ACCP-V6.2 Online Practice Questions and Answers

Refer to the screen capture below: Based on the Enforcement Policy configuration, if a user connects to the network using an Apple iphone, what Enforcement Profile is applied?

A. WIRELESS_CAPTIVE_NETWORK

B. WIRELESS_HANDHELD_NETWORK

C. WIRELESS_GUEST_NETWORK

D. WIRELESS_EMPLOYEE_NETWORK

E. Deny Access

Which of the following options is the correct order of steps of a Policy Service request?

1) Clearpass tests the request against Service Rules to select a Policy Service.

2) Clearpass applies the Enforcement Policy.

3) Negotiation of the Authentication Method occurs between the NAD and Clearpass.

4) Clearpass sends the Enforcement Profile attributes to the NAD.

5) NAD forwards authentication request to Clearpass.

A. 1, 3, 2, 4, 5

B. 5, 1, 3, 2, 4

C. 5, 1, 3, 4, 2

D. 1, 2, 3, 4, 5

E. 2, 3, 4, 5, 1

Which of the following components can use Active Directory authorization attributes for the decision-making process? (Choose 2)

A. Role Mapping Policy

B. Posture Policy

C. Enforcement Policy

D. Service Rules

What information can we conclude from the following graph?

A. This graph represents all authentication requests received by Clearpass in one year.

B. This graph represents all authentication requests received by Clearpass in a day.

C. The graph represents all authentication requests received by Clearpass in a month.

D. Each bar represents total authentication requests per minute.

E. Each bar represents total authentication requests per day.

Refer to the screenshot below: Based on the above configuration, which of the following statements is true?

A. The visitor_phone field will be visible to operator creating the account.

B. The visitor_phone field will be visible to the guest users in the web login page.

C. The visitor_company field will be visible to operator creating the account.

D. The visitor_company field will be visible to the guest users in the web login page.

E. The email field will be visible to guest users on the web login page.

Refer to the screenshot below: Based on the above configuration which of the following statements is true?

A. Only guest users connecting to SSID Aruba will be allowed access to the network by ClearPass Guest.

B. The minimum password length for guest passwords is set to a default value of 8.

C. The usernames generated for guest users by Guest Manager will be a combination of random numbers.

D. The password generated for guest users by Guest Manager will be a combination of random numbers.

Below is an extract from the Web Login Page configuration in ClearPass Guest: What is the purpose of the Pre-Auth Check?

A. To authenticate users before they launch the Web Login Page.

B. To authenticate users before ClearPass sends the credentials to the NAD device.

C. To authenticate users after the NAD device sends an authentication request to ClearPass.

D. To replace the need for the NAD to send an authentication request to ClearPass.

E. To re-authenticate users when they're roaming from one NAD to another.

Below is an Enforcement Profile that has been created in the Policy Manager: What is the action that is taken by this Enforcement Profile?

A. ClearPass will count down 600 seconds and send a RADIUS CoA message to the NAD device to end the user's session after this time is up.

B. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.

C. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the NAD device and the NAD will end the user's session after 600 seconds.

D. ClearPass will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD device and the NAD will end the user's session after 600 seconds.

Below is a screenshot of a user logged in to the Self-Service Portal:

Notice the traffic received and traffic sent statistics. Which of the following is true?

A. These show the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

B. These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.

C. These show the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.

D. These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass.

Which of the following steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Choose 2)

A. Configure the ClearPass Policy Manager as an Authentication server on the network device.

B. Configure ClearPass roles on the network device.

C. Configure RADIUS Enforcement Profile for the desired privilege level.

D. Configure TACACS Enforcement Profile for the desired privilege level.

E. Enable RADIUS accounting on the NAD device.

Which of the following is true? (Choose 2)

A. Mobile Device Management is used to control device usage post-onboarding

B. Mobile Device Management is an application container that is used to provision work applications

C. Mobile Device Management cannot be deployed without Workspace

D. 3rd party Mobile Device Management solutions can be integrated with Clearpass

E. Mobile Device Management cannot do remote wipes of devices without workspace being installed

Which of the following statements is true about certificate revocation?

A. Onboard cannot revoke device certificates.

B. Revoked certificates are automatically deleted from Certificate Management.

C. When a certificate is revoked, OCSP checks for certificate validity will fail.

D. A revoked certificate becomes valid again after 24 hours.

E. Certificates can only be revoked once they expire.

Refer to the screen capture below:

Based on the Enforcement Policy configuration shown in the capture, what Enforcement Profile will an employee connecting an iOS device to the network for the first time receive using EAP- PEAP?

A. Deny Access Profile

B. Onboard Post-Provisioning - Aruba

C. Onboard Pre-Provisioning Aruba

D. Cannot be determined

E. Onboard Device Repository

A guest self-registered through a Publisher's Register page. Which of the following will occur?

A. The guest's account will be stored in the Publisher's guest user repository, but not the Subscriber's.

B. The guest's account will be stored in both the Publisher's guest user repository and the Subscriber's guest user repository.

C. The guest's account will be stored in the Publisher's local user repository and the Subscriber's guest user repository.

D. The guest's account will be stored in the Publisher's guest user repository and the Subscriber's Onboard user repository.

E. The guest's account will ONLY be stored in the Publisher's guest user repository.

Refer to the screen capture below If a user from the department "HR" connects on Monday to a switch that belongs to the Device Group Remote NAD, what roles are assigned to the user in Clearpass? (Choose 2)

A. Executive

B. Remote Employee

C. iOS Device

D. Guest

E. HR Local