Download Aruba Certified ClearPass Associate 6.7.HPE6-A67.Train4Sure.2020-01-17.24q.vcex
| Vendor: | HP |
| Exam Code: | HPE6-A67 |
| Exam Name: | Aruba Certified ClearPass Associate 6.7 |
| Date: | Jan 17, 2020 |
| File Size: | 714 KB |
| Downloads: | 1 |
How to open VCEX files?
Files with VCEX extension can be opened by ProfExam Simulator.
Discount: 20%
Demo Questions
Question 1
Your boss suggests that you configure a guest self-registration page in ClearPass for the Conference Events SSID.
Which advantages will this give? (Choose two.)
- It will allow guest users to create a login account for the web login page.
- It will stop employees from putting their corporate devices on the event network.
- It will allow employees to get their own devices securely connected to the network.
- It will allow the Conference center to collect extra information about the guest.
- It can be pre-located with guest information from the conference registration.
Correct answer: AE
Question 2
Which statements describe subnet scans for static IP device discovery? (Choose two.)
- To run an On-Demand Subnet Scan, you must first configure a subnet scan in the profile settings.
- The On-Demand option provides the ability to trigger a one-time scan in specified network subnets.
- The On-Demand option provides the ability to scan and profile devices only with static IP.
- Only SNMP can be used for subnet scans for subnets configured for DHCP.
- Subnet scans can be scheduled to execute a scan every 24 hrs for configured subnets.
Correct answer: BC
Question 3
Select three elements that are part of the authorization process. (Choose three.)
- Send a RADIUS accept to the Access device.
- Verify client credentials against your account.
- Determine posture status.
- Validate the user account attributes.
- Filter by endpoint device type.
Correct answer: ABD
Explanation:
Reference: http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c05320375-1.pdf Reference: http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c05320375-1.pdf
Question 4
Which actions are necessary to set up a ClearPass guest captive portal web login page to execute with no errors? (Choose three.)
- Configure the vendor settings in the Network Access Device to match the web login page.
- Install a public issued HTTPS certificate in ClearPass Policy Manager.
- Install a public issued HTTPS certificate in the Network Access Device.
- Configure the vendor settings in the Web Login Page to match the Network Access Device.
- Install an enterprise issued HTTPS certificate in the Network Access Device.
- Configure the external web-auth URL on the Network Access Device for HTTP.
Correct answer: ABF
Question 5
Which items would ClearPass be useful for? (Choose three.)
- Unified wired and wireless access control
- Access control on transient networks
- Administrative access control
- User device management
- Firewall configuration management
Correct answer: ACD
Explanation:
Reference: https://h20195.www2.hpe.com/v2/GetPDF.aspx/4AA6-2768ENW.pdf Reference: https://h20195.www2.hpe.com/v2/GetPDF.aspx/4AA6-2768ENW.pdf
Question 6
Refer to the exhibit.
Which user authentication request will match the service rules of the Policy Service shown?
- a wireless user connecting to an Aruba IAP on the SSID “CORP”
- a wireless user connection would fail because of miss-configured service rules.
- a wireless user connecting to any SSID on an Aruba Controller
- a wireless user connected to any SSID named “CORP”
Correct answer: A
Question 7
Which most accurately describes the “Select All Matches” rule evaluation algorithm in Enforcement Policies?
- All rules are checked for any matching rules and their respective Enforcement profiles are applied.
- All rules is checked, and if there is no match, no Enforcement profile is applied.
- Each rule is checked, and once a match if found, the Enforcement profile assigned to that rule is applied, along with the default Enforcement profile.
- Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.
Correct answer: A
Explanation:
Reference: https://www.catelsys.eu/images/Catelsys/images/2017/04/0-Notices-ClearPass_Policy_Manager_User_Guide-1.pdf Reference: https://www.catelsys.eu/images/Catelsys/images/2017/04/0-Notices-ClearPass_Policy_Manager_User_Guide-1.pdf
Question 8
Which Authorization Source supports device profile enforcement?
- Local User Repository
- OnGuard Repository
- Endpoints Repository
- Guest User Repository
Correct answer: A
Question 9
When should a role mapping policy should be used in an 802.1x service with Active Directory as the authentication source?
- When you want to send roles from the AD user to enforcement policies directly from AD attributes.
- When you want to send Aruba firewall roles back to the Aruba Network Access Drive.
- When you want to translate and combine AD attributes into ClearPass roles.
- When you want to enable attributes as roles directly without combining multiple attributes
Correct answer: A
Question 10
Refer to the exhibit.
An administrator has enabled ‘department’ and ‘memberOf’ as roles. Which effect will this have on Enforcement?
- The user’s memberOf attribute is sent back to the controller as a firewall role.
- The user’s authentication will be rejected if the user does not have a department attribute in AD.
- The user’s department and group membership must be included in role mapping rules.
- The user’s department and group membership will be available as roles for evaluation by the enforcement policy.
Correct answer: C
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
ProfExam at a 20% markdown
You have the opportunity to purchase ProfExam at a 20% reduced price
Get Now!