Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
HP
HPE Aruba Certified
HPE6-A68
Aruba Certified ClearPass Professional (ACCP) 6.7 Questions and Answers

Pass the HPE Aruba Certified HPE6-A68 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam HPE6-A68 Premium Access

View all detail and faqs for the HPE6-A68 exam

Go to Exam

819 Students Passed

91% Average Score

94% Same Questions

Viewing page 2 out of 4 pages

Viewing questions 11-20 out of questions

Questions # 11:

Refer to the exhibit.

Question # 11

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome when ‘Automatically use my Windows logon name and password’ are selected?

Options:

The client will use machine authentication.

The client’s Windows login username and password will be sent inside a certificate to the Active Directory server.

The client’s Windows login username and password will be sent to the Authentication server.

The client will need to re-authenticate every time they connect to the network.

The client will prompt the user to enter the logon username and password.

Answer

Questions # 12:

Refer to the exhibit.

Question # 12

Which statements accurately describe the cp82 ClearPass node? (Select two.)

Options:

It becomes the Publisher when the primary Publisher fails.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

It operates as a Publisher in a separate cluster when the Publisher is active.

It operates as a Subscriber when the Publisher is active.

It stays as a Subscriber when the Publisher fails.

Answer

A, D

Explanation

ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.

When a Publisher failure is detected, the designated subscriber node is promoted to active Publisher status.

References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Standby_publisher.htm

Questions # 13:

Refer to the exhibit.

Question # 13

Based on the Access Tracker output for the user shown, which statement describes the status?

Options:

The Aruba Terminate Session enforcement profile as applied because the posture check failed.

A Healthy Posture Token was sent to the Policy Manager.

A RADIUS-Access-Accept message is sent back to the Network Access Device.

The authentication method used is EAP-PEAP.

A NAP agent was used to obtain the posture token for the user.

Answer

Explanation

We see System Posture Status: HEALTHY(0)

End systems that pass all SHV tests receive a Healthy Posture Token, if they fail a single test they receive a Quarantine Posture Token.

References: CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 13

https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf

Questions # 14:

When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

Options:

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

Answer

Explanation

A service running in CPPM periodically polls MDM servers using their exposed APIs. Device attributes obtained from MDM are added as endpoint tags. Profiler related attributes are send to profiler which uses these attributes to derive final profile.

References: ClearPass Profiling TechNote (2014), page 23

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

Questions # 15:

Which statement is true about the configuration of a generic LDAP server as an External Authentication server in ClearPass? (Choose three.)

Options:

Generic LDAP Browser can be used to search the Base DN.

An administrator can customize the selection of attributes fetched from an LDAP server.

The bind DN can be in the administrator@domain format.

A maximum of one generic LDAP server can be configured in ClearPass.

A LDAP Browser can be used to search the Base DN.

Answer

A, B, E

Questions # 16:

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Options:

Configuration of the management port is optional.

Configuration of the management port is mandatory.

Configuration of the data port is mandatory.

Configuration of the data port is optional.

Static IP addresses are only allowed on the management port, not the data port.

Answer

B, D

Questions # 17:

A guest self-registered through a Publisher’s Register page.

Which statement accurately describes how the guest’s account will be stored?

Options:

It will be stored in the Publisher’s guest user repository and the Subscriber’s Onboard user repository.

It will be stored in the Publisher’s local user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository permanently, but only for 14 days in the Subscriber’s guest user repository,

It will be stored in both the Publisher’s guest user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository, but not the Subscriber’s.

Answer

Questions # 18:

Refer to the exhibit.

Question # 18

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an email request sent to the sponsor?

Options:

after ‘Guest Role (7)’

after ‘Login Message page (5)’

after ‘Submit form (3)’

after ‘Automated NAS login (6)’

after ‘Redirects (1)’

Answer

Explanation

There's the Self Service part of provisioning one's information.

Then the sponsor/operator part to confirm that guest is valid.

Then the enablement via the sponsor/operator clicking 'confirm'.

References: https://community.arubanetworks.com/t5/Security/Guest-Captive-Portal-sponsor-approval-architecture/td-p/267625

Questions # 19:

Refer to the exhibit.

Question # 19

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad? (Select two.)

Options:

HTTP User-Agent

SNMP

DHCP fingerprinting

SmartDevice

Onguard Agent

Answer

A, C

Explanation

HTTP User-Agent

In some cases, DHCP fingerprints alone cannot fully classify a device. A common example is the Apple family of smart devices; DHCP fingerprints cannot distinguish between an Apple iPad and an iPhone. In these scenarios, User-Agent strings sent by browsers in the HTTP protocol are useful to further refine classification results.

User-Agent strings are collected from:

* ClearPass Guest

* ClearPass Onboard

* Aruba controller through IF-MAP interface

Note: Collectors are network elements that provide data to profile endpoints.

The following collectors send endpoint attributes to Profile:

* DHCP

DHCP snooping

Span ports

* ClearPass Onboard

* HTTP User-Agent

*MAC OUI – Acquired via various auth mechanisms such as 802.1X, MAC auth, etc.