HPE6-A15 Online Practice Questions and Answers

What is the purpose of Operator Profiles?

A. to enforce role based access control for Aruba Controllers

B. to enforce role based access control for ClearPass Policy Manager admin users

C. to enforce role based access control for ClearPass Guest Admin users

D. to assign ClearPass roles to guest users

E. to map AD attributes to admin privilege levels in ClearPass Guest

A customer wants all guests who access a company's guest network to have their accounts approved by the receptionist, before they are given access to the network. How should the network administrator set this up in ClearPass? (Select two.)

A. Enable sponsor approval confirmation in Receipt actions.

B. Configure SMTP messaging in the Policy Manager.

C. Configure a MAC caching service in the Policy Manager.

D. Configure a MAC auth service in the Policy Manager.

E. Enable sponsor approval in the captive portal authentication profile on the NAD.

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

What is the Address field value `securelogin.arubanetworks.com' used for?

A. for ClearPass to send a TACACS+ request to the NAD

B. for appending to the Web Login URL, before the page name

C. for the client to POST the user credentials to the NAD

D. for ClearPass to send a RADIUS request to the NAD

E. for appending to the Web Login URL, after the page name.

An administrator enabled the Pre-auth check for their guest self-registration.

At what stage in the registration process in this check performed?

A. after the user clicks the login button and after the NAD sends an authentication request

B. after the user self-registers but before the user logs in

C. after the user clicks the login button but before the NAD sends an authentication request

D. when a user is re-authenticating to the network

E. before the user self-registers

A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client's Onguard posture token.

Which Enforcement profile should be used on the health check service?

A. RADIUS CoA

B. Quarantine VLAN

C. Full Access VLAN

D. RADIUS Accept

E. RADIUS Reject

Which device type supports Exchange ActiveSync configuration with Onboard?

A. Linux laptop

B. Mac OS X device

C. Apple iOS device

D. Windows laptop

E. Android device

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

A. the ClearPass server must have the network device added as a valid NAD

B. the ClearPass server certificate must be installed on the NAD

C. a matching shared secret must be configured on both the ClearPass server and NAD

D. an NTP server needs to be set up on the NAD

E. a bind username and bind password must be provided

Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully using connection protocol WEBAUTH?

A. Deny Access

B. Employee VLAN

C. Internet VLAN

D. Full Access VLAN

Which collectors can be used for device profiling? (Select two.)

A. Username and Password

B. ActiveSync Plugin

C. Client's role on the controller

D. Onguard agent

E. Active Directory Attributes

Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on the Enforcement Profile?

A. It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds.

B. It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.

C. It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user's session after this time is up.

D. It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user's session after this time is up.

E. It will send the session -Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.