration options are necessary to add a Network Access Device into the ClearPass Policy Manager? (Choose two.)

  A. HTTPS certificate

  B. ClearPass Admin Password

  C. CLI Console Password

  D. NAD IP Address

  E. Shared Secret

  Correct Answer: DE

• Question 34:

  Which two are required to add a Network Access Device (NAD) into ClearPass? (Choose two.)

  A. HTTPS certificate

  B. NAD IP address

  C. ClearPass Admin login credentials

  D. Shared Secret

  E. SSH password

  Correct Answer: BD

• Question 35:

  Which option supports DHCP profiling for devices in a network?

  A. DHCP profiling is enabled on ClearPass by default; configuration of DHCP relay on the Network Access Device (NAD) is not required.

  B. Configuring DHCP relay on ClearPass in order to allow the client to receive DHCP after being profiled.

  C. Enabling the DHCP server to profile endpoints and forward the meta-data to ClearPass.

  D. Enabling DHCP relay on Network Access Devices (NADs) to forward DHCP requests to ClearPass.

  Correct Answer: AD

• Question 36:

  Refer to the exhibit.

  

  A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server.

  Based on this service configuration, which service will be triggered?

  A. No service will be triggered

  B. Service Three

  C. Service Two

  D. Service One

  Correct Answer: B

• Question 37:

  What is true regarding Posturing and Profiling?

  A. Profiling describes categorizing the user based on their department while Posturing validates the user as authenticated.

  B. Profiling is the act of identifying the endpoint type while Posturing is assigning a status as to the health of the endpoint.

  C. Posturing and Profiling are role assignments in ClearPass used internally to map to enforcement policies.

  D. Both Posturing and Profiling describe the same thing; what is the health of the client endpoint?

  Correct Answer: D

• Question 38:

  What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

  A. Client attempts will fail without an additional Authentication method applied.

  B. All clients with unknown endpoints will be granted guest access regardless of authorization.

  C. All clients with known endpoints will be granted guest access regardless of authorization.

  D. This removes the reliance on the known or unknown status for MAC authentication.

  Correct Answer: D

  Reference: https://www.arubanetworks.com/techdocs/Instant_83_WebHelp/Content/Instant_UG/Authentication/AuthenticationMethods.htm

• Question 39:

  Refer to the exhibit.

  

  Which user authentication request will match the service rules of the Policy Service shown?

  A. a wireless user connection would fail because of miss-configured service rules

  B. a wireless user connected to any SSID named "CORP"

  C. a wireless user connecting to any SSID on an Aruba Controller

  D. a wireless user connecting to an Aruba IAP on the SSID "CORP"

  Correct Answer: D

• Question 40:

  What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

  A. ClearPass will validate the user credentials, then, for the duration of the cache, ClearPass will just fetch account attributes.

  B. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.

  C. ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes.

  D. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials.

  Correct Answer: B

  Reference: https://community.arubanetworks.com/blogs/arunkumar1/2020/10/20/what-is-the-difference-between-authentication-cache-timeout-and-machine-authentication-cache-timeout