HPE6-A15 Online Practice Questions and Answers

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

What is the Address field value `securelogin.arubanetworks.com' used for?

A. for ClearPass to send a TACACS+ request to the NAD

B. for appending to the Web Login URL, before the page name

C. for the client to POST the user credentials to the NAD

D. for ClearPass to send a RADIUS request to the NAD

E. for appending to the Web Login URL, after the page name.

Refer to the exhibit.

Based on the Access Tracker output for the user shown, which statement describes the status?

A. The Aruba Terminate Session enforcement profile as applied because the posture check failed.

B. A Healthy Posture Token was sent to the Policy Manager.

C. A RADIUS-Access-Accept message is sent back to the Network Access Device.

D. The authentication method used is EAP-PEAP.

E. A NAP agent was used to obtain the posture token for the user.

Why can the Onguard posture check not be performed during 802.1x authentication?

A. Health Checks cannot be used with 802.1x.

B. Onguard uses RADIUS, so an additional service must be created.

C. Onguard uses HTTPS, so an additional service must be created.

D. Onguard uses TACACS, so an additional service must be created.

E. 802.1x is already secure, so Onguard is not needed.

Refer to the exhibit.

A customer wants to enable Publisher redundancy.

Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

A. Subscriber in the main data center

B. Publisher in the regional office

C. any of the other three Publishers

D. Publisher in the mid-size branch

E. Publisher in the DMZ

Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

A. EAP-TLS Authentication will be unaffected

B. The user can Onboard their device again

C. A new device certificate will be automatically pushed out to the device

D. The user cannot Onboard their device again

E. EAP-TLS Authentication will fail

Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

A. radius01 was deleted from the list of authentication sources.

B. The policy service was moved to position number 4.

C. radius01 was moved to position number 4.

D. The policy service was moved to position number 3.

E. raduis01 was added as an authentication source.

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

A. the ClearPass server must have the network device added as a valid NAD

B. the ClearPass server certificate must be installed on the NAD

C. a matching shared secret must be configured on both the ClearPass server and NAD

D. an NTP server needs to be set up on the NAD

E. a bind username and bind password must be provided

Which checks are made with Onguard posture evaluation on ClearPass? (Select three.)

A. Registry keys

B. EAP TLS certificate validity

C. Client role check

D. Peer-to-peer application checks

E. Operating System version

Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

A. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

B. The device will be disconnected from and reconnected to the network after Onboarding is completed.

C. The device's onboard authorization request will be denied.

D. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

E. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

What is the purpose of ClearPass Onboard?

A. to provide MAC authentication for devices that don't support 802.1x

B. to run health checks on end user devices

C. to provision personal devices to securely connect to the network

D. to configure self-registration pages for guest users

E. to provide guest access for visitors to connect to the network