March Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: netbudy65

HPE6-A68 Aruba Certified ClearPass Professional (ACCP) V6.7 Questions and Answers

Questions 4

Refer to the exhibit.

Which statement accurately reflects the status of the Policy Simulation test figure shown?

Options:

A.

The test verifies that a client with username test1 can authenticate using EAP-PEAP.

B.

Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

C.

Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

D.

The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

E.

The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

Buy Now
Questions 5

A customer would like to deploy ClearPass with these requirements:

-2000 devices need to be Onboarded

-2000 corporate devices need to run posture checks daily

-500 guest users need to authenticate each day using the web login feature

What is the license mix that customer will need to purchase?

Options:

A.

CP-HW-5k, 2500 ClearPass Enterprise

B.

CP-HW-25k, 4500 ClearPass Enterprise

C.

CP-HW-500, 2500 ClearPass Enterprise

D.

CP-HW-25k, 4000 ClearPass Enterprise

E.

CP-HW-5k, 4500 ClearPass Enterprise

Buy Now
Questions 6

Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses “Deny Access to this Device? (Select two.)

Options:

A.

EAP-TLS Authentication will be unaffected

B.

The user can Onboard their device again

C.

A new device certificate will be automatically pushed out to the device

D.

The user cannot Onboard their device again

E.

EAP-TLS Authentication will fail

Buy Now
Questions 7

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.

Which action will ClearPass take based on this Enforcement Profile?

Options:

A.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the user to end the user’s session after this time is up.

B.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

C.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user’s session after this time is up.

D.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

E.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

Buy Now
Questions 8

Which database in the Policy Manager contains the device attributes derived by profiling?

Options:

A.

Endpoints Repository

B.

Client Repository

C.

Local Users Repository

D.

Onboard Devices Repository

E.

Guest User Repository

Buy Now
Questions 9

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.

How should the service be set up in the Policy Manager for this network?

Options:

A.

Guest User Repository and Active Directory server both as authentication sources

B.

Active Directory server as the authentication source, and Guest User Repository as the authorization source

C.

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

D.

Either the Guest User Repository or Active Directory server should be the single authentication source

E.

Guest User Repository as the authentication source and the Active Directory server as the authorization source

Buy Now
Questions 10

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.

Which action will ClearPass take based on the Enforcement Profile?

Options:

A.

It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

B.

It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

C.

It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user’s session after this time is up.

D.

It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user’s session after this time is up.

E.

It will send the session –Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

Buy Now
Questions 11

Refer to the exhibit.

Based on the Posture Policy configuration shown, above, which statement is true?

Options:

A.

This Posture Policy can only be applied to an 802.1x wired service not 802.1x wireless.

B.

This Posture Policy checks the health status of devices running Windows, Linux and Mac OS X.

C.

This Posture Policy can use either the persistent or dissolvable Onguard agent to obtain the statement of health.

D.

This Posture Policy checks for presence of a firewall application in Windows devices.

E.

This Posture Policy checks with a Windows NPS server for posture tokens.

Buy Now
Questions 12

Refer to the exhibit.

Based on the Aruba TACACS+ dictionary shown, how is the Aruba-Role attribute used?

Options:

A.

The Aruba-Admin-Role on the controller is applies to users using TACACS+ to login to the Policy Manager

B.

To assign different privileges to clients during 802.1X authentication

C.

To assign different privileges to administrators logging into an Aruba NAD

D.

It is used by ClearPass to assign TIPS roles to clients during 802.1X authentication

E.

To assign different privileges to administrators logging into ClearPass

Buy Now
Questions 13

Refer to the exhibit.

Which statements accurately describe the status of the Onboarded devices in the configuration for the network settings shown? (Select two.)

Options:

A.

They will connect to Employee_Secure SSID after provisioning.

B.

They will connect to Employee_Secure SSID for provisioning their devices.

C.

They will use WPA2-PSK with AES when connecting to the SSID.

D.

They will connect to secure_emp SSID after provisioning.

E.

They will perform 802.1X authentication when connecting to the SSID.

Buy Now
Questions 14

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Options:

A.

Static IP addresses are only allowed on the management port.

B.

Configuration of the data port is mandatory.

C.

Configuration on the management port is mandatory.

D.

Configuration of the data port if optional.

E.

Configuration of the management port is optional.

Buy Now
Questions 15

What does the Posture Token QUARANTINE imply?

Options:

A.

The client is compliant. However, there is an update available to remediate the client to HEALTHY state.

B.

The posture of the client is unknown.

C.

The client is infected and is a threat to other systems in the network.

D.

The client is out of compliance, but has HEALTHY state.

E.

The client is out of compliance.

Buy Now
Questions 16

Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

Options:

A.

radius01 was deleted from the list of authentication sources.

B.

The policy service was moved to position number 4.

C.

radius01 was moved to position number 4.

D.

The policy service was moved to position number 3.

E.

raduis01 was added as an authentication source.

Buy Now
Questions 17

Refer to the exhibit.

Which types of records will the report shown display?

Options:

A.

all RADIUS authentications from the 10.8.10.100 NAD to ClearPass

B.

all failed RADIUS authentications through ClearPass

C.

only Windows devices that have authenticated through the 10.8.10.100 NAD

D.

all successful RADIUS authentications through ClearPass

E.

all successful RADIUS authentications from the 10.8.10.100 NAD to ClearPass

Buy Now
Exam Code: HPE6-A68
Exam Name: Aruba Certified ClearPass Professional (ACCP) V6.7
Last Update: Mar 29, 2024
Questions: 116

PDF + Testing Engine

$130

Testing Engine

$95

PDF (Q&A)

$80