HPE6-A81無料問題集「HP Aruba Certified ClearPass Expert Written」

質問 1

A customer has created a Guest Self-Registration page that they would like to use it as 'template' for all the new pages that are going to be created from now on. Their goal is to ensure that the header and footer on every page are the same, and any edits made to them are automatically reflected on every Self-Registration Page.
What should be configured in order to accomplish this request?

（A）Save the "template" page as Master Self'Registration page.

（B）Save this "template" page as a new Skin to be used on other Self-Registration pages.

（C）Copy the "template" page and edit it each time a new Self-Registration Page is needed.

（D）Create child pages when creating new Self-Registration pages and select the "template" as Parent.

正解：A 解答を投票する

質問 2

Which statements art true about the Database server certificate? (Select two)

（A）ClearPass Policy Manager nodes validates the Database certificate while joining the cluster

（B）Database certificate can be created to take a secure backup of the ClearPass database.

（C）Database server certificate is optional for the ClearPass servers that are part of a Cluster.

（D）A change in Database certificate will only be applicable after a reboot of the node

（E）Custom Database certificate requires Subject Alternative Name (SAN) field with the DNS name of the server.

正解：A、E 解答を投票する

質問 3

You have configured a Guest SSIO with Captive-portaI Web Authentication and MAC authentication. The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

（A）The client will successfully pass the mac authentication until the mac caching time expires.

（B）The client will fail the MAC authentication and be denied access to the Guest SSIO.

（C）The client will fail to get the MAC Caching role and will be redirected to the captive portal login page

（D）The client will successfully pass the MAC authentication but still be redirected to captive portal page.

正解：D 解答を投票する

質問 4

You have designed a ClearPass solution for an Information Technology Business Park with 50,377 concurrent sessions including the visitors. The deployment includes eight ClearPass servers handling RADIUS authentication. Guest Self-Registration. Onboard and OnGuard. CPPM1 is acting as Publisher. CPPM2 to CPPM8 are added as subscriber nodes CPPM4 is the designated Standby Publisher. Servers CPPM2 and CPPM3 will be handling the Guest and Onboard HTTPS traffic. On a few devices, Corporate users will perform username and password based authentication with Active Directory accounts and on few devices, they will be using private CA signed TLS certificates to do the authentication The customer has three Active Directories (AD1, AD2 and A03) part of Multi-Domain Forest. To provide authentication redundancy, the customer has configured multiple Virtual IP settings between ClearPass servers in a cluster.

On all the Network Access Devices (NAD), the primary authentication server is configured as the VIP IP address and the secondary authentication server rs configured as CPPM1 MGMT IP address Based on the information provided, which ClearPass nodes will you join to the AD domain

（A）Join all the eight ClearPass servers to AD1, AD2 and AD3 domains.

（B）Join CPPM1. CPPM4 to CPPM8 to the AD1. AD2 and AD3 domains.

（C）Join CPPM2 to CPPM7 ClearPass servers to the AD root domain.

（D）Join CPPM1. CPPM4 to CPPM7 servers to the AD root domain

正解：B 解答を投票する

質問 5

Refer to the exhibit.

A customer has just configured a Posture Policy and the T 2 -Health check Service. Next they installed the OnGuard Agent on a test client connected to the Secure_Employee SSID. When they check Access Tracker they see many WEBAUTH requests are being triggered What could be the reason'

（A）OnGuard Web-Based Health Check interval has been configured to three minutes.

（B）The OnGuard Agent trigger the events based on changing the Health Status.

（C）TCP port 6658 is not allowed between the client and the ClearPass server.

（D）The OnGuard Agent is connecting to the Data Port interface on ClearPass.

正解：A 解答を投票する

質問 6

Refer to the exhibit.

A customer it troubleshooting a client not getting the SHV posture updated and the OnGuard agent shows the Health Status Not Known. What could the user do to update the health status?

（A）change the Policy Manager Zone mapping and add the WIRED interface range

（B）connect using an interface that is configured as Managed Interface

（C）modify the agent.conf file and add the WIRED interface to it

（D）reinstall the OnGuard agent from the Wired interface

正解：C 解答を投票する

HPE6-A81 無料問題集「HP Aruba Certified ClearPass Expert Written」

弊社を連絡する

関連リンク

トップ試験