Question 1

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Accepted Answer

A)  To display the entire configuration of the ClearPass Policy Manager. 
B)  To audit the network for PCI compliance. 
C)  To display system events like high CPU usage. 
D)  To audit client authentications. 
E)  To display changes made to the ClearPass configuration. 
A)  To display the entire configuration of the ClearPass Policy Manager. 
B)  To audit the network for PCI compliance. 
C)  To display system events like high CPU usage. 
D)  To audit client authentications. 
E)  To display changes made to the ClearPass configuration.

Question 2

Which authorization servers are supported by ClearPass? (Choose two.)

Accepted Answer

A)  Active Directory 
B)  Cisco Controller 
C)  Aruba Controller 
D)  LDAP server 
E)  Aruba Mobility Access Switch 
A)  Active Directory 
B)  Cisco Controller 
C)  Aruba Controller 
D)  LDAP server 
E)  Aruba Mobility Access Switch

Question 3

Refer to the exhibit.   An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

Accepted Answer

A)  HR Local 
B)  Remote Employee 
C)  [Guest] 
D)  iOS Device 
E)  Executive 
A)  HR Local 
B)  Remote Employee 
C)  [Guest] 
D)  iOS Device 
E)  Executive

Question 4

A University wants to deploy ClearPass with the Guest module. They have two types of users that need to use web login authentication. The first type of users are students whose accounts are in Active Directory server. The second type of user are friends of students who need to self-register to access the network. How should the service be setup in the Policy Manager for this Network?

Accepted Answer

A)  Either the Guest User Repository or Active Directory server should be the single authentication source. 
B)  Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authentication sources. 
C)  Guest User Repository as the authentication source and the Active Directory server as authentication source. 
D)  Active Directory server as authentication source and the Guest User Repository as the authentication source. 
E)  Guest User Repository and Active Directory server both as authentication sources. 
A)  Either the Guest User Repository or Active Directory server should be the single authentication source. 
B)  Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authentication sources. 
C)  Guest User Repository as the authentication source and the Active Directory server as authentication source. 
D)  Active Directory server as authentication source and the Guest User Repository as the authentication source. 
E)  Guest User Repository and Active Directory server both as authentication sources.

Question 5

A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees. However, they're concerned about security. What is true? (Choose three.)

Accepted Answer

A)  If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well. 
B)  During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted. 
C)  After authentication, an IPSEC VPN on the guest's client be used to encrypt Internet traffic. 
D)  HTTPS should never be used for Web Login Page authentication. 
E)  If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted. 
A)  If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well. 
B)  During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted. 
C)  After authentication, an IPSEC VPN on the guest's client be used to encrypt Internet traffic. 
D)  HTTPS should never be used for Web Login Page authentication. 
E)  If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.

Question 6

Which needs to be validated for a successful EAP-TLS authentication? (Choose two.)

Accepted Answer

A)  WPA2-PSK 
B)  Username and Password 
C)  Client Certificate 
D)  Server Certificate 
E)  Pre-shared key 
A)  WPA2-PSK 
B)  Username and Password 
C)  Client Certificate 
D)  Server Certificate 
E)  Pre-shared key

Question 7

What can ClearPass use to assign roles to the client during policy service processing? (Choose two.)

Accepted Answer

A)  Through a role mapping policy. 
B)  From the attributes configures in a Network Access Device. 
C)  From the server derivation rule in the Aruba Controller server group for the client. 
D)  From the attributes configured in Active Directory. 
E)  Roles can be derived from the Aruba Network Access Device. 
A)  Through a role mapping policy. 
B)  From the attributes configures in a Network Access Device. 
C)  From the server derivation rule in the Aruba Controller server group for the client. 
D)  From the attributes configured in Active Directory. 
E)  Roles can be derived from the Aruba Network Access Device.

Question 8

What does the Posture Token QUARANTINE imply?

Accepted Answer

A)  The client is compliant. However, there is an update available to remediate the client to HEALTHY state. 
B)  The posture of the client is unknown. 
C)  The client is infected and is a threat to other systems in the network. 
D)  The client is out of compliance, but has HEALTHY state. 
E)  The client is out of compliance. 
A)  The client is compliant. However, there is an update available to remediate the client to HEALTHY state. 
B)  The posture of the client is unknown. 
C)  The client is infected and is a threat to other systems in the network. 
D)  The client is out of compliance, but has HEALTHY state. 
E)  The client is out of compliance.

Question 9

What are Operator Profiles used for?

Accepted Answer

A)  To map AD attributes to admin privilege levels in ClearPass Guest. 
B)  To enforce role based access control for ClearPass Guest Admin users. 
C)  To enforce role based access control for Aruba Controllers. 
D)  To assign ClearPass roles to guest users. 
E)  To enforce role based access control for ClearPass Policy Manager users. 
A)  To map AD attributes to admin privilege levels in ClearPass Guest. 
B)  To enforce role based access control for ClearPass Guest Admin users. 
C)  To enforce role based access control for Aruba Controllers. 
D)  To assign ClearPass roles to guest users. 
E)  To enforce role based access control for ClearPass Policy Manager users.

Question 10

Refer to the exhibit.   Which statement accurately describes the cp82 ClearPass node? (Choose two.)

Accepted Answer

A)  It stays as a Subscriber when the Publisher fails. 
B)  It becomes the Publisher when the primary Publisher fails. 
C)  It operates as a Publisher in a separate cluster when the Publisher is active. 
D)  It operates as a Publisher in the same cluster as the primary Publisher when the primary is active. 
E)  It operates as a Subscriber when the Publisher is active. 
A)  It stays as a Subscriber when the Publisher fails. 
B)  It becomes the Publisher when the primary Publisher fails. 
C)  It operates as a Publisher in a separate cluster when the Publisher is active. 
D)  It operates as a Publisher in the same cluster as the primary Publisher when the primary is active. 
E)  It operates as a Subscriber when the Publisher is active.

Question 11

Refer to the exhibit.   A Web Login Page is configured in ClearPass Guest as shown. What is the purpose of the Pre-Auth Check?

Accepted Answer

A)  To -re-authenticate users when they're roaming from one NAD to another. 
B)  To authenticate users before they launch the Web Login Page. 
C)  To replace the need for the NAD to send an authentication request to ClearPass. 
D)  To authenticate users after the NAD sends an authentication request to ClearPass. 
E)  To authenticate users before the client sends the credentials to the NAD. 
A)  To -re-authenticate users when they're roaming from one NAD to another. 
B)  To authenticate users before they launch the Web Login Page. 
C)  To replace the need for the NAD to send an authentication request to ClearPass. 
D)  To authenticate users after the NAD sends an authentication request to ClearPass. 
E)  To authenticate users before the client sends the credentials to the NAD.

Question 12

An SNMP probe is sent from ClearPass to a network access device but ClearPass is unable to get profiling information. What could be a valid cause? (Choose three.)

Accepted Answer

A)  Mismatching SNMP community string in the ClearPass and NAD configuration. 
B)  Only SNMP read has been configured but SNMP write is needed for profiling information. 
C)  SNMP is not enabled on the NAD. 
D)  An external firewall is blocking SNMP traffic. 
E)  SNMP probing is not supported between ClearPass and NADs. 
A)  Mismatching SNMP community string in the ClearPass and NAD configuration. 
B)  Only SNMP read has been configured but SNMP write is needed for profiling information. 
C)  SNMP is not enabled on the NAD. 
D)  An external firewall is blocking SNMP traffic. 
E)  SNMP probing is not supported between ClearPass and NADs.

Question 13

Refer to the exhibit.   Based on the Policy configuration shown, which VLAN will be assigned when a user with a ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

Accepted Answer

A)  Full Access VLAN 
B)  Deny Access 
C)  Employee Vlan 
D)  Internet VLAN 
A)  Full Access VLAN 
B)  Deny Access 
C)  Employee Vlan 
D)  Internet VLAN

Question 14

Refer to the exhibit.   Based on the Translation Rule configuration shown, what will be the outcome?

Accepted Answer

A)  An AD user from AD group MatchAdmin will be assigned the operator profile of IT Administrators. 
B)  A user from AD group MatchAdmin will be assigned the operator profile of IT Administrators. 
C)  All active directory users will be assigned the operator profile of IT Administrators. 
D)  All ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators. 
A)  An AD user from AD group MatchAdmin will be assigned the operator profile of IT Administrators. 
B)  A user from AD group MatchAdmin will be assigned the operator profile of IT Administrators. 
C)  All active directory users will be assigned the operator profile of IT Administrators. 
D)  All ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators.

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Which authorization servers are supported by ClearPass? (Choose two.)

Refer to the exhibit. An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees. However, they're concerned about security. What is true? (Choose three.)

Which needs to be validated for a successful EAP-TLS authentication? (Choose two.)

What can ClearPass use to assign roles to the client during policy service processing? (Choose two.)

What does the Posture Token QUARANTINE imply?

What are Operator Profiles used for?

Refer to the exhibit. Which statement accurately describes the cp82 ClearPass node? (Choose two.)

Refer to the exhibit. A Web Login Page is configured in ClearPass Guest as shown. What is the purpose of the Pre-Auth Check?

An SNMP probe is sent from ClearPass to a network access device but ClearPass is unable to get profiling information. What could be a valid cause? (Choose three.)

Refer to the exhibit. Based on the Policy configuration shown, which VLAN will be assigned when a user with a ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

Refer to the exhibit. Based on the Translation Rule configuration shown, what will be the outcome?

Designing Multi-Site HPE Storage Solutions

HPE Storage Solutions

Configuring HPE GreenLake Solutions

Architecting Advanced HPE Server Solutions

Designing HPE Server Solutions

Delta - Designing HPE Server Solutions

Designing HPE Hybrid IT Solutions

Implementing HPE Composable Infrastructure Solutions

Designing HPE Software-Defined Infrastructure Solutions

Building HPE Hybrid IT Solutions

Designing HPE Nimble Solutions

Using HPE OneView

Selling Aruba Products and Solutions

Designing Aruba Solutions

Aruba Certified ClearPass Professional (ACCP) V6.7

Aruba Certified Mobility Associate Exam

Aruba Certified Mobility Professional Exam

Aruba Certified Switching Associate

Aruba Certified Switching Professional

Aruba Certified Mobility Expert Written Exam

HPE Sales Certified - Aruba Products and Solutions

Filters

Exam 15: Aruba Certified Design Associate

What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Which authorization servers are supported by ClearPass? (Choose two.)

Refer to the exhibit. An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X. Which role is assigned to the user in ClearPass?

A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees. However, they're concerned about security. What is true? (Choose three.)

Which needs to be validated for a successful EAP-TLS authentication? (Choose two.)

What can ClearPass use to assign roles to the client during policy service processing? (Choose two.)

What does the Posture Token QUARANTINE imply?

What are Operator Profiles used for?

Refer to the exhibit. Which statement accurately describes the cp82 ClearPass node? (Choose two.)

Refer to the exhibit. A Web Login Page is configured in ClearPass Guest as shown. What is the purpose of the Pre-Auth Check?

An SNMP probe is sent from ClearPass to a network access device but ClearPass is unable to get profiling information. What could be a valid cause? (Choose three.)

Refer to the exhibit. Based on the Policy configuration shown, which VLAN will be assigned when a user with a ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

Refer to the exhibit. Based on the Translation Rule configuration shown, what will be the outcome?

Designing Multi-Site HPE Storage Solutions

HPE Storage Solutions

Configuring HPE GreenLake Solutions

Architecting Advanced HPE Server Solutions

Designing HPE Server Solutions

Delta - Designing HPE Server Solutions

Designing HPE Hybrid IT Solutions

Implementing HPE Composable Infrastructure Solutions

Designing HPE Software-Defined Infrastructure Solutions

Building HPE Hybrid IT Solutions

Designing HPE Nimble Solutions

Using HPE OneView

Selling Aruba Products and Solutions

Designing Aruba Solutions

Aruba Certified ClearPass Professional (ACCP) V6.7

Aruba Certified Mobility Associate Exam

Aruba Certified Mobility Professional Exam

Aruba Certified Switching Associate

Aruba Certified Switching Professional

Aruba Certified Mobility Expert Written Exam

HPE Sales Certified - Aruba Products and Solutions

Filters