HP HPE6-A81 Exam Questions Instant Access

Question 1

Refer to the exhibit.

You configured a new Wireless 802.1 X service for a Cisco WLC broadcasting the secure-AOM-5007 SSID. The client fails to connect to the SSIO. Using the screenshots as a reference, how would you fix this issue?

AChange the service condition to Radius:lETF Calling-Station-Id EQUALS Secure-ADM-5007

BUpdate the service condition Radws:IETF Called-Stat ion-Id CONTAINS secure-AOM-5007

CRemove the service condition Radius:IETF Service-Type BEL0NGS_T0 Login-User (1), 2.8

DMake sure that the Network Devices entry for the Cisco WLC has a vendor setting of 'Airespace'

Answer : B

Question 2

You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.

What happens when the client sends a DNS request to securelogin aruba networks com?

AThe controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.

BAddress field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.

CClient does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.

DThe controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.

Answer : B

Question 3

Which statements art true about the Database server certificate? (Select two)

ADatabase certificate can be created to take a secure backup of the ClearPass database.

BClearPass Policy Manager nodes validates the Database certificate while joining the cluster

CCustom Database certificate requires Subject Alternative Name (SAN) field with the DNS name of the server.

DA change in Database certificate will only be applicable after a reboot of the node

EDatabase server certificate is optional for the ClearPass servers that are part of a Cluster.

Answer : B, C

Question 4

Refer to the exhibit.

What enforcement profile will be assigned to a client who has successfully completed the user and machine authentication with UNKNOWN posture token?

ARedirect to Aruba OnBoard Portal

BRedirect to Aruba Quarantine Profile

CRedirect to Aruba Dissolvable_page Profile

DDeny Access Profile

Answer : C

Question 5

Which statements art true about controller-initiated and server-initiated login method? (Select two)

AController-initiated login method should be used if the guest user's network login will be handled by the controller-based AP to perform the HTTP post when the user attempts a login.

BController-initiated login method should be used of the guest user's network login will be handled by the guest browser to perform the HTTP port when the user attempts a login

Cserver-in it will login method should be used if the guest user s network login will be handled by the wired switch by standing the authentication request to (PPM when the user attempts a login

Dserver-initiated login method should be used if the guest user's network login will be handled by ClearPass by sending the authentication request to itself when the user attempts a login

Eserver-initiated login method should be used if the guest users network login will be handled by the ClearPass by standing a CoA after authentication request is posted to itself when the user attempts a login

Answer : B, C, D

Question 6

A customer has a Clear Pass cluster deployment with four servers, two servers at the data center and two servers at a large remote site connected over an SO-WAN solution. The customer would like to implement OnGuard. Guest Self-Registration, and 802.1 X authentication across their entire environment. During testing the customer is complaining that users connecting to an Instant Cluster Employee S5ID at the remote site, with the OnGuard Persistent Agent installed are randomly getting their health check missed.

What could be a possible cause of this behavior?

AThe traffic on the TCP port 6658 is congested due to the fact that this port is also used by the IPSec keep-alive packets of the SO-WAN solution.

BThe OnGuard Clients are automatically mapped to the Policy Manager Zone based on their IP range but an ACL on the switch could be blocking access.

CThe Aruba-user-role received by the IAP is filtering the TCP port 6658 to the Clear Pass servers and after 10 seconds the SSL fallback gets activated and randomly generates the issue

DThe ClearPass Policy Manager zones have been defined but the local IP subnets have not but properly mapped to the zones and the OnGuard Agent might connect to any of the servers in the cluster.

Answer : A

Question 7

Refer to the exhibit.

A customer has incomplete information for endpoints in the Endpoint Repository. In order to make accurate decisions about what types of devices are connecting to the network. ClearPass is enabled to process the device information from IF-MAP interface, but no updates are received. What can the customer do to update those endpoints using IF-MAP?

AConfigure ClearPass Management IP in the DHCP Helper address

BConfigure IF-MAP on all networking devices to send additional information to ClearPass

CConfigure IF-MAP only on Aruba Mobility Controller, providing ClearPass username and password

DConfigure the authentication service to Audit the endpoints using, the embedded Nmap Server

Answer : A

HP Aruba Certified ClearPass Expert Written HPE6-A81 Exam Questions