Updated Oct 21, 2022 HPE6-A68 Exam Dumps - PDF Questions and Testing Engine [Q12-Q31] : Exam for engine : http://blog.test4engine.com

Q12. Refer to the exhibit.

An AD user’s department attribute value is configured as “QA”. The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?

HR Local

Remote Employee

[Guest]

iOS Device

Executive

Q13. Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user’s request?

After the RADIUS Access-Request

After the NAS login, but before the RADIUS Access-Request

Before the user can submit the registration form

After the RADIUS Access-Response

After the receipt page is displayed, before the NAS login

Q14. Which components of a ClearPass is mandatory?

Authorization Source

Enforcement

Profiler

Role Mapping Policy

Posture

Q15. Which device type supports Exchange ActiveSync configuration with Onboard?

Linux laptop

Mac OS X device

Apple iOS device

Windows laptop

Android device

Q16. When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

Q17. Refer to the exhibit.

What does the Cache Timeout Value refer to?

The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.

The amount of time the Policy Manager caches the users client certificate.

Q18. A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server.
The second type of users are friends of students who need to self-register to access the network.
How should the service be set up in the Policy Manager for this network?

Guest User Repository and Active Directory server both as authentication sources

Active Directory server as the authentication source, and Guest User Repository as the authorization source

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

Either the Guest User Repository or Active Directory server should be the single authentication source

Guest User Repository as the authentication source and the Active Directory server as the authorization source

Q19. An administrator enabled the Pre-auth check for their guest self-registration.
At what stage in the registration process in this check performed?

after the user clicks the login button and after the NAD sends an authentication request

after the user self-registers but before the user logs in

after the user clicks the login button but before the NAD sends an authentication request

when a user is re-authenticating to the network

before the user self-registers

Q20. Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

radius01 was deleted from the list of authentication sources.

The policy service was moved to position number 4.

radius01 was moved to position number 4.

The policy service was moved to position number 3.

raduis01 was added as an authentication source.

Q21. Refer to the exhibit.

An employee connects a corporate laptop to the network and authenticates for the first time using EAP-TLS.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Deny Access Profile

Onboard Device Repository

Q22. Refer to the exhibit.

What can be concluded from the Access Tracker output shown?

The client used incorrect credentials to authenticate to the network.

ClearPass does not have a service enabled for MAC authentication.

The client MAC address is not present in the Endpoints table in the CrearPass database.

The RADIUS client on the Windows server failed to categorize the service correctly.

The client wireless profile is incorrectly setup.

Q23. Refer to the exhibit.

An administrator logs in to the Guest module in ClearPass and ‘Manage Accounts’ displays as shown.
When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

Q24. Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.
Which action will ClearPass take based on the Enforcement Profile?

it will count down 600 seconds and send a RADIUS CoA message to the NAD to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds

it will count down 600 seconds and send a RADIUS CoA message to the user to end the user’s session after this time is up

it will send the Session-Timeout attribute in the RADIUS Access-Request packet to the user and the user’s session will be terminated after 600 seconds

Q25. What is the certificate format PKCS #7, or .p7b, used for?

Certificate Signing Request

Binary encoded X.509 certificate

Binary encoded X.509 certificate with public key

Certificate with an encrypted private key

Certificate chain

Q26. Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

The device will be disconnected from and reconnected to the network after Onboarding is completed.

The device’s onboard authorization request will be denied.

The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

Q27. In a single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

Active Directory Attributes

Network Access Device used

Endpoint OS Category

Onguard Agent used

Authentication Method used

Q28. What does Authorization allow users to do in a Policy Service?

To use attributes in databases in role mapping and Enforcement.

To use attributes stored in databases in Enforcement only, but not role mapping.

To use attributes stored in external databases for Enforcement, but not internal databases.

To use attributes stored in databases in role mapping only, but not Enforcement.

To use attributes sored in internal databases for Enforcement, but not external databases.

Q29. Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

both Login and Welcome Page

Default Role

Welcome Page

Default Guest Role

Login Page

Q30. Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value ‘securelogin.arubanetworks.com’ used for?

For the client to POST the user credentials to the NAD.

For ClearPass to send a RADIUS request to the NAD.

For ClearPass to send a TACACS+ request to the NAD.

For appending to the Web Login URL, after the page name.

For appending to the Web Login URL, before the page name.

Q31. Refer to the exhibit.

Based on the information, what is the purpose of using [Time Source] for authorization?

to check how long it has been since the last login authentication

to check whether the guest account expired

to check whether the MAC address is in the MAC Caching repository

to check whether the MAC address status is known in the endpoints table

to check whether the MAC address status is unknown in the endpoints table

Updated Oct 21, 2022 HPE6-A68 Exam Dumps - PDF Questions and Testing Engine [Q12-Q31]

HP HPE6-A68 Exam Syllabus Topics: