ACCP-V6.2 Online Practice Questions and Answers

A customer would like to deploy ClearPass with the following objectives: Every day, 100 employees authenticate with their corporate laptops using EAP-TLS. Every Friday, there is a meeting with business partners and an additional 50 devices authenticate using Web Login Guest Authentication.

Which of the following is correct? (Choose 2)

A. When counting policy manager licenses, they need to include the additional 50 business partner devices

B. When counting policy manager licenses, they can exclude the additional 50 business partner devices

C. They should purchase guest licenses

D. They should purchase onboard licenses

E. They should purchase onguard licenses

An employee authenticates using their corporate laptop and runs the dissolvable onguard agent to send a health check back the Policy Manager. Based on the health of the device a VLAN is assigned to the corporate laptop.

Which licenses are consumed in this scenario?

A. 1 Policy Manager license, 1 Onboard License.

B. 1 Policy Manager license, 1 OnGuard License.

C. 2 Policy Manager licenses, 1 OnGuard License.

D. 1 Policy Manager license, 1 Profile License.

E. 2 Policy Manager licenses, 2 Onguard licenses.

Refer to the screen capture below: Based upon Endpoint information shown here, which collectors were used to profile the device as Apple iPad? (Choose 2)

A. OnGuard Agent

B. HTTP User-Agent

C. DHCP fingerprinting

D. SNMP

E. SmartDevice

Refer to the screen capture below: Based on the Enforcement Policy configuration, if a user connects to the network using an Apple iphone, what Enforcement Profile is applied?

A. WIRELESS_CAPTIVE_NETWORK

B. WIRELESS_HANDHELD_NETWORK

C. WIRELESS_GUEST_NETWORK

D. WIRELESS_EMPLOYEE_NETWORK

E. Deny Access

An administrator enabled the Pre-auth check for their guest self-registration. At what stage in the registration process is this check performed?

A. Before the user self-registers.

B. After the user self-registers; before the user logs in.

C. After the user logs in; before the NAD sends an authentication request.

D. After the user logs in; after the NAD sends an authentication request.

E. When a user is re-authenticating to the network.

What is the certificate format PKCS #7, or .p7b, used for?

A. Certificate chain

B. Certificate Signing Request

C. Certificate with an encrypted private key

D. Binary encoded X.509 certificate

E. Binary encoded X.509 certificate with public key

Refer to the screenshot below:

Which of the following statements is true regarding the above configuration for network settings? (Choose 2)

A. Onboarded devices will connect to Employee_Secure SSID after provisioning.

B. Onboarded devices will connect to secure_emp SSID after provisioning.

C. Users will connect to Employee_Secure SSID for provisioning their devices.

D. Users must enter a Pre-shared key to connect to the network.

E. Users will do 802.1X authentication when connecting to the SSID.

Refer to the screen capture below:

Based on the Enforcement Policy configuration shown in the capture, what Enforcement Profile will an employee connecting an iOS device to the network for the first time receive using EAP- PEAP?

A. Deny Access Profile

B. Onboard Post-Provisioning - Aruba

C. Onboard Pre-Provisioning Aruba

D. Cannot be determined

E. Onboard Device Repository

How is Authorization used in a Policy Service? Refer to the diagram below: A. It allows us to use attributes stored in databases in role mapping and Enforcement.

B. It allows us to use attributes stored in databases in role mapping only, but not Enforcement.

C. It allows us to use attributes stored in databases in Enforcement only, but not role mapping.

D. It allows us to use attributes stored in external databases for Enforcement, but authorization does not use internal databases for reference.

E. It allows us to use attributes stored in internal databases for Enforcement, but authorization does not use external databases for reference.

Which of the following checks are made with OnGuard posture evaluation in Clearpass? (Choose 3)

A. Peer-to-peer application checks

B. Client role check

C. EAP TLS certificate validity

D. Registry keys

E. Operating System version