最新的HP HPE6-A81免費考試真題

問題1

Which statements art true about Aruba down loadable user roles? (select three)

A. Aruba downloadable user role are universally available across the environment.

B. Can be applied only on ports or WLAN users authenticated by ClearPass.

C. Can use these result for other authentication methods not involving ClearPass.

D. Downloadable role names must be defined in Aruba switch or controller.

E. Administering downloadable user roles can be difficult for a large enterprise.

F. Aruba downloadable user role is a built in enforcement template in ClearPass.

正確答案: B,C,D

問題2

A customer has acquired another company that has its own Active Directory infrastructure. The 802 1X PEAP authentication works with the customer's original Active Directory servers but the customer would like to authenticate users from the acquired company as well.
What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)

A. Join the ClearPass server(s) to the new AD domain.

B. Add the new AD server(s) as backup into the existing Authentication Source.

C. Create a new Authentication Source, type Active Directory.

D. Create a new Authentication Source, type Generic LDAP.

E. There is no need to join ClearPass to the new AD domain.

正確答案: D,E

問題3

A customer has two different geographical sites deployed with two ClearPass servers in each site. Site A has the Publisher (CPPM1) and a subscriber (CPPM2) and Site B has two subscribers (CPPM3 S CPPM4) All wired and wireless authentication requests from the respective sites are handled by respective CPPMs deployed in the sites When both the CPPM servers in Site B are lost, the authentications from Site B is handled by Site A subscriber (CPPM2). To control the Multi-Master Cache flush and reduce the amount of inter-site traffic, the customer also created a new Policy Manager Zone (Zone1) The Site B CPPM3 & CPPM4 are part of Zone! and Site A CPPM2 is also mapped to Zone1 as it will act as the backup RADIUS server for Site B The corporate laptops are installed with Persistent agent to run the OnGuard check and the OnGuard settings are also mapped to the Zones The Site A corporate user subnets are mapped to default zone and the Site 6 corporate user subnets are mapped to Zone1. The customer has the following issue in the setup: The corporate clients from Site A authenticating against the CPPM2 as their Primary RADIUS server assigns Quarantine enforcement profile even though the user s health status is Healthy.
What is the cause of this issue?

A. Multi-master cache also contains the roles and posture of the connected clients and is shared only with the members part of that Policy Manager Zone. CPPM2 belongs to Zone1 and the OnGuard setting for Site A is part of the default zone and the OnGuard system health validation information is sent to one of the nodes that are part of its home zone only. As Posture cache for Site A is not available with CPPM2. it fails to apply the enforcement profile based on correct health status.

B. Multi-master cache also contains the roles and posture of the associated and unassociated clients and is shared with all members part of that Policy Manager Zone. CPPM2 belongs to Zone1 and the OnGuard setting for Site A is part of the default zone and the system health validation information is sent to one of the nodes that are part of its home zone As Posture cache for Site A hi not available with CPPMZ. it fails to apply the enforcement profile based on correct health status.

C. Multi-master cache also contains the roles and posture of the connected clients and is shared across all members part of the cluster. The OnGuard setting for Site A is part of only the default zone and the system health validation information is sent to one of the nodes that are part of its home zone only As the OnGuard setting of the Site A corporate user subset is not mapped with default as well as Zone1. CPPM2 fails to apply the enforcement profile based on correct health status.

D. Multi-master cache also contains the roles and posture of the connected clients and is shared across all members part of the cluster. The OnGuard setting for Site A is part of only the default zone and the OnGuard system health validation information is sent to one of the nodes that is part of its home zone only. As the CPPM2 is also not mapped to the default zone as well as Zone1, CPPM2 fails to apply the enforcement profile based on correct health status.

正確答案: C

問題4

Refer to the exhibit.

You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password. Using the screenshots as a reference, how would you fix this issue?

A. Install a public signed HTTPS web server certificate on the ClearPass server

B. Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method

C. Check the network settings for the correct SSID name spelling.

D. Change the network settings to use EAP-TLS for the authentication protocol.

正確答案: A

問題5

Refer to the exhibit.

What could be causing the error message received on the OnGuard client?

A. The Service Selection Rules for the service are not configured correctly

B. The Health-Check service does not have Posture Compliance option enabled

C. The client's OnGuard Agent has not been configured with the correct Policy Manager Zone.

D. There is a firewall policy not allowing the OnGuard Agent to connect to ClearPass

正確答案: A

問題6

Refer to the exhibit.

A customer it troubleshooting a client not getting the SHV posture updated and the OnGuard agent shows the Health Status Not Known. What could the user do to update the health status?

A. change the Policy Manager Zone mapping and add the WIRED interface range

B. reinstall the OnGuard agent from the Wired interface

C. connect using an interface that is configured as Managed Interface

D. modify the agent.conf file and add the WIRED interface to it

正確答案: D

最新的HP Aruba Certified ClearPass Expert Written - HPE6-A81免費考試真題

聯系我們

站內鏈接

最新更新