HPE6-A82 Online Practice Questions and Answers

Refer to the exhibit.

Where will the guests browser be redirected during a captive portal login attempt?

A. The redirect will time out and fail to resolve.

B. The captive portal page hosted on Aruba Central in the cloud.

C. The captive portal page hosted on the Aruba controller.

D. The captive portal page hosted on ClearPass.

Refer to the exhibit.

What does Search Base Dn do when joining an Active Directory domain? (Choose two.)

A. validates the connection details entered in the Connection Details

B. searches for the Base DN (Distinguished Name) based on what was typed in the field

C. sets the starting point in the directory tree for the Base DN (Distinguished Name) search

D. updates the Base DN (Distinguished Name) in Active Directory if no match is found

E. runs an Active Directory query that returns all results along with any matching the entered Base DN (Distinguished Name)

What is the purpose of service rules in ClearPass?

A. selects the Enforcement Profiles used in a service

B. selects the Service to process a request

C. selects the Authentication Source for the client

D. selects the Posture Policy used with OnGuard

Refer to the exhibit.

When creating a new ClearPass Service, the [Time Source] has been added as an authorization source. What time source is ClearPass referencing?

A. the ClearPass server where Insight Master has been enabled

B. the local clock of the ClearPass server doing the authentication

C. the local time setting found on the authenticating client machine

D. the NTP (Network Time Protocol) source indicated in the Cluster settings

Refer to the exhibit.

Which user authentication request will match the service rules of the Policy Service shown?

A. a wireless user connection would fail because of miss-configured service rules

B. a wireless user connected to any SSID named "CORP"

C. a wireless user connecting to any SSID on an Aruba Controller

D. a wireless user connecting to an Aruba IAP on the SSID "CORP"

A customer with 677 employees would like to authenticate employees using a captive portal guest web login page. Employees should use their AD credentials to login on this page.

Which statement is true?

A. The customer needs to add second guest service in the policy manager for the guest network.

B. The customer needs to add the AD server as an authentication source in a guest service.

C. Employees must be taken to a separate web login page on the guest network.

D. The customer needs to add the AD servers RADIUS certificate to the guest network.

Which is true regarding the Cisco Device Sensor feature in ClearPass? (Choose two.)

A. Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation.

B. Requires the purchase of a supported Cisco Access Point licensed as an Aruba Monitor Mode AP, to then act as the sensor.

C. Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets.

D. Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP).

E. Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature.

When using Guest Authentication with MAC Caching service template, which statements are true? (Choose two.)

A. The guest authentication is provided better security than without using MAC caching.

B. The endpoint status of the client will be treated as "known" the first time the client associates to the network.

C. Which wireless SSID and wireless controller must be indicated when configuring the template.

D. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.

When joining ClearPass to an Active Directory (AD) domain, what information is required? (Choose two.)

A. Fully Qualified Domain Name (FQDN) of the AD Domain Controller.

B. ClearPass Policy Manager (CPPM) enterprise credentials.

C. Domain Administrator credentials with at least read access.

D. Cache Timeout value set to at least 10 hours.

E. Domain User credentials with read-write access.

An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again.

Which ClearPass features can be used to meet these requirements?

A. Guest access with MAC caching

B. Guest self-registration with sponsor approval

C. Enforcement based on endpoint profiling

D. ClearPass Onboard Portal