HPE6-A15 Online Practice Questions and Answers

Which components can use Active Directory authorization attributes for the decision-making process? (Select two.)

A. Profiling policy

B. Certificate validation policy

C. Role Mapping policy

D. Enforcement policy

E. Posture policy

Which authorization servers are supported by ClearPass? (Select two.)

A. Aruba Controller

B. LDAP server

C. Cisco Controller

D. Active Directory

E. Aruba Mobility Access Switch

What is the purpose of Operator Profiles?

A. to enforce role based access control for Aruba Controllers

B. to enforce role based access control for ClearPass Policy Manager admin users

C. to enforce role based access control for ClearPass Guest Admin users

D. to assign ClearPass roles to guest users

E. to map AD attributes to admin privilege levels in ClearPass Guest

Refer to the exhibit.

Based on the configuration of the create_user form shown, which statement accurately describes the status?

A. The email field will be visible to guest users when they access the web login page.

B. The visitor_company field will be visible to operators creating the account.

C. The visitor_company field will be visible to the guest users when they access the web login page.

D. The visitor_phone field will be visible to the guest users in the web login page.

E. The visitor_phone field will be visible to operators creating the account.

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on the Enforcement Profile?

A. it will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user's session after this time is up

B. it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds

C. it will count down 600 seconds and send a RADIUS CoA message to the user to end the user's session after this time is up

D. it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user's session will be terminated after 600 seconds

An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop. Which licenses are consumed in this scenario?

A. 1 Policy Manager license, 1 Onboard License

B. 2 Policy Manager licenses, 1 Onguard License

C. 1 Policy Manager license, 1 Profile License

D. 2 Policy Manager licenses, 2 Onguard licenses

E. 1 Policy Manager license, 1 Onguard License

Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

A. EAP-TLS Authentication will be unaffected

B. The user can Onboard their device again

C. A new device certificate will be automatically pushed out to the device

D. The user cannot Onboard their device again

E. EAP-TLS Authentication will fail

Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

A. radius01 was deleted from the list of authentication sources.

B. The policy service was moved to position number 4.

C. radius01 was moved to position number 4.

D. The policy service was moved to position number 3.

E. raduis01 was added as an authentication source.

Which checks are made with Onguard posture evaluation on ClearPass? (Select three.)

A. Registry keys

B. EAP TLS certificate validity

C. Client role check

D. Peer-to-peer application checks

E. Operating System version

Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user's request?

A. After the RADIUS Access-Request

B. After the NAS login, but before the RADIUS Access-Request

C. Before the user can submit the registration form

D. After the RADIUS Access-Response

E. After the receipt page is displayed, before the NAS login