Question 1

Which statement is true about OnGuard? (Choose two.)

Accepted Answer

A)  It is used to ensure that Antivirus/Antispyware programs are running 
B)  It supports both Windows and Mac OS X clients 
C)  It is used to identify and remove any malware/viruses 
D)  It only supports 802.1X authentication 
A)  It is used to ensure that Antivirus/Antispyware programs are running 
B)  It supports both Windows and Mac OS X clients 
C)  It is used to identify and remove any malware/viruses 
D)  It only supports 802.1X authentication A,B

Question 2

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

Accepted Answer

A)  Client attempts will fail without an additional Authentication method applied. 
B)  All clients with unknown endpoints will be granted guest access regardless of authorization. 
C)  All clients with known endpoints will be granted guest access regardless of authorization. 
D)  This removes the reliance on the known or unknown status for MAC authentication. 
A)  Client attempts will fail without an additional Authentication method applied. 
B)  All clients with unknown endpoints will be granted guest access regardless of authorization. 
C)  All clients with known endpoints will be granted guest access regardless of authorization. 
D)  This removes the reliance on the known or unknown status for MAC authentication. D

Question 3

Refer to the exhibit.   Which user authentication request will match the service rules of the Policy Service shown?

Accepted Answer

A)  a wireless user connection would fail because of miss-configured service rules 
B)  a wireless user connected to any SSID named "CORP" 
C)  a wireless user connecting to any SSID on an Aruba Controller 
D)  a wireless user connecting to an Aruba IAP on the SSID "CORP" 
A)  a wireless user connection would fail because of miss-configured service rules 
B)  a wireless user connected to any SSID named "CORP" 
C)  a wireless user connecting to any SSID on an Aruba Controller 
D)  a wireless user connecting to an Aruba IAP on the SSID "CORP" D

Question 4

Refer to the exhibit.   What will be the enforcement for the user "neil"?

Accepted Answer

A)  Allow Full Access 
B)  Secure Corp BYOD Access 
C)  Allow Internet Only Access 
D)  Corp Secure Contractor 
A)  Allow Full Access 
B)  Secure Corp BYOD Access 
C)  Allow Internet Only Access 
D)  Corp Secure Contractor

Question 5

Refer to the exhibit.   Where will the guests browser be redirected during a captive portal login attempt?

Accepted Answer

A)  The redirect will time out and fail to resolve. 
B)  The captive portal page hosted on Aruba Central in the cloud. 
C)  The captive portal page hosted on the Aruba controller. 
D)  The captive portal page hosted on ClearPass. 
A)  The redirect will time out and fail to resolve. 
B)  The captive portal page hosted on Aruba Central in the cloud. 
C)  The captive portal page hosted on the Aruba controller. 
D)  The captive portal page hosted on ClearPass.

Question 6

An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again. Which ClearPass features can be used to meet these requirements?

Accepted Answer

A)  Guest access with MAC caching 
B)  Guest self-registration with sponsor approval 
C)  Enforcement based on endpoint profiling 
D)  ClearPass Onboard Portal 
A)  Guest access with MAC caching 
B)  Guest self-registration with sponsor approval 
C)  Enforcement based on endpoint profiling 
D)  ClearPass Onboard Portal

Question 7

Refer to the exhibit.   What does Search Base Dn do when joining an Active Directory domain? (Choose two.)

Accepted Answer

A)  validates the connection details entered in the Connection Details 
B)  searches for the Base DN (Distinguished Name) based on what was typed in the field 
C)  sets the starting point in the directory tree for the Base DN (Distinguished Name) search 
D)  updates the Base DN (Distinguished Name) in Active Directory if no match is found 
E)  runs an Active Directory query that returns all results along with any matching the entered Base DN (Distinguished Name) 
A)  validates the connection details entered in the Connection Details 
B)  searches for the Base DN (Distinguished Name) based on what was typed in the field 
C)  sets the starting point in the directory tree for the Base DN (Distinguished Name) search 
D)  updates the Base DN (Distinguished Name) in Active Directory if no match is found 
E)  runs an Active Directory query that returns all results along with any matching the entered Base DN (Distinguished Name)

Question 8

Which items can be obtained from device profiling? (Choose three.)

Accepted Answer

A)  Device Category 
B)  Device Family 
C)  Device Health 
D)  Device Type 
E)  Device Location 
A)  Device Category 
B)  Device Family 
C)  Device Health 
D)  Device Type 
E)  Device Location

Question 9

Refer to the exhibit.   What does a bold field indicate?

Accepted Answer

A)  The field is a non-system field 
B)  The field is currently enabled 
C)  The field has been customized 
D)  The field is required 
A)  The field is a non-system field 
B)  The field is currently enabled 
C)  The field has been customized 
D)  The field is required

Question 10

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

Accepted Answer

A)  When you want to match Active Directory attributes directly to an enforcement policy. 
B)  When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device. 
C)  When you want to translate and combine Active Directory attributes into ClearPass roles. 
D)  When you want to enable attributes as roles directly without combining multiple attributes. 
A)  When you want to match Active Directory attributes directly to an enforcement policy. 
B)  When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device. 
C)  When you want to translate and combine Active Directory attributes into ClearPass roles. 
D)  When you want to enable attributes as roles directly without combining multiple attributes.

Question 11

What is true regarding Posturing and Profiling?

Accepted Answer

A)  Profiling describes categorizing the user based on their department while Posturing validates the user as authenticated. 
B)  Profiling is the act of identifying the endpoint type while Posturing is assigning a status as to the health of the endpoint. 
C)  Posturing and Profiling are role assignments in ClearPass used internally to map to enforcement policies. 
D)  Both Posturing and Profiling describe the same thing; what is the health of the client endpoint? 
A)  Profiling describes categorizing the user based on their department while Posturing validates the user as authenticated. 
B)  Profiling is the act of identifying the endpoint type while Posturing is assigning a status as to the health of the endpoint. 
C)  Posturing and Profiling are role assignments in ClearPass used internally to map to enforcement policies. 
D)  Both Posturing and Profiling describe the same thing; what is the health of the client endpoint?

Question 12

What is the benefit of installing a wild card certificate for captive portal authentication?

Accepted Answer

A)  Wild card certificates provide greater security than normal certificates. 
B)  Allows different certificates for each controller for increased security. 
C)  Guests no longer are required to validate certificates during captive portal. 
D)  Allows the single wild card certificate to be installed on all controllers in the environment. 
A)  Wild card certificates provide greater security than normal certificates. 
B)  Allows different certificates for each controller for increased security. 
C)  Guests no longer are required to validate certificates during captive portal. 
D)  Allows the single wild card certificate to be installed on all controllers in the environment.

Question 13

What are two ways to add guest accounts to ClearPass? (Choose two.)

Accepted Answer

A)  Importing accounts from Active Directory once ClearPass is added with Admin credentials. 
B)  Assigning the default role "Lobby Ambassador to a receptionist to then add the accounts. 
C)  Using the "Import Accounts" under ClearPass Guest. 
D)  Using the "Create Account" or "Create Multiple" options under ClearPass Guest. 
E)  Using the "Sync Accounts" under ClearPass Guest. 
A)  Importing accounts from Active Directory once ClearPass is added with Admin credentials. 
B)  Assigning the default role "Lobby Ambassador to a receptionist to then add the accounts. 
C)  Using the "Import Accounts" under ClearPass Guest. 
D)  Using the "Create Account" or "Create Multiple" options under ClearPass Guest. 
E)  Using the "Sync Accounts" under ClearPass Guest.

Question 14

An organization wants to have guests connect their own personal devices to the wireless network without requiring a receptionist setting up a guest account. Which ClearPass feature can be used to meet the organization's requirements?

Accepted Answer

A)  Policy Manager Enforcement 
B)  MAC authentication with profiling 
C)  ClearPass Onboard 
D)  Guest with self-registration 
A)  Policy Manager Enforcement 
B)  MAC authentication with profiling 
C)  ClearPass Onboard 
D)  Guest with self-registration

Question 15

Refer to the Endpoint in the screenshot.   What are possible ways that it was profiled? (Choose two.)

Accepted Answer

A)  Exchange Plugging agent 
B)  NAD ARP listening handler 
C)  3rd part MDM 
D)  DNS fingerprinting 
E)  Cisco Device Sensor 
A)  Exchange Plugging agent 
B)  NAD ARP listening handler 
C)  3rd part MDM 
D)  DNS fingerprinting 
E)  Cisco Device Sensor

Question 16

Refer to the exhibit.   What is true regarding leaving the indicated option "Use cached Roles and Posture attributes from previous sessions" unchecked?

Accepted Answer

A)  A posture change applied to an endpoint is going to be lost each time the client re-authenticates. 
B)  The service will make the enforcement decision based upon the updated Posture regardless of caching. 
C)  Posturing will no longer be evaluated in determining the enforcement policy for current or future sessions. 
D)  Cached posture results are no longer stored by ClearPass but instead are saved to the endpoint of the client. 
A)  A posture change applied to an endpoint is going to be lost each time the client re-authenticates. 
B)  The service will make the enforcement decision based upon the updated Posture regardless of caching. 
C)  Posturing will no longer be evaluated in determining the enforcement policy for current or future sessions. 
D)  Cached posture results are no longer stored by ClearPass but instead are saved to the endpoint of the client.

Question 17

An organization wants guests to be able to create their own guest accounts for access to the public WLAN. Guests do not want to have to repeatedly log in multiple times through the day. Which ClearPass feature can meet these requirements?

Accepted Answer

A)  ClearPass Onboard Portal. 
B)  Guest access with Media Access Control (MA
C)  caching. 
C)  Enforcement based on endpoint profiling. 
D)  Guest self-registration with sponsor approval. 
A)  ClearPass Onboard Portal. 
B)  Guest access with Media Access Control (MA
C)  caching. 
C)  Enforcement based on endpoint profiling. 
D)  Guest self-registration with sponsor approval.

Question 18

Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?

Accepted Answer

A)  When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information. 
B)  Because DHCP fingerprinted is a Layer-3 function, it cannot be used with an 802.1X authentication service. 
C)  The client needs to connect to an open network first to be profiled, then shifted to the secure 802.1x network. 
D)  The client needs to be granted limited access before the enforcement policy can take into account the device type. 
A)  When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information. 
B)  Because DHCP fingerprinted is a Layer-3 function, it cannot be used with an 802.1X authentication service. 
C)  The client needs to connect to an open network first to be profiled, then shifted to the secure 802.1x network. 
D)  The client needs to be granted limited access before the enforcement policy can take into account the device type.

Question 19

Which option supports DHCP profiling for devices in a network?

Accepted Answer

A)  configuring ClearPass as a DHCP relay for the client 
B)  DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary 
C)  enabling the DHCP server to profile endpoints and forward meta-data to ClearPass 
D)  enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass 
A)  configuring ClearPass as a DHCP relay for the client 
B)  DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary 
C)  enabling the DHCP server to profile endpoints and forward meta-data to ClearPass 
D)  enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

Question 20

Refer to the exhibit.   A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

Accepted Answer

A)  No service will be triggered 
B)  Service Three 
C)  Service Two 
D)  Service One 
A)  No service will be triggered 
B)  Service Three 
C)  Service Two 
D)  Service One

Exam 22: HPE Sales Certified - Aruba Products and Solutions

Which statement is true about OnGuard? (Choose two.)

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

Refer to the exhibit. Which user authentication request will match the service rules of the Policy Service shown?

Refer to the exhibit. What will be the enforcement for the user "neil"?

Refer to the exhibit. Where will the guests browser be redirected during a captive portal login attempt?

An organization with 347 employees wants to have the guest create their own accounts for access to the public WLAN, and when guests reconnect, they do not want the guest to have to log in again. Which ClearPass features can be used to meet these requirements?

Refer to the exhibit. What does Search Base Dn do when joining an Active Directory domain? (Choose two.)

Which items can be obtained from device profiling? (Choose three.)

Refer to the exhibit. What does a bold field indicate?

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

What is true regarding Posturing and Profiling?

What is the benefit of installing a wild card certificate for captive portal authentication?

What are two ways to add guest accounts to ClearPass? (Choose two.)

An organization wants to have guests connect their own personal devices to the wireless network without requiring a receptionist setting up a guest account. Which ClearPass feature can be used to meet the organization's requirements?

Refer to the Endpoint in the screenshot. What are possible ways that it was profiled? (Choose two.)

Refer to the exhibit. What is true regarding leaving the indicated option "Use cached Roles and Posture attributes from previous sessions" unchecked?

An organization wants guests to be able to create their own guest accounts for access to the public WLAN. Guests do not want to have to repeatedly log in multiple times through the day. Which ClearPass feature can meet these requirements?

Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?

Which option supports DHCP profiling for devices in a network?

Refer to the exhibit. A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

Designing Multi-Site HPE Storage Solutions

HPE Storage Solutions

Configuring HPE GreenLake Solutions

Architecting Advanced HPE Server Solutions

Designing HPE Server Solutions

Delta - Designing HPE Server Solutions

Designing HPE Hybrid IT Solutions

Implementing HPE Composable Infrastructure Solutions

Designing HPE Software-Defined Infrastructure Solutions

Building HPE Hybrid IT Solutions

Designing HPE Nimble Solutions

Using HPE OneView

Selling Aruba Products and Solutions

Designing Aruba Solutions

Aruba Certified Design Associate

Aruba Certified ClearPass Professional (ACCP) V6.7

Aruba Certified Mobility Associate Exam

Aruba Certified Mobility Professional Exam

Aruba Certified Switching Associate

Aruba Certified Switching Professional

Aruba Certified Mobility Expert Written Exam

Filters