Jan-2022 HP HPE6-A68 Actual Questions and Braindumps
HPE6-A68 Dumps To Pass HP Exam in 24 Hours - SurePassExams
NEW QUESTION 61
Refer to the exhibit.
Based on the configuration of the create_user form shown, which statement accurately describes the status?
- A. The visitor_phone field will be visible to operators creating the account.
- B. The visitor_phone field will be visible to the guest users in the web login page.
- C. The email field will be visible to guest users when they access the web login page.
- D. The visitor_company field will be visible to operators creating the account.
- E. The visitor_company field will be visible to the guest users when they access the web login page.
Answer: C
Explanation:
Explanation
References:
https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/expire-timezone-field-is-not-showin
NEW QUESTION 62
Refer to the exhibit.
A user logged in to the Self-Service Portal as shown.
What do the traffic received and sent statistics present?
- A. These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass.
- B. These show the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.
- C. These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.
- D. These show the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass.
- E. These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the client to ClearPass.
Answer: C
NEW QUESTION 63
Refer to the exhibit.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will an employee receive when connecting an IOS device to the network or the first time using EAP-PEAP?
- A. Deny Access Profile
- B. Cannot be determined
- C. Onboard Device Repository
- D. Onboard Post-Provisioning - Aruba
- E. Onboard Pre-Provisioning - Aruba
Answer: E
NEW QUESTION 64
Refer to the exhibit.
An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD.
Which roles are assigned to the user in ClearPass? (Select two.)
- A. HR Local
- B. Executive
- C. iOS Device
- D. Vendor
- E. Remote Employee
Answer: A,E
NEW QUESTION 65 
Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?
- A. Deny Access
- B. Full Access VLAN
- C. Internet VLAN
- D. Employee VLAN
Answer: D
NEW QUESTION 66
Refer to the exhibit.
When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value 'securelogin.arubanetworks.com' used for?
- A. for appending to the Web Login URL, after the page name.
- B. for the client to POST the user credentials to the NAD
- C. for ClearPass to send a TACACS+ request to the NAD
- D. for ClearPass to send a RADIUS request to the NAD
- E. for appending to the Web Login URL, before the page name
Answer: B
NEW QUESTION 67
Refer to the exhibit.
Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)
- A. The user can Onboard their device again
- B. A new device certificate will be automatically pushed out to the device
- C. EAP-TLS Authentication will fail
- D. The user cannot Onboard their device again
- E. EAP-TLS Authentication will be unaffected
Answer: C,D
Explanation:
The Device Management (View by Device) page lists all devices and lets you manage the devices' access to the network. For each device, you can allow or deny network access.
When you select the Deny option, a message advises you that any certificates associated with it will be revoked. The device cannot be re-enrolled as long as access is denied. To re-enroll the device, you must use this field to allow access again.
References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/DeviceManagement.htm
NEW QUESTION 68
Refer to the exhibit.
Based on the Posture Policy configuration shown, above, which statement is true?
- A. This Posture Policy can use either the persistent or dissolvable Onguard agent to obtain the statement of health.
- B. This Posture Policy checks for presence of a firewall application in Windows devices.
- C. This Posture Policy can only be applied to an 802.1x wired service not 802.1x wireless.
- D. This Posture Policy checks with a Windows NPS server for posture tokens.
- E. This Posture Policy checks the health status of devices running Windows, Linux and Mac OS X.
Answer: A
NEW QUESTION 69
Refer to the exhibit.
Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?
- A. A limited access VLAN value is sent to the Network Access Device.
- B. A RADIUS access-accept message is sent to the Controller
- C. A RADIUS CoA message is sent to bounce the client.
- D. A message is sent to the Onguard Agent on the client device.
- E. An unhealthy role value is sent to the Network Access Device.
Answer: D
Explanation:
Explanation
The OnGuard Agent enforcement policy retrieves the posture token. If the token is HEALTHY it returns a healthy message to the agent and bounces the session. If the token is UNHEALTHY it returns an unhealthy message to the agent and bounces the session.
References: CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 27
NEW QUESTION 70
What types of files are stored in the Local Shared Folders database in ClearPass? (Choose two.)
- A. Software image
- B. Backup Files
- C. Log files
- D. Posture dictionaries
- E. Device fingerprint dictionaries
Answer: B,C
NEW QUESTION 71
Refer to the exhibit.
Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user's request?
- A. After the RADIUS Access-Request
- B. After the RADIUS Access-Response
- C. Before the user can submit the registration form
- D. After the NAS login, but before the RADIUS Access-Request
- E. After the receipt page is displayed, before the NAS login
Answer: E
NEW QUESTION 72
Refer to the exhibit.
An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?
- A. Executive
- B. IOS Device
- C. Remote Employee
- D. [Guest]
- E. HR Local
Answer: D
Explanation:
Explanation
None of the Listed Role Name conditions are met.
NEW QUESTION 73
Refer to the exhibit.
What is the purpose of the 'Clock Skew Allowance' setting? (Select two.)
- A. to set start time in client certificate to a few minutes before current time
- B. to adjust clock time on client device to a few minutes before current time
- C. to set expiry time in client certificate to a few minutes longer than the default setting
- D. to ensure server certificate validation does not fail due to client clock sync issues
- E. to ensure client certificate validation does not fail due to client clock sync issues
Answer: E
Explanation:
Clock Skew Allowance adds a small amount of time to the start and end of the client certificate's, not the server certificate's, validity period. This permits a newly issued certificate to be recognized as valid in a network where not all devices are perfectly synchronized.
References: http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Onboard/EditingCASettings.htm
NEW QUESTION 74
A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.
What are the likely causes of this? (Select two.)
- A. The ClearPass server does not recognize the client's certificate.
- B. The DNS server is not replying with an IP address for www.google.com.
- C. The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.
- D. The ClearPass server has a trusted server certificate issued by Verisign.
Answer: B,C
Explanation:
Explanation
You would need a publicly signed certificate.
References:
http://community.arubanetworks.com/t5/Security/Clearpass-Guest-certificate-error-for-guest-visitors/td-p/22199
NEW QUESTION 75
Refer to the exhibit.
An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?
- A. Executive
- B. IOS Device
- C. Remote Employee
- D. [Guest]
- E. HR Local
Answer: D
Explanation:
None of the Listed Role Name conditions are met.
NEW QUESTION 76
Refer to the exhibit.
Based on the ClearPass and Aruba Controller configuration settings for Onboarding shown, which statement accurately describes an employee's new personal device connecting to the Onboarding network? (Select two.)
- A. The BYOD-Provision role is a ClearPass internal role and exists in ClearPass.
- B. Post-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.
- C. Pre-Onboarding, the device will be redirected to the 'Onboarding Page' Captive Portal.
- D. The device will not be redirected to any Onboarding page.
- E. Pre-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.
Answer: C,E
Explanation:
You can pre-provision with the Aruba controller firewall role of BYOD-Provision.
From the Firewall policies part of the exhibit, we see that the onboarding page is set to captive portal.
References: https://community.arubanetworks.com/t5/Security/CP-OnBoard-not-redirecting-to-portal-on-single-SSID/td-p/284506
NEW QUESTION 77
A University wants to deploy ClearPass with the Guest module. They have two types of users that need to use web login authentication. The first type of users are students whose accounts are in Active Directory server.
The second type of user are friends of students who need to self-register to access the network.
How should the service be setup in the Policy Manager for this Network?
- A. Either the Guest User Repository or Active Directory server should be the single authentication source.
- B. Active Directory server as authentication source and the Guest User Repository as the authentication source.
- C. Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authentication sources.
- D. Guest User Repository as the authentication source and the Active Directory server as authentication source.
- E. Guest User Repository and Active Directory server both as authentication sources.
Answer: E
NEW QUESTION 78
Which checks are made with Onguard posture evaluation on ClearPass? (Select three.)
- A. EAP TLS certificate validity
- B. Peer-to-peer application checks
- C. Operating System version
- D. Client role check
- E. Registry keys
Answer: B,C,E
NEW QUESTION 79
Which database in the Policy Manager contains the device attributes derived by profiling?
- A. Client Repository
- B. Local Users Repository
- C. Endpoints Repository
- D. Onboard Devices Repository
- E. Guest User Repository
Answer: C
Explanation:
Explanation
Configure [Endpoints Repository] as Authorization Source. Endpoint profile attributes derived by Profile are available through the '[Endpoint Repository]' authorization source.
These attributes can be used in role-mapping or enforcement policies to control network access. Available attributes are:
* Authorization:[Endpoints Repository]:MAC Vendor
* Authorization:[Endpoints Repository]:Category
* Authorization:[Endpoints Repository]:OS Family
* Authorization:[Endpoints Repository]:Name
References: ClearPass Profiling TechNote (2014), page 29
https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%2
NEW QUESTION 80
Refer to the exhibit.
A customer wants to enable Publisher redundancy.
Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?
- A. Subscriber in the main data center
- B. Publisher in the DMZ
- C. Any of the other three Publishers
- D. Publisher in the mid-size branch
- E. Publisher in the regional office
Answer: A
Explanation:
ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.
References: http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster%20Deployment/Standby_publisher.htm
NEW QUESTION 81
Refer to the exhibit.
Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?
- A. Welcome Page
- B. Default Guest Role
- C. Login Page
- D. Default Role
- E. both Login and Welcome Page
Answer: C
Explanation:
The Login page is the URL of the page that appears for the user logon. This can be set to any URL.
The Welcome page is the URL of the page that appears after logon and before redirection to the web URL. This can be set to any URL.
References: http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/Captive_Portal_Authentic.htm
NEW QUESTION 82
Refer to the exhibit.
Based on the Enforcement Policy configuration shown, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?
- A. Remote Employee ACL
- B. RestrictedACL
- C. Deny Access Profile
- D. HR VLAN
- E. EMPLOYEE_VLAN
Answer: C
NEW QUESTION 83
......
HP HPE6-A68 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
Download the Latest HPE6-A68 Dump - 2022 HPE6-A68 Exam Question Bank: https://www.surepassexams.com/HPE6-A68-exam-bootcamp.html