Free 365 Days Exam Updates HPE6-A68 dumps with test Engine Practice [Q42-Q64]

NO.42 Refer to the exhibit.

Based on the configuration for ‘maximum devices’ shown, which statement accurately describes its settings?

The user cannot Onboard any devices.

It limits the total number of devices that can be provisioned by ClearPass.

It limits the total number of Onboarded devices connected to the network.

It limits the number of devices that a single user can Onboard.

It limits the number of devices that a single user can connect to the network.

NO.43 Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

Software image

Backup files

Log files

Device fingerprint dictionaries

Posture dictionaries

NO.44 Refer to the exhibit.

Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

The attribute values of department, title, memberOf, telephoneNumber, mail are directly applied as ClearPass roles.

The attribute values of department and memberOf are directly applied as ClearPass roles.

Only the attribute value of company can be used in role mapping policies, not other attributes.

Only the attribute value of department and memberOf can be used in role mapping policies.

Only the attribute value of title, memberOf, telephoneNumber can be used in role mapping policies.

NO.45 Refer to the exhibit.

An AD user’s department attribute value is configured as “QA”. The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?

HR Local

Remote Employee

[Guest]

Executive

IOS Device

NO.46 An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop.
Which licenses are consumed in this scenario?

1 Policy Manager license, 1 Onboard License

2 Policy Manager licenses, 1 Onguard License

1 Policy Manager license, 1 Profile License

2 Policy Manager licenses, 2 Onguard licenses

1 Policy Manager license, 1 Onguard License

NO.47 A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client’s Onguard posture token.
Which Enforcement profile should be used on the health check service?

RADIUS CoA

Quarantine VLAN

Full Access VLAN

RADIUS Accept

RADIUS Reject

NO.48 Refer to the exhibit.

The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.
What is the cause of this error?

The controller’s shared secret used during the certificate exchange is incorrect.

The NAS source interface IP is incorrect.

The client sent an incorrect shared secret for the 802.1X authentication.

The controller used an incorrect shared secret for the RADIUS authentication.

The client’s shared secret used during the certificate exchange is incorrect.

NO.49 Refer to the exhibit.

An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.
What is a possible reason for the ErrorCode ‘Failed to classify request to service’ shown?

The user failed authentication due to an incorrect password.

ClearPass could not match the authentication request to a service, but the user passed authentication.

ClearPass service authentication sources were not configured correctly.

The NAD did not send the authentication request.

ClearPass service rules were not configured correctly.

NO.50 Refer to the exhibit.

Based on the Translation Rule configuration shown, what will be the outcome?

An AD user from group Administrators will be assigned the operator profile of IT Administrators.

All ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators.

All active directory users will be assigned the operator profile of IT Administrators.

A user from AD group MatchAdmin will be assigned the operator profile of IT Administrators.

NO.51

Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

Full Access VLAN

Employee VLAN

Internet VLAN

Deny Access

NO.52 What does the Posture Token QUARANTINE imply?

The client is compliant. However, there is an update available to remediate the client to HEALTHY state.

The posture of the client is unknown.

The client is infected and is a threat to other systems in the network.

The client is out of compliance, but has HEALTHY state.

The client is out of compliance.

NO.53 An SNMP probe is sent from ClearPass to a network access device, but ClearPass is unable to obtain profiling information.
What are likely causes? (Select three.)

Only SNMP read has been configured but SNMP write is needed for profiling information.

An external firewall is blocking SNMP traffic.

SNMP is not enabled on the NAD.

SNMP community string in the ClearPass and NAD configuration is mismatched.

SNMP probing is not supported between ClearPass and NADs.

NO.54 Refer to the exhibit.

A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop.
Which Enforcement Profile is applied?

WIRELESS_GUEST_NETWORK

WIRELESS_CAPTIVE_NETWORK

WIRELESS_HANDHELD_NETWORK

Deny Access

WIRELESS_EMPLOYEE_NETWORK

NO.55 Which CLI command is used to upgrade the image of a ClearPass server?

Image update

System upgrade

Upgrade image

Reboot

Upgrade software

NO.56 Which device type supports Exchange ActiveSync configuration with Onboard?

Linux laptop

Mac OS X device

Apple iOS device

Windows laptop

Android device

NO.57 Refer to the exhibit.

An administrator logs in to the Guest module in ClearPass and ‘Manage Accounts’ displays as shown.
When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

NO.58 Refer to the exhibit.

Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?

to display a role name on the Self-registration receipt page

to send a firewall role back to the controller based on the Guest User’s Role ID

to assign Controller roles to guests

to assign three roles of [Contractor], [Guest] and [Employee] to every guest user

to create additional account roles for guest administrators to assign to guest accounts

NO.59 Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

to gather and send Aruba NAD information to ClearPass

to gather information about Aruba NADs for ClearPass

to send information via RADIUS packets to Aruba NADs

to send information via RADIUS packets to clients

to send CoA packets from ClearPass to the Aruba NAD

NO.60 Which devices support Apple over-the-air provisioning? (Select two.)

IOS 5

Laptop running Mac OS X 10.8

Laptop running Mac OS X 10.6

Android 2.2

Windows XP

NO.61 Refer to the exhibit.

Based on the configuration for the client’s certificate private key as shown, which statements accurately describe the settings? (Select two.)

The private key is stored in the ClearPass server.

The private key is stored in the user device.

The private key for TLS client certificates is not created.

More bits in the private key will increase security.

More bits in the private key will reduce security.

NO.62 Refer to the exhibit.

What does the Cache Timeout Value refer to?

The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.

The amount of time the Policy Manager caches the users client certificate.

NO.63 Which components can use Active Directory authorization attributes for the decision-making process? (Select two.)

Profiling policy

Certificate validation policy

Role Mapping policy

Enforcement policy

Posture policy

NO.64 A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage. 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statement is true? (Choose two.)

Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The NAD should be configured with the primary node IP address for RADIUS authentications on the 802.1x network.

A new Virtual IP address should be created for each NAD.

The NAD should be configured with the virtual IP address for RADIUS authentications on the 802.1x network.

Leave a Reply Cancel reply