Download Aruba Certified ClearPass Associate 6.5.HPE6-A07.PassLeader.2018-10-25.30q.vcex

Vendor: HP
Exam Code: HPE6-A07
Exam Name: Aruba Certified ClearPass Associate 6.5
Date: Oct 25, 2018
File Size: 1 MB

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Demo Questions

Question 1
  
Refer to the exhibit. Based on the information shown, why did the Joining AD fail?
  1. the GSS is wrong
  2. the wrong FQDN of the AD was entered while joining
  3. the wrong domain name was selected while joining the AD
  4. there is a clock difference between ClearPass and AD servers
  5. there is an IP communication issue
Correct answer: D
Question 2
Which most accurately describes the First Applicable rule evaluation algorithm in Enforcement Policies?
  1. Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.
  2. All rules are checked and if there is no match, no Enforcement profile is applied.
  3. Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied. along with the default Enforcement profile.
  4. All rules are checked for any matching rules and their respective Enforcement profiles are applied.
Correct answer: D
Question 3
What is the purpose of using a role mapping policy in an 802.1x service with Active Directory as the authentication source?
  1. to translate and combine AD attributes into ClearPass roles
  2. to send roles from ClearPass to the AD user to update a user’s group membership
  3. to enable attributes as roles directly without needing role mapping rules
  4. to send Aruba firewall roles back to the Aruba Network Access Device
  5. to send details of a user’s connection to the AD user to store in its database
Correct answer: B
Question 4
What is the purpose of a guest self-registration page in ClearPass?
  1. to allow employees to get their own devices securely connected to the network
  2. to allow contractors to create their own accounts in Active Directory
  3. to allow employees’ sponsors to create accounts for their guests
  4. to allow employees to easily get their corporate devices on the network
  5. to allow guest users to create a login account for the web login page
Correct answer: B
Explanation:
Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access Reference http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/CustomizingSelfProvisionedAccess.htm
Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access 
Reference http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/CustomizingSelfProvisionedAccess.htm
Question 5
What is the purpose of the pre-auth check during guest authentication?
  1. for the NAD device to do an internal authentication check before sending the credentials to ClearPass
  2. for the NAD device to check that ClearPass is active before sending it the RADIUS request
  3. for ClearPass to do an internal authentication check before the NAS login happens
  4. for the client device to do an internal sanity check before the NAS login occurs
  5. for the client device to check that ClearPass is active before sending it the credentials
Correct answer: C
Explanation:
The way NAS devices like wireless controllers do authentication on external captive portals only allows standard reject message handling like "authentication failed".  The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in.  It is to do an end run around limited error handing of NAS devices on external captive portals. Reference https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254
The way NAS devices like wireless controllers do authentication on external captive portals only allows standard reject message handling like "authentication failed".  The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in.  It is to do an end run around limited error handing of NAS devices on external captive portals. 
Reference https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254
Question 6
Where is the web login page created in the ClearPass UI?
  1. WebAuth Service
  2. Captive Portal Profile
  3. ClearPass Policy Manager
  4. Guest Login Service
  5. ClearPass Guest
Correct answer: E
Question 7
Which actions are necessary to set up a ClearPass guest captive portal web login page to authenticate guest users? (Select three.)
  1. Configure the guest pre-authentication role on ClearPass.
  2. Select the user login checkbox in ClearPass Guest.
  3. Create a web login page in ClearPass Guest.
  4. Create Guest Service in ClearPass policy Manager.
  5. Redirect Aruba Controller URL to ClearPass server web login page.
Correct answer: ABD
Explanation:
Reference https://community.arubanetworks.com/t5/Aruba-Solution-Exchange/IAP-ClearPass-Guest-Captive-Portal/ta-p/202675
Reference https://community.arubanetworks.com/t5/Aruba-Solution-Exchange/IAP-ClearPass-Guest-Captive-Portal/ta-p/202675
Question 8
Which device uses the Quick Connect method of Onboarding? (Select two.)
  1. iPad
  2. iPhone
  3. Windows
  4. blackberry
  5. Android
Correct answer: CE
Explanation:
Reference http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYOD-challanges-whitepaper.pdf (page 7)
Reference http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYOD-challanges-whitepaper.pdf (page 7)
Question 9
How do apple iOS 4 and iOS 5 devices download the Onboard provisioning profile and credentials from ClearPass?
  1. Bonjour
  2. Quick Connect
  3. SNMP
  4. FTP
  5. Over the air API
Correct answer: E
Question 10
What is the purpose of a RADIUS IETP Session Timeout attribute being sent to an Aruba Controller when a guest authenticates successfully?
  1. For the controller to initiate a RADIUS re-authentication automatically when the time limit is reached.
  2. For ClearPass to send a RADIUS CoA message to the client when the time limit is reached.
  3. For the user to initiate a RADIUS re-authentication when the time limit is reached.
  4. For ClearPass to send a RADIUS CoA message when the time limit is reached.
  5. For the Controller to end the user’s authenticated session when the time limit is reached.
Correct answer: E
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!