HPE6-A68試験無料問題集（118題）「HP Aruba Certified ClearPass Professional 認定」

出題：1

ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.
What will be the outcome of this state?

A. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

B. RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.

C. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

D. RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.

E. During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.

正解：A 解答を投票する

出題：2

A customer would like to deploy ClearPass with these requirements:
every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS every Friday, a meeting with business partners takes place and an additional 50 devices need to authenticate using Web Login Guest Authentication What should the customer do regarding licenses? (Select two.)

A. Purchase Onboard licenses.

B. Purchase Onguard licenses.

C. Purchase guest licenses.

D. When counting policy manager licenses, exclude the additional 50 business partner devices.

E. When counting policy manager licenses, include the additional 50 business partner devices.

正解：A,E 解答を投票する

出題：3

A customer wants all guests who access a company's guest network to have their accounts approved by the receptionist, before they are given access to the network.
How should the network administrator set this up in ClearPass? (Select two.)

A. Configure SMTP messaging in the Policy Manager.

B. Enable sponsor approval confirmation in Receipt actions.

C. Configure a MAC auth service in the Policy Manager.

D. Configure a MAC caching service in the Policy Manager.

E. Enable sponsor approval in the captive portal authentication profile on the NAD.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which components of a ClearPass is mandatory?

A. Profiler

B. Role Mapping Policy

C. Posture

D. Enforcement

E. Authorization Source

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Exhibit:

Based on the Local User repository in ClearPass shown, which Aruba firewall role will be assigned to "mike" when this user authenticates Aruba Controller?

A. john

B. We can't know this from the screenshot above.

C. Employee

D. mike

正解：B 解答を投票する

出題：6

Refer to the exhibit.

An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

A. Deny Access Profile

B. Onboard Device Repository

C. Onboard Post-Provisioning - Aruba

D. Onboard Pre-Provisioning - Aruba

正解：C 解答を投票する

出題：7

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

A. a matching shared secret must be configured on both the ClearPass server and NAD

B. an NTP server needs to be set up on the NAD

C. a bind username and bind password must be provided

D. the ClearPass server certificate must be installed on the NAD

E. the ClearPass server must have the network device added as a valid NAD

正解：A,E 解答を投票する

出題：8

Refer to the exhibit.

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad? (Select two.)

A. SmartDevice

B. SNMP

C. DHCP fingerprinting

D. HTTP User-Agent

E. Onguard Agent

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which is a valid policy simul-ation types in ClearPass? (Choose three.)

A. Posture token derivation

B. Role Mapping

C. Enforcement Policy

D. Endpoint Profiler

E. Chained simulation

正解：B,C,E 解答を投票する

出題：10

Refer to the exhibit.

What is the purpose of the 'Clock Skew Allowance' setting? (Select two.)

A. to set expiry time in client certificate to a few minutes longer than the default setting

B. to ensure client certificate validation does not fail due to client clock sync issues

C. to set start time in client certificate to a few minutes before current time

D. to adjust clock time on client device to a few minutes before current time

E. to ensure server certificate validation does not fail due to client clock sync issues

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

HPE6-A68試験無料問題集「HP Aruba Certified ClearPass Professional 認定」