Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
HP
Aruba Certified ClearPass Expert (ACCX)
HPE6-A81
Aruba Certified ClearPass Expert Written Exam Questions and Answers

Pass the HP Aruba Certified ClearPass Expert (ACCX) HPE6-A81 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam HPE6-A81 Premium Access

View all detail and faqs for the HPE6-A81 exam

Go to Exam

455 Students Passed

87% Average Score

90% Same Questions

Viewing page 1 out of 2 pages

Viewing questions 1-10 out of questions

Questions # 1:

You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.

What happens when the client sends a DNS request to securelogin aruba networks com?

Options:

The controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.

Address field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.

Client does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.

The controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.

Answer

Questions # 2:

Refer to the exhibit.

Question # 2

The users connecting to a wireless SSIO "secure-HS-5007" were being processed by an incorrect 802.1 X service created for VIP access and the user gets deny access. The customer has sent you the screenshot to get your support to resolve the issue What changes will you suggest to fix it?

Options:

To the HS_Building 802.1 X service, add another service rule condition with VIP access Aruba-Essid-Name and leave it in same position

In the HS_Building 802.1X service, remove the service rule condition with Aruba controller location name and leave it in same position

Delete the HSBuilding 802 IX service, odd VIP access Aruba-Essid-Name as fourth condition to WSBuilding Aruba 802 1X service

In the HSBuilding 802. IXservice. change the Authentication method for AMCAuth for VIP access and leave it in same position

Answer

Questions # 3:

Which statements art true about controller-initiated and server-initiated login method? (Select two)

Options:

Controller-initiated login method should be used if the guest user's network login will be handled by the controller-based AP to perform the HTTP post when the user attempts a login.

Controller-initiated login method should be used of the guest user's network login will be handled by the guest browser to perform the HTTP port when the user attempts a login

server-in it will login method should be used if the guest user s network login will be handled by the wired switch by standing the authentication request to (PPM when the user attempts a login

server-initiated login method should be used if the guest user’s network login will be handled by ClearPass by sending the authentication request to itself when the user attempts a login

server-initiated login method should be used if the guest users network login will be handled by the ClearPass by standing a CoA after authentication request is posted to itself when the user attempts a login

Answer

B, C, D

Questions # 4:

Which using Allow All MAC AUTH, which authentication source should be mapped to the service?

Options:

Static Host List

Endpoint Database

Guest Device Database

Any Authentication source

Answer

Questions # 5:

Refer to the exhibit.

Question # 5

When creating a new report, there is in option to send report Notifications by Email Where is the email server configured?

Options:

In the ClearPass Policy Manager Messaging Setup under Administration.

In the Insight report on the next screen of the report definition

In the Insight Reports Interface under Administration on the sidebar menu

In the ClearPass Policy Manager Endpoint Context Servers under Administration.

Answer

Questions # 6:

Refer to the exhibit.

Question # 6

What could be causing the error message received on the OnGuard client?

Options:

The Service Selection Rules for the service are not configured correctly

The Health-Check service does not have Posture Compliance option enabled

The client's OnGuard Agent has not been configured with the correct Policy Manager Zone.

There is a firewall policy not allowing the OnGuard Agent to connect to ClearPass

Answer

Questions # 7:

Refer to the exhibit.

Question # 7

Your customer has configured the 802.1 X service enforcement conditions with the Endpoint profiling data. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly What is the cause of the issue?

Options:

An additional authorization source should be configured for profiling to work.

The enforcement policy rules evaluation algorithm is not configured correctly.

The option, use cached roles and posture from previous sessions should be enabled.

The enforcement policy conditions configured with profiling data are not correct

Answer

Questions # 8:

When building an SNMP-based enforcement profile what option can you assign to the user as actions? (Select three).

Options:

Enforce a VLAN ID for the client

Set a session timeout for the client

Enforce Firewall policies

Send captive portal web re-direct URL

ClearPass Downloadable Role

Reset the connection after the settings has been pushed

Answer

A, B, D

Questions # 9:

Refer to the exhibit.

Question # 9

A customer is trying to configure a TACACS Authentication Service for administrative what could be the reason for the Login Status REJECT?

Options:

The password used by the administrative user is wrong.

The Enforcement profile used is not a TACACS profile.

The Read-only Administrator role does not exist on the Controller.

The Enforcement profile is not designed to be used on Aruba Controller

Answer

Questions # 10:

While configuring the service rule conditions which NAS-Port-Type value should be used to differentiate the service for wired and wireless authentication?