HP HPE6-A68 Exam Questions Instant Access

Question 1

Refer to the exhibit.

Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

AFull Access VLAN

BEmployee VLAN

CInternet VLAN

DDeny Access

Answer : B

Question 2

Refer to the exhibit.

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad? (Select two.)

AHTTP User-Agent

BSNMP

CDHCP fingerprinting

DSmartDevice

EOnguard Agent

Answer : A, C

HTTP User-Agent

In some cases, DHCP fingerprints alone cannot fully classify a device. A common example is the Apple family of smart devices; DHCP fingerprints cannot distinguish between an Apple iPad and an iPhone. In these scenarios, User-Agent strings sent by browsers in the HTTP protocol are useful to further refine classification results.

User-Agent strings are collected from:

* ClearPass Guest

* ClearPass Onboard

* Aruba controller through IF-MAP interface

Note: Collectors are network elements that provide data to profile endpoints.

The following collectors send endpoint attributes to Profile:

* DHCP

DHCP snooping

Span ports

* ClearPass Onboard

* HTTP User-Agent

*MAC OUI -- Acquired via various auth mechanisms such as 802.1X, MAC auth, etc.

* ActiveSync plugin

* CPPM OnGuard

*SNMP

* Subnet Scanner

* IF-MAP

* Cisco Device Sensor (Radius Accounting)

* MDM

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

Question 3

Refer to the exhibit.

Which statements accurately describe the status of the Onboarded devices in the configuration for the network settings shown? (Select two.)

AThey will connect to Employee_Secure SSID after provisioning.

BThey will connect to Employee_Secure SSID for provisioning their devices.

CThey will use WPA2-PSK with AES when connecting to the SSID.

DThey will connect to secure_emp SSID after provisioning.

EThey will perform 802.1X authentication when connecting to the SSID.

Answer : D, E

Question 4

Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

ADHCP server IP

BActive Directory IP

CSwitch IP

DMicrosoft NPS server IP

EClearPass server IP

Answer : E

Question 5

Which components of a ClearPass is mandatory?

AAuthorization Source

BProfiler

CRole Mapping Policy

DEnforcement

EPosture

Answer : D

An enforcement policy is a way to organize enforcement profiles and apply them to users or Policy Manager roles. Based on the enforcement policy assigned to the role, enforcement profiles are applied to the service request.

Question 6

A customer would like to deploy ClearPass with these requirements:

between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS

should allow for up to 1000 employee devices to be Onboarded

should allow up to 100 guest users each day to authenticate using the web login feature

What is the license mix that customer will need to purchase?

ACP-HW-2k, 1000 Onboard, 100 Guest

BCP-HW-500, 1000 Onboard, 100 Guest

CCP-HW-5k, 2500 Enterprise

DCP-HW-5k, 1000 Enterprise

ECP-HW-5k, 100 Onboard, 100 Guest

Answer : C

Question 7

Refer to the exhibit.

Based on the Translation Rule configuration shown, what will be the outcome?

AAn AD user from group Administrators will be assigned the operator profile of IT Administrators.

BAll ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators.

CAll active directory users will be assigned the operator profile of IT Administrators.

DA user from AD group MatchAdmin will be assigned the operator profile of IT Administrators.

Answer : A

HP Aruba Certified Clearpass Professional 6.7 HPE6-A68 Exam Questions