Exam Code : HPE6-A68
Exam Name : Aruba Certified ClearPass Professional (ACCP)
Vendor Name :
"HP"
HPE6-A68 Dumps HPE6-A68 Braindumps
HPE6-A68 Real Questions HPE6-A68 Practice Test HPE6-A68 Actual Questions
killexams.com
Aruba Certified ClearPass Professional (ACCP)
https://killexams.com/pass4sure/exam-detail/HPE6-A68
Question:51
Refer to the exhibit.
An AD user’s department attribute is configured as “HR”. The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD. Which roles are assigned to the user in ClearPass? (Choose two.)
Remote Employee
Executive
Vendor
iOS Device
HR Local
Question::52
Refertotheexhibit.
Based on the Enforcement Policy configuration, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?
RestrictedACL
HR VLAN
Remote Employee ACL
[Deny Access Profile]
EMPLOYEE_VLAN
Answer: D
Question: 53
A customer wants to make enforcement decisions during 802.1x authentication based on a client’s Onguard posture token. What enforcement profile should be used in the health check service?
Quarantine VLAN
RADIUS CoA
RADIUS Accept
RADIUS RejectE. Full Access VLAN.
Answer: B
Question: 54
Which authorization servers are supported by ClearPass? (Choose two.)
Active Directory
Cisco Controller
Aruba Controller
LDAP server
Aruba Mobility Access Switch
Answer: AD
Question: 55
Refer to the exhibit.
In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?
to send information via RADIUS packets to Aruba NADs
to gather and send Aruba NAD information to ClearPass
to send information via RADIUS packets to clients
to gather information about Aruba NADs for ClearPass
to send CoA packets from ClearPass to the Aruba NAD
Answer: C
Question: 56
A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees. However, they’re concerned about security.
What is true? (Choose three.)
If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well.
During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted.
After authentication, an IPSEC VPN on the guest’s client be used to encrypt Internet traffic.
HTTPS should never be used for Web Login Page authentication.
If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.
Answer: BCE
Question: 57
Refer to the exhibit.
Which statement accurately describes the cp82 ClearPass node? (Choose two.)
It stays as a Subscriber when the Publisher fails.
It becomes the Publisher when the primary Publisher fails.
It operates as a Publisher in a separate cluster when the Publisher is active.
It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.
It operates as a Subscriber when the Publisher is active.
Answer: AE
Question: 58
A customer with an Aruba Controller wants to set it up to work with ClearPass Guest.
Hoe should they configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?
Add ClearPass as RADIUS CoA server.
Add ClearPass as a TACACS+ authentication server.
Add ClearPass as a RADIUS authentication server.
Add ClearPass as a HTTPS authentication server.
Answer: A