About the Exam

This is the Aruba ClearPass professional exam for network professionals pursuing the ClearPass certification path. It focuses on Aruba ClearPass network access control and configuration, and passing it demonstrates professional-level knowledge of the ClearPass 6.7 platform. HPE's ClearPass training materials describe the related certification area as foundational network access control skills using the HPE Aruba Networking ClearPass portfolio.

Exam Topics

Intro to ClearPass5%
ClearPass for AAA25%
External Authentication6%
Guest23%
Onboard17%
Endpoint Analysis6%
Posture8%
Operations and Admin Users0%
Clustering and Redundancy5%

How to Use This Practice Exam

Browse — Read each question, select your answer, and reveal the explanation.
Exam Mode — Simulate real exam conditions with a timed session and score report.
Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF

Learn More

Last updated July 13, 2026 at 12:26 PM

Topic filter

Retired questions

Question sort

Questions per page

QuestionQ1

Guest

A customer using an Aruba Controller wants to configure it to work with ClearPass Guest.

How should ClearPass be configured as an authentication server on the controller so that guests can authenticate successfully?

Explanation

ClearPass Guest authenticates guest credentials through RADIUS. Configure ClearPass on the Aruba Controller as a RADIUS authentication server so the controller can send guest authentication requests to ClearPass. RADIUS CoA supports changes to an existing session, not the initial guest authentication.

Learn more

Aruba Remote Access Point Networks Validated Reference Design

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Clustering and Redundancy

Refer to the exhibit.

Question Image

Which statements correctly describe the cp82 ClearPass node?

Choose two

Explanation

With Publisher Failover enabled, the designated standby publisher remains a Subscriber while the primary Publisher is active. If the primary Publisher fails and the configured failover interval elapses, the designated standby node is promoted to Publisher.

Learn more

ClearPass 6.7.0 Release Notes

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

ClearPass for AAA

Refer to the exhibit.

Question Image

In the Aruba RADIUS dictionary displayed, what is the purpose of the RADIUS attributes?

Explanation

Aruba RADIUS dictionary attributes define Aruba vendor-specific attribute names, identifiers, and data types so policy information—such as an Aruba user role or VLAN—can be carried in RADIUS packets sent to Aruba network access devices (NADs).

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Intro to ClearPass

Which statement is accurate about the databases in ClearPass?

Explanation

ClearPass supports deleting guest accounts from the guest user database, including through its guest-account DELETE API operation.

Learn more

Aruba ClearPass API Reference — Delete a guest account

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

ClearPass for AAA

Refer to the exhibit.

Question Image

Based on the Translation Rule configuration displayed, what is the resulting outcome?

Explanation

An enabled translation rule that matches a directory user’s group-membership reply attribute assigns the configured fixed operator profile to that matching user. Here, the resulting profile assignment is IT Administrators.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ6

ClearPass for AAA

Refer to the exhibit.

Question Image

Based on the information shown, what is the purpose of using [Time Source] for authorization?

Explanation

The Time Source supplies time-based attributes for role mapping, including evaluating the elapsed time since the most recent login authentication. Guest-account expiration and endpoint MAC-address information come from their respective guest-user and endpoint repositories.