HPE6-A81 Exam Training Practice Tests (HP Aruba Certified ClearPass Expert Written)]

Question 1

There is an Aruba Controller configured to stand Guest AAA requests to ClearPass If the customer would likt tht most effective way to ensure the lowest license usage counts, how should the controller be configured?

A. Configure EAP Termination on the Aruba Controller and the client will send a stop message. B. Aruba Controller will send stop messages if RADIUS Accounting Server Group is defined in the authentication profile. C. Aruba Controller will send stop messages only if EAP termination and Interim accounting are enabled. D. Aruba Controller will send stop messages only if both accounting and Interim accounting are enabled.

Correct Answer: B

Question 2

Refer to the exhibit.

A customer has configured Onboard in his lab ClearPass server and Windows devices work as expected but cannot get the Apple iOS devices to Onboard successfully Where would you look to troubleshoot the issue? {Select two)

A. Check if the customer has installed the same internal PKI signed RADIUS server certificate as the HTTPS server certificate. B. Check if the customer has installed a custom HTTPS certificate for iOS and another internal PKI HTTPS certificate for other devices. C. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client. D. Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority. E. Check if the customer installed the internal PKI Root certificate presented by the ClearPass during the provisioning process.

Correct Answer: C,D

Question 3

Refer to the exhibit.

A customer has incomplete information for endpoints in the Endpoint Repository. In order to make accurate decisions about what types of devices are connecting to the network. ClearPass is enabled to process the device information from IF-MAP interface, but no updates are received. What can the customer do to update those endpoints using IF-MAP?

A. Configure ClearPass Management IP in the DHCP Helper address B. Configure IF-MAP only on Aruba Mobility Controller, providing ClearPass username and password C. Configure IF-MAP on all networking devices to send additional information to ClearPass D. Configure the authentication service to Audit the endpoints using, the embedded Nmap Server

Correct Answer: A

Question 4

Refer to the exhibit.

What enforcement prof lit will be assigned to the Windows 10 MDH enabled devices if it completes user authentication and is already profiled by ClearPess?

A. Cisco Redirect ACL for profiling B. Cisco Redirect URL - Service Unavailable C. Cisco Full Access VLAN D. Default - Deny Access Profile

Correct Answer: D

Question 5

Your customer has recently implemented a seIf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller Your customer has started complaining that the users are not able to reliably access the Internet after clicking the login button on the receipt page They tell you that the users will click the login button multiple times and after about a minute they gam access.
What could be causing this issue?

A. The guest users are assigned a firewall user role that has a rate limit. B. The guest users are assigned multiple DNS servers delaying DNS response. C. The self-registration page is configured with a 1 minute login delay. D. The enforcement profile on ClearPass is set up with an IETF:session delay.

Correct Answer: D

Question 6

Refer to the exhibit.

You have set up a home lab for ACCX exam preparation with Aruba Clear Pass integrated with Aruba Controller and Instant Access Point Guest Mac Caching functionality is configured only for Aruba Controller's guest SSID and a common Web Login page is configured for both NAD devices You tested and verified the mac caching functionality for a client by connecting it to the Aruba Controller's guest SSID.
What will happen when you disconnect the client from Aruba Controller's guest SSID and connect it to Instant APs guest SSID?

A. The client does not have to complete any authentication as the re-connection was immediate. B. The client will be redirected to the captive portal page to complete the web authentication. C. The client will fail the mac authentication and will be redirected to the captive portal page. D. The client will bypass the captive portal authentication by completing the MAC authentication.

Correct Answer: D

HP Aruba Certified ClearPass Expert Written - HPE6-A81 Exam Practice Test