HP HPE6-A07 Exam Questions

Question 6 of 40

Refer to the exhibit. A user connects to an Aruba Access Point wireless SSID named "secure-corporate" and performs an 802.1X authentication with ClearPass as the authentication server.
Based on this service configuration, which service will be triggered?

Question 7 of 40

A ClearPass deployment needs to be designed to determine whether a user authenticating is an HR department employee in the Active Directory Server and whether the users device is healthy.
Which policy service components will the network administrator need to use?

Posture, Authentication and Authorization

Posture and Firewall Roles

Posture and Onboard

Authentication and Authorization

Posture, Authentication and Onboarding

Correct Answer: A

Question 8 of 40

What is Radius CoA used for?

to validate a host MAC against a white and a black list

to force the client to re-authenticate upon roaming to a new controller

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user’s session status

to apply firewall policies based on authentication credentials

Correct Answer: D

Question 9 of 40

Which statement most accurately describes how users with Active Directory credentials authenticate with ClearPass when Active Directory is used as an authentication source for an 802.1x service in ClearPass?

A Kerberos request is sent from the Network Access Device to ClearPass which initiates a RADUIS request to the AD server.

A RADIUS request is sent from the Network Access Device to the AD server which communicates with ClearPass.

An LDAP request is sent from the Network Access Device to the AD server which communicates with ClearPass.

An LDAP request is sent from the Network Access Device to ClearPass which initiates a RADIUS request to the AD server.

A RADIUS request is sent from the Network Access Device to the ClearPass which communicates with the AD server.

Correct Answer: C

Question 10 of 40

Refer to the exhibit. Based on the information shown, why did the Joining AD fail?

the GSS is wrong

the wrong FQDN of the AD was entered while joining

the wrong domain name was selected while joining the AD

there is a clock difference between ClearPass and AD servers

there is an IP communication issue

Correct Answer: C