HP HPE6-A68 시험

Question No : 1

Refer to the exhibit.



Based on the information shown, what is the purpose of using [Time Source] for authorization?

• A.to check how long it has been since the last login authentication
• B.to check whether the guest account expired
• C.to check whether the MAC address is in the MAC Caching repository
• D.to check whether the MAC address status is known in the endpoints table
• E.to check whether the MAC address status is unknown in the endpoints table

답을 확인하기

정답:

Question No : 2

Refer to the exhibit.



Based on the Access Tracker output for the user shown, which statement describes the status?

• A.The Aruba Terminate Session enforcement profile as applied because the posture check failed.
• B.A Healthy Posture Token was sent to the Policy Manager.
• C.A RADIUS-Access-Accept message is sent back to the Network Access Device.
• D.The authentication method used is EAP-PEA
• E.A NAP agent was used to obtain the posture token for the user.

답을 확인하기

정답:
Explanation:
We see System Posture Status: HEALTHY (0)
End systems that pass all SHV tests receive a Healthy Posture Token, if they fail a single test they receive a Quarantine Posture Token.
References: CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 13 https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf

Question No : 3

A customer would like to deploy ClearPass with these requirements:
✑ every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS
✑ every Friday, a meeting with business partners takes place and an additional 50 devices need to authenticate using Web Login Guest Authentication
What should the customer do regarding licenses? (Select two.)

• A.When counting policy manager licenses, include the additional 50 business partner devices.
• B.When counting policy manager licenses, exclude the additional 50 business partner devices.
• C.Purchase Onboard licenses.
• D.Purchase guest licenses.
• E.Purchase Onguard licenses.

답을 확인하기

정답:

Question No : 4

Refer to the exhibit.



Which statement accurately reflects the status of the Policy Simulation test figure shown?

• A.The test verifies that a client with username test1 can authenticate using EAP-PEA
• B.Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.
• C.Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.
• D.The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.
• E.The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

답을 확인하기

정답:

Question No : 5

Refer to the exhibit.



Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

• A.Only the attribute values of department and memberOf can be used in role mapping policies.
• B.The attribute values of department, title, memberOf, telephoneNumber, and mail are directly applied as ClearPass.
• C.Only the attribute value of company can be used in role mapping policies, not the other attributes.
• D.The attribute values of department and memberOf are directly applied as ClearPass roles.
• E.Only the attribute values of title, telephoneNumber, and mail can be used in role mapping policies.

답을 확인하기

정답:

Question No : 6

Refer to the exhibit.



An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.
What is a possible reason for the ErrorCode ‘Failed to classify request to service’ shown?

• A.The user failed authentication due to an incorrect password.
• B.ClearPass could not match the authentication request to a service, but the user passed authentication.
• C.ClearPass service authentication sources were not configured correctly.
• D.The NAD did not send the authentication request.
• E.ClearPass service rules were not configured correctly.

답을 확인하기

정답:

Question No : 7

What does Authorization allow users to do in a Policy Service?

• A.To use attributes in databases in role mapping and Enforcement.
• B.To use attributes stored in databases in Enforcement only, but not role mapping.
• C.To use attributes stored in external databases for Enforcement, but not internal databases.
• D.To use attributes stored in databases in role mapping only, but not Enforcement.
• E.To use attributes sored in internal databases for Enforcement, but not external databases.

답을 확인하기

정답:

Question No : 8

Refer to the exhibit.



Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

• A.If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NA
• B.If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NA
• C.If the user is not found in the local user repository a reject message is sent back to the NA
• D.If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NA
• E.If the user is not found in the local user repository a timeout message is sent back to the NA

답을 확인하기

정답:
Explanation:
Policy Manager looks for the device or user by executing the first filter associated with the authentication source.
After the device or user is found, Policy Manager then authenticates this entity against this authentication
source.
The flow is outlined below:
* On successful authentication, Policy Manager moves on to the next stage of policy evaluation, which collects role mapping attributes from the authorization sources.
* Where no authentication source is specified (for example, for unmanageable devices), Policy Manager passes the request to the next configured policy component for this service.
* If Policy Manager does not find the connecting entity in any of the configured authentication sources, it rejects the request.
References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 134 https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

Question No : 9

Which statement is true? (Choose two.)

• A.Mobile device Management is the result of Onboarding.
• B.Third party Mobile Device Management solutions can be integrated with ClearPass.
• C.Mobile Device Management is the authentication that happens before Onboarding.
• D.Mobile Device Management is an application container that is used to provision work applications.
• E.Mobile Device Management is used to control device functions post-Onboarding.

답을 확인하기

정답:

Question No : 10

A customer with an Aruba Controller wants it to work with ClearPass Guest.
How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

• A.Add ClearPass as a RADIUS CoA server.
• B.Add ClearPass as a RADIUS authentication server.
• C.Add ClearPass as a TACACS+ authentication server.
• D.Add ClearPass as an HTTPS authentication server.

답을 확인하기

정답:
Explanation:

Question No : 11

What is the purpose of ClearPass Onboard?

• A.to provide MAC authentication for devices that don’t support 802.1x
• B.to run health checks on end user devices
• C.to provision personal devices to securely connect to the network
• D.to configure self-registration pages for guest users
• E.to provide guest access for visitors to connect to the network

답을 확인하기

정답:

Question No : 12

A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.
What are the likely causes of this? (Select two.)

• A.The ClearPass server has a trusted server certificate issued by Verisign.
• B.The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.
• C.The ClearPass server does not recognize the client’s certificate.
• D.The DNS server is not replying with an IP address for www.google.com.

답을 확인하기

정답:
Explanation:
You would need a publicly signed certificate.
References: http://community.arubanetworks.com/t5/Security/Clearpass-Guest-certificate-error-for-guest-visitors/td-p/221992

Question No : 13

In which ways can ClearPass derive client roles during policy service processing? (Select two.)

• A.From the attributes configured in Active Directory
• B.From the server derivation rule in the Aruba Controller server group for the client
• C.From the Aruba Network Access Device
• D.From the attributes configured in a Network Access Device
• E.Through a role mapping policy

답을 확인하기

정답:

Question No : 14

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

• A.the ClearPass server must have the network device added as a valid NAD
• B.the ClearPass server certificate must be installed on the NAD
• C.a matching shared secret must be configured on both the ClearPass server and NAD
• D.an NTP server needs to be set up on the NAD
• E.a bind username and bind password must be provided

답을 확인하기

정답:

Question No : 15

A customer would like to deploy ClearPass with these requirements:
✑ between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS
✑ should allow for up to 1000 employee devices to be Onboarded
✑ should allow up to 100 guest users each day to authenticate using the web login feature
What is the license mix that customer will need to purchase?

• A.CP-HW-2k, 1000 Onboard, 100 Guest
• B.CP-HW-500, 1000 Onboard, 100 Guest
• C.CP-HW-5k, 2500 Enterprise
• D.CP-HW-5k, 1000 Enterprise
• E.CP-HW-5k, 100 Onboard, 100 Guest

답을 확인하기

정답: