Aruba Certified ClearPass Professional (ACCP) V6.7

Here you have the best HP HPE6-A68 practice exam questions

You have 61 total questions to study from
Each page has 5 questions, making a total of 13 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 17, 2024

Question 1 of 61

Refer to the exhibit.

Which statement accurately describes the cp82 ClearPass node? (Choose two.)

It stays as a Subscriber when the Publisher fails.

It becomes the Publisher when the primary Publisher fails.

It operates as a Publisher in a separate cluster when the Publisher is active.

It operates as a Publisher in the same cluster as the primary Publisher when the primary is active.

It operates as a Subscriber when the Publisher is active.

Correct Answer: B, E

The cp82 ClearPass node becomes the Publisher when the primary Publisher fails, indicating it takes over the role of Publisher in a failover situation. When the primary Publisher is active, cp82 ClearPass operates as a Subscriber. This setup ensures that there is always one active Publisher in the same cluster, maintaining the consistency and availability of the service.

Question 2 of 61

A customer with an Aruba Controller wants to set it up to work with ClearPass Guest.

Hoe should they configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

Add ClearPass as RADIUS CoA server.

Add ClearPass as a TACACS+ authentication server.

Add ClearPass as a RADIUS authentication server.

Add ClearPass as a HTTPS authentication server.

Correct Answer: C

To set up an Aruba Controller to work with ClearPass Guest, ClearPass should be added as a RADIUS authentication server. This is because RADIUS is the standard protocol used for authenticating users in network access scenarios, including guest access management. By configuring ClearPass as a RADIUS authentication server in the controller, it enables the controller to send authentication requests to ClearPass and process the responses accordingly, thereby allowing guests to authenticate successfully.

Question 3 of 61

Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

to send information via RADIUS packets to Aruba NADs

to gather and send Aruba NAD information to ClearPass

to send information via RADIUS packets to clients

to gather information about Aruba NADs for ClearPass

to send CoA packets from ClearPass to the Aruba NAD

Correct Answer: A

The purpose of the RADIUS attributes in the Aruba RADIUS dictionary is to send information via RADIUS packets to Aruba Network Access Devices (NADs). These attributes, such as Aruba-User-Role and Aruba-User-Vlan, are used to communicate specific information required to enforce network policies on the NADs. VSAs (Vendor-Specific Attributes) are typically utilized to transfer such detailed configuration information to proprietary devices.

Question 4 of 61

A bank would like to deploy ClearPass Guest with web login authentication so that their customers can self-register on the network to get network access when they have meetings with bank employees. However, they're concerned about security.

What is true? (Choose three.)

If HTTPS is used for the web login page, after authentication is completed guest Internet traffic will all be encrypted as well.

During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted.

After authentication, an IPSEC VPN on the guest's client be used to encrypt Internet traffic.

HTTPS should never be used for Web Login Page authentication.

If HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may be unencrypted.

Correct Answer: B, C, E

During web login authentication, if HTTPS is used for the web login page, guest credentials will be encrypted. This ensures the security of the login process. After authentication, an IPSEC VPN on the guest's client can be used to encrypt Internet traffic, providing an additional layer of security. However, if HTTPS is used for the web login page, after authentication is completed some guest Internet traffic may still be unencrypted because HTTPS encryption only applies to the web login page, not to all subsequent traffic.

Question 5 of 61

A customer wants to make enforcement decisions during 802.1x authentication based on a client's Onguard posture token.

What enforcement profile should be used in the health check service?

Quarantine VLAN

RADIUS CoA

RADIUS Accept

RADIUS Reject

Full Access VLAN.

Correct Answer: B

In 802.1x authentication scenarios where client health posture is assessed and subsequent enforcement decisions need to be made, the most appropriate enforcement profile to use in the health check service is a RADIUS Change of Authorization (CoA). This allows dynamic changes to the client's network access based on their health posture without requiring reauthentication. Therefore, RADIUS CoA is the correct enforcement profile to use in this situation.