HP HPE6-A77 Exam Practice Test Instant Access

Question 1

Refer to the exhibit:

You configured the 802 1 x service enforcement conditions with the Endpoint profiling dat

a. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly.

What is the cause of the issue?

AAn additional authorization source should be configured for profiling to work.

BThe enforcement policy conditions configured with profiling data are not correct.

CThe enforcement policy rules evaluation algorithm Is not configured correctly.

DThe option, use cached roles and posture from previous sessions should be enabled.

Answer : B

Question 2

A customer has a ClearPass cluster deployment with one Publisher and one Subscriber configured as a Standby Publisher at the Headquarters DataCenter They also have a large remote site that is connected with an Aruba SD Branch solution over a two Mbps Internet connection. The Remote Site has two ClearPass servers acting as Subscribers. The solution implemented for the customer includes OnGuard, Guest Self Registration, and Employee 802. ix authentication. The client is complaining that users connecting to an IAP Clusters Guest SSID located at the Remote Site are experiencing a significant delay in accessing the Guest Captive Portal page.

What could be a possible cause of this behavior?

AThe configuration of the captive portal is pointing to a link located on one of the servers in the Headquarters

BThe ClearPass Cluster has no zones defined and the guest captive portal request is being redirected to the Publisher

CThe guest page is not optimized to work with the client browser and a proper theme should be applied

DThe captive portal page was only created on the Publisher and requests are getting redirected to a Subscriber

Answer : A

Question 3

Refer to the exhibit:

What are valid options for Network Access Device Settings? (Select two.)

AYou can configure SNMP Read Settings to monitor the load of a NAD in order not to overload it with the requests.

BIn CLI settings, you can define the access credentials and the command templates that will be used.

CYou can configure SNMP Write Settings to send commands to the devices that do not support other methods.

DOn the Attributes tab. you can enable the service to write attributes like Location and Device type based on policy.

EThe OnConnect Enforcement allows you to enable specific ports that trigger Enforcement when any device connects.

Answer : D, E

Question 4

What type of EAP certificate are you able to use on ClearPass? (Select two.)

ASelf signed, when all the clients are Onboarded with the same Root CA as the Self signed certificate.

BPrivate signed, when the clients are onboarded or are part of the organization domain.

CPrivate signed, when some clients are onboarded and some are not part of the organization.

DPublic signed, when not all of the clients are part of the organization domain.

ESelf signed, when all the clients are part of the organization domain.

Answer : C, D

Question 5

A customer has configured Onboard with Single SSID provision for Aruba IAP Windows devices work as expected but cannot get the Apple iOS devices to work. The Apple iOS devices automatically get redirected to a blank page and do not get the Onboard portal page. What would you check to fix the issue?

AVerify if the checkbox 'Enable bypassing the Apple Captive Network Assistant' is checked.

BVerify if the Onboard URL is updated correctly in the external captive portal profile.

CVerify if Onboard Pre-Provisioning enforcement profile sends the correct Aruba user role.

DVerify if the external captive portal profile is enabled to use HTTPS with port 443.

Answer : B

Question 6

A customer is looking to implement a Web-Based Health Check solution with the following requirements:

* for the HR user's client devices, check if a USB stick is mounted.

* for the R&D user's client devices, check if the hard disk is fully encrypted.

The Web-Based Health Check service has been configured but the customer it is not sure how to design the Profile Policy How can be accomplished this customer request?

Acreate two Posture Policies and customize the OnGuard Agent (Persistent or Dissolvable) to select the correct SHV checks

Bcreate one Posture Policy and define Rules Conditions that will apply different Tokens for each SHV check condition

Ccreate two Posture Policies and use the Restrict by Roles option to filter for HR and R&D user roles and apply the correct SHV checks

Dcreate one Posture Policy to check the HR users client devices and use the NAP Agent to check R&D users client devices

Answer : A

Question 7

Refer to the exhibit:

You configured a new Wireless 802.1X service for a Cisco WLC broadcasting the Secure-ADM-5007 SSID. The client falls to connect to the SSID. Using the screenshots as a reference, how would you fix this issue? (Select two.)

AUpdate the service condition Radius:IETF Called-Station-ld CONTAINS secure-adm-5007

BMake sure that the Network Devices entry for the Cisco WLC has a vendor setting of 'Airspace'

CRemove the service condition Radius:lETF Service-Type BELONGSJTO Login-User (1). 2. 8

DChange the service condition to Radius:lETF Calling-Station-ld EQUALS Secure-ADM-5007

Answer : A, C

HPE6-A77 Aruba Certified ClearPass Expert Written Exam Practice Test