HP HP Certifications HPE6-A82 Questions & Answers

• Question 41:

  Refer to the exhibit.

  

  When creating a new ClearPass Service, the [Time Source] has been added as an authorization source. What time source is ClearPass referencing?

  A. the ClearPass server where Insight Master has been enabled

  B. the local clock of the ClearPass server doing the authentication

  C. the local time setting found on the authenticating client machine

  D. the NTP (Network Time Protocol) source indicated in the Cluster settings

  Correct Answer: C

• Question 42:

  Refer to the exhibit.

  

  What are two consequences of the Cache Timeout being set to 36000 seconds? (Choose two.)

  A. ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

  B. Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.

  C. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

  D. A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended.

  E. On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

  Correct Answer: AC

• Question 43:

  When is it appropriate to use the built-in Local user database in ClearPass?

  A. In a public-facing guest network environment where the guests are prompted to self-register.

  B. In small-business environments where the user accounts rarely change and new accounts are uncommon.

  C. In a hospitality deployment for guest accounts created and managed by staff.

  D. In a large campus environment where Students and Contractors account for 35.000 entries that change weekly.

  Correct Answer: D

  Reference: https://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/local-userdb.htm

• Question 44:

  What is a good collector type used for ClearPass to discover devices with static IP addresses?

  A. DHCP Collectors

  B. ClearPass Air Monitors

  C. Active Collectors

  D. Network Functions

  Correct Answer: D

  Reference: https://www.arubanetworks.com/techdocs/ClearPass/6.7/PolicyManager/Content/CPPM_UserGuide/PolicyProfile/Collectors.htm

• Question 45:

  Which ClearPass feature assesses endpoint context and client device type?

  A. Profiling

  B. Captive Portal

  C. Onboard

  D. Posture

  Correct Answer: A

  Reference: https://www.arubanetworks.com/techdocs/ClearPass/6.7/Aruba_DeployGd_HTML/Content/About%20ClearPass/About_ClearPass.htm

• Question 46:

  When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

  A. When you want to match Active Directory attributes directly to an enforcement policy.

  B. When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device.

  C. When you want to translate and combine Active Directory attributes into ClearPass roles.

  D. When you want to enable attributes as roles directly without combining multiple attributes.

  Correct Answer: A

• Question 47:

  What is a function of the posture token in ClearPass OnGuard? (Choose two.)

  A. Identifies clients that are not security compliant.

  B. Initiates the Auto-Remediation process.

  C. Indicates the Health Status of the Client.

  D. Denies access to unhealthy clients.

  E. Controls access to network resources.

  Correct Answer: CD

  Reference: https://docplayer.net/18755148-Clearpass-onguard-configuration-guide.html (3)

• Question 48:

  What is the purpose of service rules in ClearPass?

  A. selects the Enforcement Profiles used in a service

  B. selects the Service to process a request

  C. selects the Authentication Source for the client

  D. selects the Posture Policy used with OnGuard

  Correct Answer: C

• Question 49:

  Which fingerprint collectors can help to distinguish between an iPhone and an iPad? (Choose two.)

  A. SNMP

  B. IF-MAP

  C. MAC OUI

  D. TCP header capture

  E. HTTP

  Correct Answer: BC

• Question 50:

  Sponsorship has been enabled on the guest network. A guest user connects and completes the self-registration form indicating a valid sponsor. The guest then clicks submit.

  What is the current state of the guest account?

  A. The guest account is created in an enabled state with the "Log In" button functional.

  B. The guest account is created in disabled state, the "Log In" button will appear only after the sponsor approval process is completed.

  C. The guest account is created in a disabled state with the "Log In" button grayed out.

  D. The guest account is not yet created and remains in a disabled state. There is not "Log In" button yet displayed.

  Correct Answer: B