HP HPE6-A68 Exam Questions Instant Access

Question 1

When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

AEndpoints repository

BOnboard Device repository

CMDM repository

DGuest User repository

ELocal User repository

Answer : A

A service running in CPPM periodically polls MDM servers using their exposed APIs. Device attributes obtained from MDM are added as endpoint tags. Profiler related attributes are send to profiler which uses these attributes to derive final profile.

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

Question 2

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.

Which statements accurately describe next steps? (Select two.)

AThe NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

BA new Virtual IP address should be created for each NAD.

CBoth the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

DThe primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

EThe NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

Answer : D, E

In an Aruba network, APs are controlled by a controller. The APs tunnel all data to the controller for processing, including encryption/decryption and bridging/forwarding data. Local controller redundancy provides APs with failover to a backup controller if a controller becomes unavailable. Local controller redundancy is provided by running VRRP between a pair of controllers. The APs are then configured to connect to the ''virtual-IP'' configured for the VRRP instance.

Question 3

Refer to the exhibit.

Based on the Aruba TACACS+ dictionary shown, how is the Aruba-Role attribute used?

AThe Aruba-Admin-Role on the controller is applies to users using TACACS+ to login to the Policy Manager

BTo assign different privileges to clients during 802.1X authentication

CTo assign different privileges to administrators logging into an Aruba NAD

DIt is used by ClearPass to assign TIPS roles to clients during 802.1X authentication

ETo assign different privileges to administrators logging into ClearPass

Answer : C

Question 4

Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting 'Validate server certificate'?

AThe server and client will perform an HTTPS SSL certificate exchange.

BThe client will verify the server certificate against a trusted CA.

CThe client will send its private key to the server for verification.

DThe server will send its private key to the client for verification.

EThe client will send its certificate to the server for verification.

Answer : B

Question 5

Which database in the Policy Manager contains the device attributes derived by profiling?

AEndpoints Repository

BClient Repository

CLocal Users Repository

DOnboard Devices Repository

EGuest User Repository

Answer : A

Configure [Endpoints Repository] as Authorization Source. Endpoint profile attributes

derived by Profile are available through the '[Endpoint Repository]' authorization source.

These attributes can be used in role-mapping or enforcement policies to control network

access. Available attributes are:

Authorization:[Endpoints Repository]:MAC Vendor

Authorization:[Endpoints Repository]:Category

Authorization:[Endpoints Repository]:OS Family

Authorization:[Endpoints Repository]:Name

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

Question 6

Refer to the exhibit.

Based on the configuration of the create_user form shown, which statement accurately describes the status?

AThe email field will be visible to guest users when they access the web login page.

BThe visitor_company field will be visible to operators creating the account.

CThe visitor_company field will be visible to the guest users when they access the web login page.

DThe visitor_phone field will be visible to the guest users in the web login page.

EThe visitor_phone field will be visible to operators creating the account.

Answer : A

Question 7

Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

ADHCP server IP

BActive Directory IP

CSwitch IP

DMicrosoft NPS server IP

EClearPass server IP

Answer : E

HP Aruba Certified Clearpass Professional 6.7 HPE6-A68 Exam Questions