Aruba Certified ClearPass Professional Exam - HPE6-A68 Exam Practice Test

Question 1

Refer to the exhibit.

Based on the Enforcement Policy configuration shown, which Enforcement Profile will an employee receive when connecting an IOS device to the network or the first time using EAP-PEAP?

A. Onboard Post-Provisioning - Aruba

B. Onboard Device Repository

C. Deny Access Profile

D. Cannot be determined

E. Onboard Pre-Provisioning - Aruba

Correct Answer: E

Question 2

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value 'securelogin.arubanetworks.com' used for?

A. for appending to the Web Login URL, before the page name

B. for appending to the Web Login URL, after the page name.

C. for ClearPass to send a TACACS+ request to the NAD

D. for the client to POST the user credentials to the NAD

E. for ClearPass to send a RADIUS request to the NAD

Correct Answer: D

Question 3

Which authentication protocols can be used for authenticating Windows clients that are Onboarded? (Select two.)

A. PAP

B. PEAP with MSCHAPv2

C. CHAP

D. EAP-TLS

E. EAP-GTC

Correct Answer: B,D

Question 4

Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?
In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

A. to send CoA packets from ClearPass to the Aruba NAD

B. to send information via RADIUS packets to clients

C. to send information via RADIUS packets to Aruba NADs

D. to gather information about Aruba NADs for ClearPass

E. to gather and send Aruba NAD information to ClearPass

Correct Answer: B

Question 5

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statements accurately describe next steps? (Select two.)

A. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

B. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

C. The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

D. The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

E. A new Virtual IP address should be created for each NAD.

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Which statement is true about the configuration of a generic LDAP server as an External Authentication server in ClearPass? (Choose three.)

A. A maximum of one generic LDAP server can be configured in ClearPass.

B. Generic LDAP Browser can be used to search the Base DN.

C. A LDAP Browser can be used to search the Base DN.

D. An administrator can customize the selection of attributes fetched from an LDAP server.

E. The bind DN can be in the administrator@domain format.

Correct Answer: B,C,D

Question 7

An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop.
Which licenses are consumed in this scenario?

A. 2 Policy Manager licenses, 2 Onguard licenses

B. 1 Policy Manager license, 1 Profile License

C. 2 Policy Manager licenses, 1 Onguard License

D. 1 Policy Manager license, 1 Onboard License

E. 1 Policy Manager license, 1 Onguard License

Correct Answer: E

Question 8

Which licenses are included in the built-in Starter kit for ClearPass?

A. 25 ClearPass Profiler licenses

B. 10 ClearPass Enterprise licenses

C. 25 ClearPass Redundancy licenses

D. 25 ClearPass Enterprise licenses

E. 10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.
How should the service be set up in the Policy Manager for this network?

A. Guest User Repository and Active Directory server both as authentication sources

B. Active Directory server as the authentication source, and Guest User Repository as the authorization source

C. Either the Guest User Repository or Active Directory server should be the single authentication source

D. Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

E. Guest User Repository as the authentication source and the Active Directory server as the authorization source

Correct Answer: A

HP Aruba Certified ClearPass Professional - HPE6-A68 Exam Practice Test

Latest Update

Useful Links

Contact Us