Updated Oct 21, 2022 HPE6-A68 Exam Dumps – PDF Questions and Testing Engine [Q12-Q31]

admin
October 21, 2022

Updated Oct 21, 2022 HPE6-A68 Exam Dumps – PDF Questions and Testing Engine [Q12-Q31]

4.5/5 - (2 votes)

Updated Oct 21, 2022 HPE6-A68 Exam Dumps – PDF Questions and Testing Engine

New (2022) HP HPE6-A68 Exam Dumps

HP HPE6-A68 Exam Syllabus Topics:

Topic	Details
Topic 1	Endpoint Analysis Operations and Admin Users
Topic 2	External Authentication ClearPass for AAA
Topic 3	Clustering and Redundancy Intro to ClearPass

Q12. Refer to the exhibit.

An AD user’s department attribute value is configured as “QA”. The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?

HR Local

Remote Employee

[Guest]

iOS Device

Executive

Q13. Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user’s request?

After the RADIUS Access-Request

After the NAS login, but before the RADIUS Access-Request

Before the user can submit the registration form

After the RADIUS Access-Response

After the receipt page is displayed, before the NAS login

Q14. Which components of a ClearPass is mandatory?

Authorization Source

Enforcement

Profiler

Role Mapping Policy

Posture

Q15. Which device type supports Exchange ActiveSync configuration with Onboard?

Linux laptop

Mac OS X device

Apple iOS device

Windows laptop

Android device

Explanation
Exchange ActiveSync configurations you define can be used in configuration profiles to automatically configure an email account on an iOS device.
References:
http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/CreateEditActiveSync.htm

Q16. When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

Explanation
A service running in CPPM periodically polls MDM servers using their exposed APIs. Device attributes obtained from MDM are added as endpoint tags. Profiler related attributes are send to profiler which uses these attributes to derive final profile.
References: ClearPass Profiling TechNote (2014), page 23
https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%2

Q17. Refer to the exhibit.

What does the Cache Timeout Value refer to?

The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.

The amount of time the Policy Manager caches the users client certificate.

Q18. A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server.
The second type of users are friends of students who need to self-register to access the network.
How should the service be set up in the Policy Manager for this network?

Guest User Repository and Active Directory server both as authentication sources

Active Directory server as the authentication source, and Guest User Repository as the authorization source

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

Either the Guest User Repository or Active Directory server should be the single authentication source

Guest User Repository as the authentication source and the Active Directory server as the authorization source

Q19. An administrator enabled the Pre-auth check for their guest self-registration.
At what stage in the registration process in this check performed?

after the user clicks the login button and after the NAD sends an authentication request

after the user self-registers but before the user logs in

after the user clicks the login button but before the NAD sends an authentication request

when a user is re-authenticating to the network

before the user self-registers

The Onboard template is designed for configuration that allows to perform checks before allowing Onboard provisioning for Bring Your Own Device (BYOD) use-cases. This service creates an Onboard Pre-Auth service to check the user’s credentials before starting the device provisioning process. This also creates an authorization service that checks whether a user’s device can be provisioned using Onboard.

Q20. Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

radius01 was deleted from the list of authentication sources.

The policy service was moved to position number 4.

radius01 was moved to position number 4.

The policy service was moved to position number 3.

raduis01 was added as an authentication source.

Q21. Refer to the exhibit.

An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Deny Access Profile

Onboard Device Repository

Q22. Refer to the exhibit.

What can be concluded from the Access Tracker output shown?

The client used incorrect credentials to authenticate to the network.

ClearPass does not have a service enabled for MAC authentication.

The client MAC address is not present in the Endpoints table in the CrearPass database.

The RADIUS client on the Windows server failed to categorize the service correctly.

The client wireless profile is incorrectly setup.

Q23. Refer to the exhibit.

An administrator logs in to the Guest module in ClearPass and ‘Manage Accounts’ displays as shown.
When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

Q24. Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.
Which action will ClearPass take based on the Enforcement Profile?

it will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds

it will count down 600 seconds and send a RADIUS CoA message to the user to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user’s session will be terminated after 600 seconds

Explanation
Session Timeout (in seconds) – Configure the agent session timeout interval to re-evaluate the system health again. OnGuard triggers auto-remediation using this value to enable or disable AV-RTP status check on endpoint. Agent re-authentication is determined based on session-time out value. You can specify the session timeout interval from 60 – 600 seconds. Setting the lower value for session timeout interval results numerous authentication requests in Access Tracker page. The default value is 0.
References:
http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/Enfor

Q25. What is the certificate format PKCS #7, or .p7b, used for?

Certificate Signing Request

Binary encoded X.509 certificate

Binary encoded X.509 certificate with public key

Certificate with an encrypted private key

Certificate chain

Explanation
The PKCS#7 or P7B format is usually stored in Base64 ASCII format and has a file extension of .p7b or .p7c.
P7B certificates contain “—–BEGIN PKCS7—–” and “—–END PKCS7—–” statements. A P7B file only contains certificates and chain certificates, not the private key. Several platforms support P7B files including Microsoft Windows and Java Tomcat.
References:
https://community.arubanetworks.com/t5/Controller-Based-WLANs/Various-Certificate-Formats/ta-p/176548

Q26. Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

The device will be disconnected from and reconnected to the network after Onboarding is completed.

The device’s onboard authorization request will be denied.

The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

Q27. In a single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

Active Directory Attributes

Network Access Device used

Endpoint OS Category

Onguard Agent used

Authentication Method used

Q28. What does Authorization allow users to do in a Policy Service?

To use attributes in databases in role mapping and Enforcement.

To use attributes stored in databases in Enforcement only, but not role mapping.

To use attributes stored in external databases for Enforcement, but not internal databases.

To use attributes stored in databases in role mapping only, but not Enforcement.

To use attributes sored in internal databases for Enforcement, but not external databases.

Q29. Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

both Login and Welcome Page

Default Role

Welcome Page

Default Guest Role

Explanation
The Login page is the URL of the page that appears for the user logon. This can be set to any URL.
The Welcome page is the URL of the page that appears after logon and before redirection to the web URL.
This can be set to any URL.
References:
http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/C

Q30. Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value ‘securelogin.arubanetworks.com’ used for?