Pass the HP Aruba Certified ClearPass Expert (ACCX) HPE6-A81 Questions and answers with CertsForce

Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions
Questions # 11:

Which statements art true about the Database server certificate? (Select two)

Options:

A.

Database certificate can be created to take a secure backup of the ClearPass database.


B.

ClearPass Policy Manager nodes validates the Database certificate while joining the cluster


C.

Custom Database certificate requires Subject Alternative Name (SAN) field with the DNS name of the server.


D.

A change in Database certificate will only be applicable after a reboot of the node


E.

Database server certificate is optional for the ClearPass servers that are part of a Cluster.


Expert Solution
Questions # 12:

When building an SNMP-based enforcement profile what option can you assign to the user as actions? (Select three).

Options:

A.

Enforce a VLAN ID for the client


B.

Set a session timeout for the client


C.

Enforce Firewall policies


D.

Send captive portal web re-direct URL


E.

ClearPass Downloadable Role


F.

Reset the connection after the settings has been pushed


Expert Solution
Questions # 13:

Refer to the exhibit.

Question # 13

The customer complains that the user shown cannot log into the ClearPess Server at an administrator using the [Policy Manager Admin Network Login Service]. What could be the reason for this?

Options:

A.

The mapping on the role should be changed to [RADIUS Super Admin]


B.

The user might be used for a TACACS authentication.


C.

The account created does not fit this purpose.


D.

The local user authentication might be disabled.


Expert Solution
Questions # 14:

Your customer has recently implemented a seIf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller Your customer has started complaining that the users are not able to reliably access the Internet after clicking the login button on the receipt page They tell you that the users will click the login button multiple times and after about a minute they gam access.

What could be causing this issue?

Options:

A.

The enforcement profile on ClearPass is set up with an IETF:session delay.


B.

The self-registration page is configured with a 1 minute login delay.


C.

The guest users are assigned a firewall user role that has a rate limit.


D.

The guest users are assigned multiple DNS servers delaying DNS response.


Expert Solution
Questions # 15:

What is used to validate the EAP Certificate? (Select two.)

Options:

A.

Key usage


B.

Date


C.

Server Identity


D.

SAN entries


E.

Common Name


Expert Solution
Questions # 16:

Refer to the exhibit.

Question # 16

A customer has configured Onboard in a cluster with two nodes. All devices were onboarded in the network through node1 but those clients fail to authenticate through node2 with the error shown What steps would you suggest to make provisioning and authentication work across the entire cluster? (Select three)

Options:

A.

Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate.


B.

Have all of the BYOO clients disconnect and reconnect to the network.


C.

Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.


D.

Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).


Expert Solution
Questions # 17:

Refer to the exhibit.

Question # 17

A customer has just configured a Posture Policy and the T 2 -Health check Service. Next they installed the OnGuard Agent on a test client connected to the Secure_Employee SSID. When they check Access Tracker they see many WEBAUTH requests are being triggered What could be the reason'

Options:

A.

The OnGuard Agent trigger the events based on changing the Health Status.


B.

The OnGuard Agent is connecting to the Data Port interface on ClearPass.


C.

TCP port 6658 is not allowed between the client and the ClearPass server.


D.

OnGuard Web-Based Health Check interval has been configured to three minutes.


Expert Solution
Questions # 18:

The customer would like to add a default common self-registration sponsor email under the initial value on all the ten self-registration pages created for different locations except for the guest registration page created for Sunnyvale location to use a different sponsor email in initial value. Under self-registration form fields, you have "Edit" and "Edit Base Field"

Which edit options will you choose to make minimal configuration changes to implement the customer's requirement? (Select two)

Options:

A.

Update the common sponsor email by clicking the "Edit" option of the sponsor email form field on the one of the self-registration register form page


B.

Update the sponsor email by clicking on both "Edit" and "Edit Base Field" options of the sponsor_email filed on the Sunnyvale register page


C.

Update the specific sponsor email by clicking on "Edit Base Field" option of the sponsor_email form filed on the Sunnyvale location register form page


D.

Update the common sponsor email by clicking the "Edit Base Field" option of the sponsor_email form field on the one of the self-registration form page


E.

Update the specific sponsor email by clicking on the "Edit" option of the sponsor_email form filed on the Sunnyvale self-registration register form page


Expert Solution
Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions