HPE6-A68 Practice Exam Questions with Answers Aruba Certified ClearPass Professional (ACCP) 6.7 Certification

It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user’s session after this time is up.

It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user’s session after this time is up.

It will send the session –Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

1 Policy Manager license, 1 Onboard License

2 Policy Manager licenses, 1 Onguard License

1 Policy Manager license, 1 Profile License

2 Policy Manager licenses, 2 Onguard licenses

1 Policy Manager license, 1 Onguard License

If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well.

During web login authentication, if HTTPS is used for the web login page, guest credentials will be

encrypted.

After authentication, an IPSEC VPN on the guest’s client be used to encrypt Internet traffic.

HTTPS should never be used for Web Login Page authentication.

If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.

The client used incorrect credentials to authenticate to the network.

ClearPass does not have a service enabled for MAC authentication.

The client MAC address is not present in the Endpoints table in the CrearPass database.

The RADIUS client on the Windows server failed to categorize the service correctly.

The client wireless profile is incorrectly setup.

EMPLOYEE_VLAN

RestrictedACL

Deny Access Profile

HR VLAN

Remote Employee ACL

The email field will be visible to guest users when they access the web login page.

The visitor_company field will be visible to operators creating the account.

The visitor_company field will be visible to the guest users when they access the web login page.

The visitor_phone field will be visible to the guest users in the web login page.

The visitor_phone field will be visible to operators creating the account.

When counting policy manager licenses, include the additional 50 business partner devices.

When counting policy manager licenses, exclude the additional 50 business partner devices.

Purchase Onboard licenses.

Purchase guest licenses.

Purchase Onguard licenses.

for ClearPass to send a TACACS+ request to the NAD

for appending to the Web Login URL, before the page name

for the client to POST the user credentials to the NAD

for ClearPass to send a RADIUS request to the NAD

for appending to the Web Login URL, after the page name.

Software image

Backup files

Log files

Device fingerprint dictionaries

Posture dictionaries

The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

The device will be disconnected from and reconnected to the network after Onboarding is completed.

The device’s onboard authorization request will be denied.

The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

Static IP addresses are only allowed on the management port.

Configuration of the data port is mandatory.

Configuration on the management port is mandatory.

Configuration of the data port if optional.

Configuration of the management port is optional.

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

Add ClearPass as a RADIUS CoA server.

Add ClearPass as a RADIUS authentication server.

Add ClearPass as a TACACS+ authentication server.

Add ClearPass as an HTTPS authentication server.

Username and Password

ActiveSync Plugin

Client’s role on the controller

Onguard agent

Active Directory Attributes

Deny Access Profile

Onboard Device Repository

Cannot be determined

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Aruba Controller

LDAP server

Cisco Controller

Active Directory

Aruba Mobility Access Switch

The user failed authentication due to an incorrect password.

ClearPass could not match the authentication request to a service, but the user passed authentication.

ClearPass service authentication sources were not configured correctly.

The NAD did not send the authentication request.

ClearPass service rules were not configured correctly.

Authorization Source

Profiler

Role Mapping Policy

Enforcement

Posture

CP-HW-2k, 1000 Onboard, 100 Guest

CP-HW-500, 1000 Onboard, 100 Guest

CP-HW-5k, 2500 Enterprise

CP-HW-5k, 1000 Enterprise

CP-HW-5k, 100 Onboard, 100 Guest

The web login page will be displayed.

The client will send a NAS authentication request to ClearPass.

ClearPass will send a NAS authentication request to the NAD.

the NAD will send an authentication request to ClearPass.

The user will be presented with a self-registration receipt.

The Onboard Provisioning service is triggered when the user connects to the provisioning SSID to Onboard their device.

The Onboard Authorization service is triggered when the user connects to the secure SSID.

The Onboard Authorization service is triggered during the Onboarding process.

The device connects to the secure SSID for provisioning.

The Onboard Authorization service is never triggered.

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

The user cannot Onboard any devices.

It limits the total number of devices that can be provisioned by ClearPass.

It limits the total number of Onboarded devices connected to the network.

It limits the number of devices that a single user can Onboard.

It limits the number of devices that a single user can connect to the network.

HR Local

Remote Employee

[Guest]

Executive

IOS Device

for forming the Web Login Page URL

for Administrators to access the PHP page, but not guests

for Administrators to reference the page only

for forming the Web Login Page URL where Administrators add guest users

for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.

DHCP server IP

Active Directory IP

Switch IP

Microsoft NPS server IP

ClearPass server IP

to send information via RADIUS packets to Aruba NADs

to gather and send Aruba NAD information to ClearPass

to send information via RADIUS packets to clients

to gather information about Aruba NADs for ClearPass

to send CoA packets from ClearPass to the Aruba NAD

The controller’s shared secret used during the certificate exchange is incorrect.

The NAS source interface IP is incorrect.

The client sent an incorrect shared secret for the 802.1X authentication.

The controller used an incorrect shared secret for the RADIUS authentication.

The client’s shared secret used during the certificate exchange is incorrect.

to force the client to re-authenticate upon roaming to a new Controller

to apply firewall policies based on authentication credentials

to validate a host MAC address against a whitelist or a blacklist

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user’s session status