ACCP-V6.2 Online Practice Questions and Answers

A customer would like to deploy ClearPass with the following objectives: they have 2000 devices that need to be onboarded, 2000 corporate devices running posture checks daily, and 500 different guest users each day authenticating using the web login feature.

Which of the following best describes the license mix that they need to purchase?

A. CP-HW-500, 2500 Clearpass Enterprise

B. CP-HW-5k, 2500 Clearpass Enterprise

C. CP-HW-5k, 4500 Clearpass Enterprise

D. CP-HW-25k, 4500 Clearpass Enterprise

E. CP-HW-25k, 4000 Clearpass Enterprise

To setup an Aruba Controller as DHCP relay for device fingerprinting, which of the following IP addresses needs to be configured?

A. DHCP server IP

B. ClearPass server IP

C. Active Directory IP

D. Microsoft NPS server IP

E. Switch IP

Which of the following are valid policy simulation types in Clearpass? (Choose 3)

A. Role Mapping

B. Endpoint Profiler

C. Authorization Attributes

D. Chained Simulation

E. Enforcement Policy

What are these RADIUS attributes used for in the Aruba RADIUS dictionary shown here?

A. To send information via RADIUS packets to clients.

B. To send information via RADIUS packets to Aruba NADs.

C. To gather information about Aruba NADs for ClearPass.

D. To gather and send Aruba NAD information to ClearPass.

E. To send CoA packets from Clearpass to the Aruba NAD.

What does a client need for it to perform EAP-TLS successfully? (Choose 2)

A. Username and Password

B. Client Certificate

C. Pre-shared key

D. Certificate Authority

E. Server Certificate

What are Operator Profiles used for?

A. To assign ClearPass roles to guest users.

B. To enforce role based access control for ClearPass Guest operator users.

C. To enforce role based access control for ClearPass Policy Manager admin users.

D. To map AD attributes to admin privilege levels in ClearPass Guest.

E. To enforce role based access control for Aruba Controllers.

Refer to the screen capture below: Based on the Translation Rule configuration shown above, which of the following statements is true?

A. A user from group MatchAdmin will be assigned the operator profile of IT Administrators.

B. All active directory users will be assigned the operator profile of IT Administrators.

C. All admin users will be assigned the operator profile of IT Administrators.

D. A user from group Administrators will be assigned the operator profile of IT Administrators.

E. This translation rule is not valid for Active Directory administrators.

Which of the following is true? (Choose 2)

A. Mobile Device Management is used to control device usage post-onboarding

B. Mobile Device Management is an application container that is used to provision work applications

C. Mobile Device Management cannot be deployed without Workspace

D. 3rd party Mobile Device Management solutions can be integrated with Clearpass

E. Mobile Device Management cannot do remote wipes of devices without workspace being installed

Which of the following statements is true about certificate revocation?

A. Onboard cannot revoke device certificates.

B. Revoked certificates are automatically deleted from Certificate Management.

C. When a certificate is revoked, OCSP checks for certificate validity will fail.

D. A revoked certificate becomes valid again after 24 hours.

E. Certificates can only be revoked once they expire.

In single SSID onboarding, which of the following methods can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

A. Authentication Method used

B. Network Access Device used

C. Endpoint OS Category

D. OnGuard Agent used

E. Active Directory Attributes