New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

HPE Aruba Certified HPE6-A68 HP Study Notes

Page: 3 / 4
Total 116 questions

Aruba Certified ClearPass Professional (ACCP) V6.7 Questions and Answers

Question 9

Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

Options:

A.

The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

B.

The device will be disconnected from and reconnected to the network after Onboarding is completed.

C.

The device’s onboard authorization request will be denied.

D.

The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

E.

After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

Question 10

A customer wants all guests who access a company’s guest network to have their accounts approved by the receptionist, before they are given access to the network.

How should the network administrator set this up in ClearPass? (Select two.)

Options:

A.

Enable sponsor approval confirmation in Receipt actions.

B.

Configure SMTP messaging in the Policy Manager.

C.

Configure a MAC caching service in the Policy Manager.

D.

Configure a MAC auth service in the Policy Manager.

E.

Enable sponsor approval in the captive portal authentication profile on the NAD.

Question 11

Refer to the exhibit.

Which statements accurately describe the cp82 ClearPass node? (Select two.)

Options:

A.

It becomes the Publisher when the primary Publisher fails.

B.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

C.

It operates as a Publisher in a separate cluster when the Publisher is active.

D.

It operates as a Subscriber when the Publisher is active.

E.

It stays as a Subscriber when the Publisher fails.

Question 12

ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.

What will be the outcome of this state?

Options:

A.

RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.

B.

During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.

C.

RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.

D.

RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

E.

RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

Page: 3 / 4
Total 116 questions