HPE Sales Certified - Aruba Products and Solutions… Practice Exam

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

58Practice Questions

3Study Modes

Free

TopicSort

Question 1

Overview and Active Directory

When is it appropriate to use the built-in Local user database in ClearPass?

A In a public-facing guest network environment where the guests are prompted to self-register.
B In small-business environments where the user accounts rarely change and new accounts are uncommon.
C In a hospitality deployment for guest accounts created and managed by staff.
D In a large campus environment where Students and Contractors account for 35.000 entries that change weekly.

Question 2

Overview and Active Directory

Question 3

Endpoint Analysis and Posture

Question 4

Endpoint Analysis and Posture

Question 5

Endpoint Analysis and Posture

Question 6

Guest

Question 7

Endpoint Analysis and Posture

Question 8

Guest

Question 9

Guest

Question 10

Endpoint Analysis and Posture

Question 11

Overview and Active Directory

Question 12

Overview and Active Directory

Question 13

Guest

Question 14

Endpoint Analysis and Posture

Question 15

Endpoint Analysis and Posture

Question 16

Endpoint Analysis and Posture

Question 17

Endpoint Analysis and Posture

Question 18

Guest

Question 19

Overview and Active Directory

Question 20

Guest

Question 21

Overview and Active Directory

Question 22

Guest

Question 23

Guest

Question 24

Guest

That's the end of the Preview

This exam has 58 community-verified practice questions. Create a free account to access all questions, comments, and explanations.

Topics covered:

Overview and Active DirectoryGuestEndpoint Analysis and Posture

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 58

1 2 3

→

Know a question that should be here? Contribute to this exam

What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

A ClearPass will validate the user credentials, then, for the duration of the cache, ClearPass will just fetch account attributes.
B The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.
C ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes.
D The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials.

What is true regarding Posturing and Profiling?

A Profiling describes categorizing the user based on their department while Posturing validates the user as authenticated.
B Profiling is the act of identifying the endpoint type while Posturing is assigning a status as to the health of the endpoint.
C Posturing and Profiling are role assignments in ClearPass used internally to map to enforcement policies.
D Both Posturing and Profiling describe the same thing; what is the health of the client endpoint?

DRAG DROP -
Match the ClearPass system description to the best term. Options are used only once.
Select and Place:

Question Image

ClearPass receives fingerprinting profile data for a client device that is based on MAC OUI, NMAP, DHCP, and OnGuard.
Which fingerprint or fingerprints are used?

A NMAP because it is actively obtained
B The last fingerprint gathered
C OnGuard because it is application based
D All fingerprints are applied

Question 6

Guest

Question 7

Endpoint Analysis and Posture

Question 8

Guest

Question 9

Guest

Question 10

Endpoint Analysis and Posture

Question 11

Overview and Active Directory

Question 12

Overview and Active Directory

Question 13

Guest

Question 14

Endpoint Analysis and Posture

Question 15

Endpoint Analysis and Posture

Question 16

Endpoint Analysis and Posture

Question 17

Endpoint Analysis and Posture

Question 18

Guest

Question 19

Overview and Active Directory

Question 20

Guest

Question 21

Overview and Active Directory

Question 22

Guest

Question 23

Guest

Question 24

Guest

Refer to the exhibit.

Question Image

Where will the guests browser be redirected during a captive portal login attempt?

A The redirect will time out and fail to resolve.
B The captive portal page hosted on Aruba Central in the cloud.
C The captive portal page hosted on the Aruba controller.
D The captive portal page hosted on ClearPass.

DRAG DROP -
Match the correct Profiling Collector with the Collector Type. Collector Types may be used more than once.
Select and Place:

Question Image

Sponsorship has been enabled on the guest network. A guest user connects and completes the self-registration form indicating a valid sponsor. The guest then clicks submit.
What is the current state of the guest account?

A The guest account is created in an enabled state with the "Log In" button functional.
B The guest account is created in disabled state, the "Log In" button will appear only after the sponsor approval process is completed.
C The guest account is created in a disabled state with the "Log In" button grayed out.
D The guest account is not yet created and remains in a disabled state. There is not "Log In" button yet displayed.

What is the purpose of service rules in ClearPass?

A selects the Enforcement Profiles used in a service
B selects the Service to process a request
C selects the Authentication Source for the client
D selects the Posture Policy used with OnGuard

What is a good collector type used for ClearPass to discover devices with static IP addresses?

A DHCP Collectors
B ClearPass Air Monitors
C Active Collectors
D Network Functions

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

A When you want to match Active Directory attributes directly to an enforcement policy.
B When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device.
C When you want to translate and combine Active Directory attributes into ClearPass roles.
D When you want to enable attributes as roles directly without combining multiple attributes.

Refer to the exhibit.

Question Image

What are two consequences of the Cache Timeout being set to 36000 seconds? (Choose two.)

A ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.
B Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.
C The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.
D A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended.
E On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

Refer to the exhibit.

Question Image

When creating a new ClearPass Service, the [Time Source] has been added as an authorization source.
What time source is ClearPass referencing?

A the ClearPass server where Insight Master has been enabled
B the local clock of the ClearPass server doing the authentication
C the local time setting found on the authenticating client machine
D the NTP (Network Time Protocol) source indicated in the Cluster settings

Which option supports DHCP profiling for devices in a network?

A DHCP profiling is enabled on ClearPass by default; configuration of DHCP relay on the Network Access Device (NAD) is not required.
B Configuring DHCP relay on ClearPass in order to allow the client to receive DHCP after being profiled.
C Enabling the DHCP server to profile endpoints and forward the meta-data to ClearPass.
D Enabling DHCP relay on Network Access Devices (NADs) to forward DHCP requests to ClearPass.

Which Authorization Source supports device profile enforcement?

A Local User Repository
B OnGuard Repository
C Endpoints Repository
D Guest User Repository

Which items can be obtained from device profiling? (Choose three.)

A Device Category
B Device Family
C Device Health
D Device Type
E Device Location

Which is true regarding the Cisco Device Sensor feature in ClearPass? (Choose two.)

A Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation.
B Requires the purchase of a supported Cisco Access Point licensed as an Aruba Monitor Mode AP, to then act as the sensor.
C Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets.
D Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP).
E Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature.

When using Guest Authentication with MAC Caching service template, which statements are true? (Choose two.)

A The guest authentication is provided better security than without using MAC caching.
B The endpoint status of the client will be treated as "known" the first time the client associates to the network.
C Which wireless SSID and wireless controller must be indicated when configuring the template.
D The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.

What are benefits of using Network Device Groups in ClearPass? (Choose two.)

A Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group.
B Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to.
C A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group.
D Another way to add a customizable "attribute" field to reference when processing authentication requests.
E Can apply to both Network Access Devices (NADs) as well as client machines as a way to filter authentication requests.

Aruba self-registration with sponsorship is a solution best applied to which type of network?

A a large corporate environment with hundreds of contractors requiring wireless access to printers and internet but no other guest access is allowed
B a chain of auto part stores where employees are assigned mobile devices using a Mobile Device Manager (MDM) and public wireless is available for customers
C a hotel where hundreds of guests are checked in and out of the building daily that may want access to wireless internet
D a chain of coffee shops using in a public downtown area with a high amount of guest turnover needing access to public wireless

When joining ClearPass to an Active Directory (AD) domain, what information is required? (Choose two.)

A Fully Qualified Domain Name (FQDN) of the AD Domain Controller.
B ClearPass Policy Manager (CPPM) enterprise credentials.
C Domain Administrator credentials with at least read access.
D Cache Timeout value set to at least 10 hours.
E Domain User credentials with read-write access.

Refer to the exhibit.

Question Image

What does a bold field indicate?

A The field is a non-system field
B The field is currently enabled
C The field has been customized
D The field is required

An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again.
Which ClearPass features can be used to meet these requirements?

A Guest access with MAC caching
B Guest self-registration with sponsor approval
C Enforcement based on endpoint profiling
D ClearPass Onboard Portal

An organization wants guests to be able to create their own guest accounts for access to the public WLAN. Guests do not want to have to repeatedly log in multiple times through the day.
Which ClearPass feature can meet these requirements?

A ClearPass Onboard Portal.
B Guest access with Media Access Control (MAC) caching.
C Enforcement based on endpoint profiling.
D Guest self-registration with sponsor approval.

Join Us Among the Stars

HPE Sales Certified - Aruba Products and Solutions (HPE6-A82)Preview

About the HPE Sales Certified - Aruba Products and Solutions (HPE6-A82) Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24