HP HPE6-A67 Exam Practice Test Instant Access

Question 1

Refer to the exhibit.

A user has enabled 'department' and 'memberOf' as roles.

What is the direct effect of the user's action?

AThe user's authentication will be rejected if the user does not have an admin user group membership in AD.

BThe user's memberOf attribute is sent back to the controller as a firewall role.

CThe user's department and group membership will be seen in the Access tracker roles section.

DThe user's authentication will be rejected if the user does nothave a department attribute in AD.

EThe user's department is sent back to the controller as a firewall role.

Answer : A

Question 2

What is the function of the primary and backup servers when configuring an authentication source in ClearPass?

AThe primary server and backup servers can be configured for round-robin.

BThe primary server can be from one Active Directory domain; the backup server can be from another.

CThe primary server is always authenticated first, then the backup is used if authentication fails.

DThe primary server is always authenticated first, then the backup is used if that times out.

Answer : D

:https://community.arubanetworks.com/t5/Security/CPPM-amp-AD-Questions-Re-Auth/td-p/74888

Question 3

Refer to the exhibit.

A user connects to an Aruba Access Point wireless SSID named ''Secure-Corporate'' and performs an 802.1X authentication with ClearPass as the authentication server.

Based on this service configuration, which service will be triggered?

AService Three

BService Two

CNo service will be triggered.

DService One

Answer : A

Question 4

Your boss suggests that you configure a guest self-registration page in ClearPass for the Conference Events SSID.

Which advantages will this give? (Choose two.)

AIt will allow guest users to create a login account for the web login page.

BIt will stop employees from putting their corporate devices on the event network.

CIt will allow employees to get their own devices securely connected to the network.

DIt will allow the Conference center to collect extra information about the guest.

EIt can be pre-located with guest information from the conference registration.

Answer : A, E

Question 5

Which collectors can help to distinguish between an iPhone and an iPad? (Choose two.)

ARADIUS

BMAC OUI

CTCP header capture

DHHTP

EIF-MAP

Answer : B, E

Question 6

A customer would like to authenticate employees using a captive portal guest web login page. Employees should use their AD credentials to login on this page.

Which statement is true?

AEmployees must be taken to a separate web login page on the guest network.

BThe customer needs to add second guest service in the policy manager for the guest network.

CThe customer needs to add the AD server as an authentication source in a guest service.

DThe customer needs to add the AD servers RADIUS certificate to the guest network.

Answer : C

Question 7

Which options support DHCP profiling for devices in a network? (Choose two.)

Aconfiguring ClearPass as a DHCP relay for the client

Benabling the DHCP server to profile endpoints and forward meta-data to ClearPass

Cenabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

Denabling the DHCP server to forward DHCP traffic to ClearPass

EDHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary

Answer : A, C

HPE6-A67 Aruba Certified ClearPass Associate 6.7 Exam Practice Test