HPE6-A07 Online Practice Questions and Answers

A ClearPass deployment needs to be designed to determine whether a user authenticating is an HR department employee in the Active Directory Server and whether the user's device is healthy.

Which policy service components will the network administrator need to use?

A. Posture, Authentication and Authorization

B. Posture and Firewall Roles

C. Posture and Onboard

D. Authentication and Authorization

E. Posture, Authentication and Onboarding

Which statement most accurately describes how users with Active Directory credentials authenticate with ClearPass when Active Directory is used as an authentication source for an 802.1x service in ClearPass?

A. A Kerberos request is sent from the Network Access Device to ClearPass which initiates a RADUIS request to the AD server.

B. A RADIUS request is sent from the Network Access Device to the AD server which communicates with ClearPass.

C. An LDAP request is sent from the Network Access Device to the AD server which communicates with ClearPass.

D. An LDAP request is sent from the Network Access Device to ClearPass which initiates a RADIUS request to the AD server.

E. A RADIUS request is sent from the Network Access Device to the ClearPass which communicates with the AD server.

Where is the web login page created in the ClearPass UI?

A. WebAuth Service

B. Captive Portal Profile

C. ClearPass Policy Manager

D. Guest Login Service

E. ClearPass Guest

What does a client need for it to perform EAP-TLS successfully? (Select two.)

A. Username and Password

B. Server Certificate

C. Pre-shared key

D. Certificate Authority

E. Client Certificate

Which authentication type allows a device to authenticate with a client certificate?

A. 802.1X/EAP

B. WEP Authentication

C. MAC Authentication

D. Captive Portal Authentication

E. Open System Authentication

A guest user connects to an Aruba Controller wireless network and is redirected to a web login page on ClearPass.

How is the redirection performed?

A. The user inputs the URL of the web login page in their browser

B. The user is redirected to the securelogin.arubanetworks.com web login page.

C. ClearPass will capture web traffic and redirect the client to the Web Login page.

D. The controller will capture web traffic and redirect the traffic to the ClearPass Web Login page.

E. The user inputs the URL of the controller's securelogin.arubanetworks.com page in their browser.

Which device verifies the Server certificate during the Over the air provisioning process?

A. Aruba Controller

B. Active Directory

C. ClearPass Onboard

D. Client

E. ClearPass Policy Manager

Based on the information provided, what is the status of the network? (Select two.)

A. Posture check is enabled for Windows 7 OS.

B. Posture check is enabled for firewall client application in Windows 7 OS.

C. Auto remediation is enabled, hence the client will be forced to enable the firewall if it is found disabled.

D. Auto remediation can force the client to enable the firewall and also sends a notification to user.

E. Auto remediation cannot force the client to enable the firewall, it can only send notification to the user.

Which Operating Systems can use Network Access Protection (NAP) policy agents? (Select two.)

A. Windows XP

B. Android

C. Windows 7

D. Mac OS X

E. iOS 6 and higher

How is ClearPass enabled to perform DHCP profiling for devices in a network?

A. by enabling a port mirror on the network access device to mirror all user traffic to ClearPass

B. by enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

C. by enabling the `DHCP ignore' feature on network access devices

D. by configuring ClearPass as a secondary DHCP server on the client

E. by enabling profiling on ClearPass; configuration of the network access devices is not necessary

Which statement most accurately describes how the HTTP collector words for profiling?

A. HTTP packets are inspected when a user accesses any guest page on ClearPass.

B. When a user access the Aruba controller captive portal page, HTTP packets are captured by ClearPass.

C. HTTP packets are inspected only when a user accesses the ClearPass administration UI page.

D. When a user accesses any internet page, HTTP packets are captured by ClearPass.

E. HTTP packets are forwarded from the Controller to ClearPass.

Refer to the exhibit. Based on the information shown, what is the status of the network?

A. ClearPass can do TCP OS finger printing but Dictionary is not updated.

B. ClearPass cannot do TCP OS finger printing.

C. Device is Unknown to ClearPass.

D. Device is not authenticated.

E. ClearPass supports TCP finger printing but it is not enabled.

What will be the initial posture token of a device connecting with 802.1x authentication for the first time?

A. Unhealthy

B. Quarantine

C. Checkup

D. Unknown

E. Healthy

Refer to the exhibit.

Which user authentication request will match the service rules of the Policy Service shown?

A. a wireless user connecting to the SSID Corporate

B. a guest user authenticating via captive portal

C. a wireless user connecting to any network

D. all authentication requests

E. a wired user connecting to an Aruba Controller

Which agents are valid Posture agents used by the ClearPass Policy Manager? (Choose three.)

A. OnGuard persistent agent

B. Microsoft AD

C. OnGuard dissolvable agent

D. Cisco Trust Agent

E. Microsoft NAP