New Year Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70special

Examstrust Logo
examstrust mcafee
  1. Home
  2. HP
  3. HPE Aruba Certified
  4. HPE6-A68 - Aruba Certified ClearPass Professional (ACCP) V6.7

HP HPE6-A68 Aruba Certified ClearPass Professional (ACCP) V6.7 Exam Practice Test

Page: 1 / 12
Total 116 questions
Get HPE6-A68 Full Access Download HPE6-A68 PDF

Aruba Certified ClearPass Professional (ACCP) V6.7 Questions and Answers

Testing Engine

  • Product Type: Testing Engine
$37.5  $124.99
Add to Cart

PDF + Testing Engine

  • Product Type: PDF + Testing Engine
$52.5  $174.99
Add to Cart

PDF Study Guide

  • Product Type: PDF Study Guide
$33  $109.99
Add to Cart
Question 1

Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

Options:

A.

both Login and Welcome Page

B.

Default Role

C.

Welcome Page

D.

Default Guest Role

E.

Login Page

Question 2

Refer to the exhibit.

Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

Options:

A.

Only the attribute values of department and memberOf can be used in role mapping policies.

B.

The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.

C.

Only the attribute value of company can be used in role mapping policies, not the other attributes.

D.

The attribute values of department and memberOf are directly applied as ClearPass roles.

E.

Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

Question 3

Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses “Deny Access to this Device? (Select two.)

Options:

A.

EAP-TLS Authentication will be unaffected

B.

The user can Onboard their device again

C.

A new device certificate will be automatically pushed out to the device

D.

The user cannot Onboard their device again

E.

EAP-TLS Authentication will fail

Question 4

Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user’s request?

Options:

A.

After the RADIUS Access-Request

B.

After the NAS login, but before the RADIUS Access-Request

C.

Before the user can submit the registration form

D.

After the RADIUS Access-Response

E.

After the receipt page is displayed, before the NAS login

Question 5

A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client’s Onguard posture token.

Which Enforcement profile should be used on the health check service?

Options:

A.

RADIUS CoA

B.

Quarantine VLAN

C.

Full Access VLAN

D.

RADIUS Accept

E.

RADIUS Reject

Question 6

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.

Which action will ClearPass take based on this Enforcement Profile?

Options:

A.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the user to end the user’s session after this time is up.

B.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

C.

ClearPass will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user’s session after this time is up.

D.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

E.

ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

Question 7

A guest self-registered through a Publisher’s Register page.

Which statement accurately describes how the guest’s account will be stored?

Options:

A.

It will be stored in the Publisher’s guest user repository and the Subscriber’s Onboard user repository.

B.

It will be stored in the Publisher’s local user repository and the Subscriber’s guest user repository.

C.

It will be stored in the Publisher’s guest user repository permanently, but only for 14 days in the Subscriber’s guest user repository,

D.

It will be stored in both the Publisher’s guest user repository and the Subscriber’s guest user repository.

E.

It will be stored in the Publisher’s guest user repository, but not the Subscriber’s.

Question 8

Use this form to make changes to the RADIUS Web Login Guest Network.

A Web Login page is configured in Clear Pass Guest as shown.

What is the purpose of the Pre-Auth Check?

Options:

A.

To authenticate users after the NAD sends an authentication request to ClerPass

B.

To authenticate users before the client sends the credentials to the NAD

C.

To authenticate users when they are roaming from one NAD to another

D.

To authenticate users before they launch the Web Login Page

E.

To replace the need for the NAD to send an authentication request to ClearPass

Question 9

Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

Options:

A.

DHCP server IP

B.

Active Directory IP

C.

Switch IP

D.

Microsoft NPS server IP

E.

ClearPass server IP

Question 10

Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Options:

A.

Static IP addresses are only allowed on the management port.

B.

Configuration of the data port is mandatory.

C.

Configuration on the management port is mandatory.

D.

Configuration of the data port if optional.

E.

Configuration of the management port is optional.

Question 11

Refer to the exhibit.

Based on the network topology diagram shown, how many clusters are needed for this deployment?

Options:

A.

1

B.

2

C.

3

D.

4

E.

8

Question 12

What does Authorization allow users to do in a Policy Service?

Options:

A.

To use attributes in databases in role mapping and Enforcement.

B.

To use attributes stored in databases in Enforcement only, but not role mapping.

C.

To use attributes stored in external databases for Enforcement, but not internal databases.

D.

To use attributes stored in databases in role mapping only, but not Enforcement.

E.

To use attributes sored in internal databases for Enforcement, but not external databases.

Question 13

A client’s authentication is failing and there are no entries in the ClearPass Access tracker.

What is a possible reason for the authentication failure?

Options:

A.

The user account has expired.

B.

The client used a wrong password.

C.

The shared secret between the NAD and ClearPass does not match.

D.

The user’s certificate is invalid.

E.

The user is not found in the database.

Question 14

Refer to the exhibit.

Which types of records will the report shown display?

Options:

A.

all RADIUS authentications from the 10.8.10.100 NAD to ClearPass

B.

all failed RADIUS authentications through ClearPass

C.

only Windows devices that have authenticated through the 10.8.10.100 NAD

D.

all successful RADIUS authentications through ClearPass

E.

all successful RADIUS authentications from the 10.8.10.100 NAD to ClearPass

Question 15

Which statement is true about the databases in ClearPass?

Options:

A.

Entries in the guest user database do not expire.

B.

A Static host list can only contain a list of IP addresses.

C.

Entries in the guest user database can be deleted.

D.

Entries in the local user database cannot be modified.

E.

The endpoints database can only be populated by manually adding MAC addresses to the table.

Question 16

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Options:

A.

to audit client authentications

B.

to display changes made to the ClearPass configuration

C.

to display the entire configuration of the ClearPass Policy Manager

D.

to audit the network for PCI compliance

E.

to display system events like high CPU usage.

Question 17

A customer would like to deploy ClearPass with these requirements:

-2000 devices need to be Onboarded

-2000 corporate devices need to run posture checks daily

-500 guest users need to authenticate each day using the web login feature

What is the license mix that customer will need to purchase?

Options:

A.

CP-HW-5k, 2500 ClearPass Enterprise

B.

CP-HW-25k, 4500 ClearPass Enterprise

C.

CP-HW-500, 2500 ClearPass Enterprise

D.

CP-HW-25k, 4000 ClearPass Enterprise

E.

CP-HW-5k, 4500 ClearPass Enterprise

Load More HPE6-A68 Questions
Page: 1 / 12
Total 116 questions
Get HPE6-A68 Full Access Download HPE6-A68 PDF