ACCP-V6.2 Online Practice Questions and Answers

An employee authenticates using their corporate laptop and runs the dissolvable onguard agent to send a health check back the Policy Manager. Based on the health of the device a VLAN is assigned to the corporate laptop.

Which licenses are consumed in this scenario?

A. 1 Policy Manager license, 1 Onboard License.

B. 1 Policy Manager license, 1 OnGuard License.

C. 2 Policy Manager licenses, 1 OnGuard License.

D. 1 Policy Manager license, 1 Profile License.

E. 2 Policy Manager licenses, 2 Onguard licenses.

Which of the following are valid policy simulation types in Clearpass? (Choose 3)

A. Role Mapping

B. Endpoint Profiler

C. Authorization Attributes

D. Chained Simulation

E. Enforcement Policy

A Bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with Bank Employees. However, they're concerned about security.

Which of the following is true? (Choose 3)

A. During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted.

B. If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well.

C. If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.

D. After authentication, an IPSEC VPN on the guest's client can be used to encrypt Internet traffic.

E. HTTPS should never be used for Web Login Page authentication.

What does a client need for it to perform EAP-PEAP successfully, if 'Validate Server Certificate' is not enabled?

A. Username and Password

B. Client Certificate

C. Pre-shared key

D. Certificate Authority

E. Server Certificate

Refer to the screenshot below:

Which of the following statements is correct regarding the above configuration for 'maximum devices'?

A. It limits the total number of Onboarded devices connected to the network.

B. It limits the total number of devices that can be provisioned by ClearPass.

C. It limits the number of devices that a single user can Onboard.

D. It limits the number of devices that a single user can connect to the network.

E. With this setting, the user cannot Onboard any devices.

Shown here is an Aruba Instant configuration screenshot What is the purpose of enabling the 'Dynamic RADIUS proxy' feature?

A. The Instant AP will proxy all RADIUS Access-Requests sent to it from clients and will forward these to ClearPass.

B. The Instant AP will send a RADIUS Access-Reject packet to other Instant APs in the cluster if credentials are incorrect, to reduce the number of RADIUS requests sent to ClearPass.

C. All Instant APs in the cluster will use the Virtual Controller IP as the Source IP for RADIUS requests.

D. All Instant APs in the cluster will use the Virtual Controller IP as the Destination IP for RADIUS requests.

E. The Instant AP will proxy all RADIUS Access-Requests sent to it from Clearpass and will forward these to the clients.

What must be configured to enable RADIUS authentication with Clearpass on a network access device (NAD)? (Choose 2)

A. An NTP server needs to be set up on the NAD.

B. A bind username and bind password must be provided.

C. A shared secret must be configured on the Clearpass server and NAD.

D. The Clearpass server must have the network device added as a valid NAD.

E. The Clearpass server certificate must be installed on the NAD.

Refer to the screen capture below If a user from the department "QA" authenticates from a laptop running MAC OS X, what role is assigned to the user in Clearpass?

A. iOS Device

B. Remote Employee

C. HR Local

D. Guest

E. Executive

Refer to the screen capture below:

Based on the Attribute configuration shown above, which of the following statements is true?

A. Only the attribute values of department and memberOf can be used in role mapping policies.

B. Only the attribute values of title, telephoneNumber, mail can be used in role mapping policies.

C. Only the attribute values of company can be used in role mapping policies.

D. The attribute values of department and memberOf are directly applied as ClearPass roles.

E. The attribute values of department, title, memberOf, telephoneNumber, mail are directly applied as ClearPass roles.

Which of following is true for both the persistent and dissolvable versions of OnGuard? (Choose 2)

A. Ability to bounce the endpoint

B. Auto-remediation is available

C. Gather statement of health information for network authorization

D. Supports Windows, Mac OS X devices

E. They need to be installed on the client devices.