HP HPE6-A77 Exam Practice Test Instant Access

Question 1

Refer to the exhibit:

A customer has just configured a Posture Policy and the T2-Healthcheck Service. Next they installed the OnGuard Agent on Secure_Employee SSID. When they check Access Tracker they see many WEBAUTH requests are being triggered.

What could be the reason?

AOnGuard Web-Based Health Check interval has been wrongly configured to three minutes.

BThe OnGuard Agent trigger the events based on changing the Health Status

CTCP port 6658 is not allowed between the client and the ClearPass server

DThe OnGuard Agent is connecting to the Data Port interface on ClearPass

Answer : A

Question 2

Refer to the exhibit:

You configuring an 802 1x service endpoint profiling. When the client connects to the network, ClearPass successfully profiles the client and sends Radius Change of Authorization (RCoA) but Radius Change of Authorization {RCoA) fails for the client You manually clicked on the Change Status button in the access tracker to force an RCoA but that failed too.

What must you check to ensure that the RCoA will work? (Select two.)

ARFC 3576 option is enabled for Aruba Controller under Network device in ClearPass.

BRFC 3576 server should be mapped in the server group on the Aruba Controller

CThe RFC 3576 shared secret on ClearPass should match the Authentication Server shared secret

DRFC 3576 server IPs and the Authentication server IPs should be same in the AAA profile

Answer : A, C

Question 3

A corporate ClearPass Cluster with two servers located at a single site, has both Management and Data port IP addresses configured. The Management port IPs are in the DataCenter networks subnet, while the Data port IPs are in the DMZ. What is the difference between using one Virtual IP for the AAA traffic versus sending AAA requests to the physical IPs for each server? (Select two.)

AThe failover can be accomplished only by using Virtual IP.

BThe Individual IPs can provide failover and load balancing.

COne Virtual IP can be used together with the individual server IPs for load balancing.

DBy using the Virtual IP, the failover convergence is faster than using individual server IPs.

EUsing the one Virtual IP can provide failover and load balancing.

Answer : B, E

Question 4

Refer to the exhibit:

What are valid options for Network Access Device Settings? (Select two.)

AYou can configure SNMP Read Settings to monitor the load of a NAD in order not to overload it with the requests.

BIn CLI settings, you can define the access credentials and the command templates that will be used.

CYou can configure SNMP Write Settings to send commands to the devices that do not support other methods.

DOn the Attributes tab. you can enable the service to write attributes like Location and Device type based on policy.

EThe OnConnect Enforcement allows you to enable specific ports that trigger Enforcement when any device connects.

Answer : D, E

Question 5

Refer to the exhibit:

The customer created a new enforcement policy condition to allow VIP Users access without additional security compliance checks hut cannot gel it working. The customer has sent you the above screenshots.

How would you resolve the issue?

AAsk the VIP user to complete the one time web health check to get the VIP profile.

BSet the Enforcement Policy rules evaluation algorithm to evaluate all.

CInclude VIP User role along with the Healthy posture enforcement condition.

DModify the Enforcement Policy and re-order the VIP user condition to the lop.

Answer : C

Question 6

When is it recommended to use a certificate with multiple entries on the Subject Alternative Name?

AThe ClearPass servers are placed in different OnGuard zones to allow the client agent to send SHV updates.

BUsing the same certificate to Onboard clients and the Guest Captive Portal on a single ClearPass server.

CThe primary authentication server Is not available to authenticate the users.

DThe ClearPass server will be hosting captive portal pages for multiple FQDN entries

Answer : A

Question 7

Refer to the exhibit:

A customer is deploying Guest Self-Registration with Sponsor Approval but does not like the format of the sponsor email. Where can you change the sponsor email?

Ain the Receipt Page - Actions

Bin the Sponsor Confirmation section

Cin me Configuration - Receipts - Email Receipts

Din the Configuration - Receipts - Templates

Answer : B

HPE6-A77 Aruba Certified ClearPass Expert Written Exam Practice Test