最新的HP HPE6-A77免費考試真題

問題1

Refer to the exhibit:

A year ago, your customer deployed an Aruba ClearPass Policy Manager Server for a Guest SSIC hosted in an IAP Cluster.The customer just created a new Web Login Page forthe Guest SSID. Even though the previous Web Login page worked test with the new Web Login Page are falling and the customer has forwarded you the above screenshots What recommendation would you give the customer to tix the issue?

A. The WebLogin Pre-Auth Check is set to Aruba Application Authentication which requires a separate application service on the policy manager

B. The customer should reset the password tor the username accx@exam com using Guest Manage Accounts

C. The service type configured is not correct. The Guest authentication should De an Application authentication type of service.

D. The Address filed under the WebLogin Vendor settings is not configured correctly, it should be set to instantarubanetworks.com

正確答案: C

問題2

Refer to the exhibit:

You configured a new Wireless 802.1X service for a Cisco WLC broadcasting the Secure-ADM-5007 SSID.
The client falls to connect to the SSID. Using the screenshots as a reference, how would you fix this issue?
(Select two.)

A. Make sure that the Network Devices entry for the Cisco WLC has a vendor setting of "Airspace"

B. Update the service condition Radius:IETF Called-Station-ld CONTAINS secure-adm-5007

C. Change the service condition to Radius:lETF Calling-Station-ld EQUALS Secure-ADM-5007

D. Remove the service condition Radius:lETF Service-Type BELONGSJTO Login-User (1). 2. 8

正確答案: B,D

問題3

Refer to the exhibit:

Your customer configured a ClearPass server to process the Guest and Secure SSIDs broadcastingfrom both Aruba and Cisco WLAN controllers When an Employee connects to Aruba or Cisco secure SSID, the authentication hits the guest service causing the client to fail the connection to the network.
What change can be implemented to make both the secure and guest services created for Aruba and Cisco devices to work correctly?

A. Disable HS-Guest User Authentication service and move HS-Guest MAC Authentication to seventh position.

B. Move the HS-Guest User Authentication with MAC Caching service to the first position.

C. Modify the service rule matching algorithm to ALLin HS-GuestUser Authentication service.

D. Move the HS_Building Aruba 802.1x service to the second position in the service order.

正確答案: B

問題4

A customer is complaining that some ofthe devices, in their manufacturing network, are not getting profiled while other loT devices from the same subnet have been correctly profiled. The network switches have been configured for DHCP IP helpers and IF-MAP has been configured on the Aruba Controllers. What can the customer do to discover those devices as well? (Select two.)

A. Manually create a new device fingerprint for the devices that are not being profiled.

B. Update the Fingerprints Dictionary to the latest in case new devices have been added.

C. Allow time for IF-MAP service on the controller to discover the new devices as well.

D. Open a TAC case to help you troubleshoot the DHCP device profile functionality.

E. Add the ClearPass Server IP as an IP helper address on the default gateway as well.

正確答案: A,C

問題5

Refer to the exhibit:

After the helpdesk revoked the certificate of a device reported to be lost oy an employee, the lost device was seen as connected successfully to the secure network. Further testing has shown that device revocation is not working.
What steps should you follow to make device revocations work?

A. Remove the EAP-TLS authentication method configuration changes are required and add "EAP-TLS with OCSP Enabled" authentication method in the OnBoard Provisioning service.
No other configuration changes are required.

B. copy the default [EAP-TLS with OSCP Enabled] authentication method and set the verify certificate using OSCP: option as "required" then configure the correct OSCF URL link for the OnBoard CA.
Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the 802 1X Radius Service.

C. Copy the default [EAP-TLS with OSCP Enabled] authentication method and set The Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA. Remove EAP-TLS and map the custom created method to the OnBoard Authorization Service.

D. Edit the default [EAP-TLS with OSCP Enabled] authentication method and set the Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the OnBoard Provisioning Service.

正確答案: A

問題6

Refer to the exhibit:

You are doing a ClearPass PoC at a customer site with a single Aruba Mobility Controller. The customer asked for a demonstration of a simple Web Login functionality. You used a service template to create the guest services. During testing, the usergets redirected back to the weblogin page with an Authentication failed message. The guest configurations on the Aruba Mobility Controller are configured correctly.
Why would the guest fail to authenticate successfully?

A. The authentication source mapped in the service is incorrect, it should be mapped as (Guest Device Repository] [Local SQL DB].

B. The username used for authentication does not exist in the Guest User Database Create a new user and authenticate again.

C. The Unique-Device-Count does not allow any Client devices.Update the Enforcement policy condition:
Unique-Device-Count.

D. The username and/or password used for authentication is incorrect Re-enter the correct password on the weblogin page.

正確答案: A

最新的HP Aruba Certified ClearPass Expert Written - HPE6-A77免費考試真題

聯系我們

站內鏈接

最新更新