HPE6-A68 Practice Test Questions – Aruba Certified ClearPass Professional Exam

1. Refer to the exhibit.

Which statement accurately describes the cp82 ClearPass node? (Choose two.)

2. A customer with an Aruba Controller wants to set it up to work with ClearPass Guest.

Hoe should they configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

3. Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

4. A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees.

However, they’re concerned about security.

What is true? (Choose three.)

5. A customer wants to make enforcement decisions during 802.1x authentication based on a client’s Onguard posture token.

What enforcement profile should be used in the health check service?

6. Which authorization servers are supported by ClearPass? (Choose two.)

7. Refer to the exhibit.

Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

8. Refer to the exhibit.

An AD user’s department attribute is configured as “HR”. The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD.

Which roles are assigned to the user in ClearPass? (Choose two.)

9. Refer to the exhibit.

Based on the Enforcement Policy configuration, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

10. What does Authorization allow us to do in a Policy Service?

11. 5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:Helvetica;

mso-bidi-font-weight:bold’>

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>All CPPM’s comes bundled with 25

Enterprise application licenses so you can test the functionality of the

Applications as this license can be used for any of them.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>References: http://community.arubanetworks.com/t5/Security/ClearPass-licensing-explained-August-MHC/td-p/195719

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>3.Which statement accurately describes

configuration of Data and Management ports on the ClearPass appliance? (Select

two.)

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>A. Static IP addresses are only allowed on

the management port.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>B. Configuration of the data port is

mandatory.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>C. Configuration on the management port is

mandatory.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>D. Configuration of the data port if

optional.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica;mso-bidi-font-weight:bold’>E. Configuration of the management port is

optional.

style=’mso-bidi-font-size:10.5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:

Helvetica’>

12.

13. 5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:Helvetica;

mso-bidi-font-weight:bold’>

14. 5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:Helvetica;

mso-bidi-font-weight:bold’>

15. 5pt;font-family:”Arial”,sans-serif;mso-fareast-font-family:Helvetica;

mso-bidi-font-weight:bold’>

16. Refer to the exhibit.

17. Which licenses are included in the built-in Starter kit for ClearPass?

18. Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

19. An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network.

How many licenses does the employee consume?

20. Refer to the exhibit.

21. Which devices support Apple over-the-air provisioning? (Select two.)

22. DRAG DROP

Use the arrows to sort the steps to request a Policy Service on the left into the order they are performed on the right.

23. Which device type supports Exchange ActiveSync configuration with Onboard?

24. Refer to the exhibit.

25. Refer to the exhibit.

26. Refer to the exhibit.

27. Refer to the exhibit.

28. Refer to the exhibit.

29. What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

30. A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.

How should the service be set up in the Policy Manager for this network?

31. ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.

What will be the outcome of this state?

32. A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.

Which statements accurately describe next steps? (Select two.)

33. What is a benefit of ClearPass Onguard?

34. Refer to the exhibit.

35. Refer to the exhibit.

36. Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

37. What are Operator Profiles used for?

38. Refer to the exhibit.

39. Refer to the exhibit.

40. Based on the Local User repository in ClearPass shown, which Aruba firewall role will be assigned to “mike” when this user authenticates Aruba Controller?

41. A customer would like to deploy ClearPass with these requirements:

✑ between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS

✑ should allow for up to 1000 employee devices to be Onboarded

✑ should allow up to 100 guest users each day to authenticate using the web login feature

What is the license mix that customer will need to purchase?

42. What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

43. In which ways can ClearPass derive client roles during policy service processing? (Select two.)

44. A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.

What are the likely causes of this? (Select two.)

45. What is the purpose of ClearPass Onboard?

46. A customer with an Aruba Controller wants it to work with ClearPass Guest.

How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

47. Which statement is true? (Choose two.)

48. Refer to the exhibit.

49. What does Authorization allow users to do in a Policy Service?

50. Refer to the exhibit.

51. Refer to the exhibit.

52. Refer to the exhibit.

53. A customer would like to deploy ClearPass with these requirements:

✑ every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS

✑ every Friday, a meeting with business partners takes place and an additional 50 devices need to authenticate using Web Login Guest Authentication

What should the customer do regarding licenses? (Select two.)

54. Refer to the exhibit.

55. Refer to the exhibit.