HPE6-A81試験無料問題集（60題）「HP Aruba Certified ClearPass Expert Written 認定」

出題：1

A customer has multiple Aruba Controllers integrated with ClearPass for guest access using a controller-initialed login method. The customer is aware that a public CA-signed captive portal certificate is required in Aruba controllers for controller-initiated workflows. The customer has purchased unique public CA-signed server certificates for each controller.
What configuration steps would you suggest to the customer to complete the deployment? (Select three.)

A. From the weblogin/ self-registration page Login form settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

B. Edit the HTML header in the weblogin/ self-registration register page with a script to match the controllers IP and captive portal certificate CN names respectively.

C. From the Aruba controller, enable the option 'Add switch ip address in the redirection URL' under the respective guest AAA profile mapped in the VAP profile.

D. From the Aruba controller, enable the option "Add switch IP address in the redirection URL" under the respective L3 Authentication profile mapped in the initial role

E. From the weblogin/ self-registration page NAS Vendor settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

F. Add all the controller IP address and its certificate common names in the DNS server's Forward Lookup Zones and Reverse Lookup Zones to resolve queries from client.

正解：A,C,E 解答を投票する

出題：2

What is used to validate the EAP Certificate? (Select two.)

A. Date

B. Key usage

C. Server Identity

D. SAN entries

E. Common Name

正解：B,D 解答を投票する

出題：3

Refer to the exhibit.

You have set up a home lab for ACCX exam preparation with Aruba Clear Pass integrated with Aruba Controller and Instant Access Point Guest Mac Caching functionality is configured only for Aruba Controller's guest SSID and a common Web Login page is configured for both NAD devices You tested and verified the mac caching functionality for a client by connecting it to the Aruba Controller's guest SSID.
What will happen when you disconnect the client from Aruba Controller's guest SSID and connect it to Instant APs guest SSID?

A. The client will fail the mac authentication and will be redirected to the captive portal page.

B. The client does not have to complete any authentication as the re-connection was immediate.

C. The client will be redirected to the captive portal page to complete the web authentication.

D. The client will bypass the captive portal authentication by completing the MAC authentication.

正解：D 解答を投票する

出題：4

A customer has a Clear Pass cluster deployment with four servers, two servers at the data center and two servers at a large remote site connected over an SO-WAN solution. The customer would like to implement OnGuard. Guest Self-Registration, and 802.1 X authentication across their entire environment. During testing the customer is complaining that users connecting to an Instant Cluster Employee S5ID at the remote site, with the OnGuard Persistent Agent installed are randomly getting their health check missed.
What could be a possible cause of this behavior?

A. The ClearPass Policy Manager zones have been defined but the local IP subnets have not but properly mapped to the zones and the OnGuard Agent might connect to any of the servers in the cluster.

B. The traffic on the TCP port 6658 is congested due to the fact that this port is also used by the IPSec keep-alive packets of the SO-WAN solution.

C. The Aruba-user-role received by the IAP is filtering the TCP port 6658 to the Clear Pass servers and after 10 seconds the SSL fallback gets activated and randomly generates the issue

D. The OnGuard Clients are automatically mapped to the Policy Manager Zone based on their IP range but an ACL on the switch could be blocking access.

正解：B 解答を投票する

出題：5

Refer to the exhibit.

A year ago. your customer deployed an Aruba ClearPass Policy Manager Server for a Guest SSID hosted in an IAP Cluster The customer just created a new Web Login Page for the Guest SSiD Even though the previous Web Login page worked test with the new Web Login Page are failing and the customer has forwarded you the above screenshots.
What recommendation would you give the customer to fix the issue?

A. The customer should reset the password for the username accxCdlexam.com using Guest Manage Accounts.

B. The Address filed under the WebLogin Vendor settings is not configured correctly. It should be set to instant, Aruba networks com,

C. The WebLogin Pre-Auth Check is set to Aruba Application Authentication which requires a separate application service on the policy manager

D. The service type configured is not correct. The Guest authentication should be an Application authentication type of service.

正解：B 解答を投票する

出題：6

Where is the following information stored in Clear Pass?
- Roles and Posture for Connected Clients - System Health for OnGuard - Machine authentication State - CoA session info - Mapping of connected clients to NAS/NAD

A. Insight database

B. Multi-Master cache

C. ClearPass system cache

D. Endpoint database

正解：A 解答を投票する

HPE6-A81試験無料問題集「HP Aruba Certified ClearPass Expert Written 認定」