Printable & Easy to Use HPE6-A81 Dumps 100% Same Q&A In Your Real Exam
HPE6-A81 Practice Test Give You First Time Success with 100% Money Back Guarantee!
HP HPE6-A81 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION 19
Which statements art true about the Database server certificate? (Select two)
- A. Database certificate can be created to take a secure backup of the ClearPass database.
- B. ClearPass Policy Manager nodes validates the Database certificate while joining the cluster
- C. A change in Database certificate will only be applicable after a reboot of the node
- D. Custom Database certificate requires Subject Alternative Name (SAN) field with the DNS name of the server.
- E. Database server certificate is optional for the ClearPass servers that are part of a Cluster.
Answer: B,D
NEW QUESTION 20
Refer to the exhibit.
A customer is trying to configure a TACACS Authentication Service for administrative what could be the reason for the Login Status REJECT?
- A. The Read-only Administrator role does not exist on the Controller.
- B. The Enforcement profile is not designed to be used on Aruba Controller
- C. The Enforcement profile used is not a TACACS profile.
- D. The password used by the administrative user is wrong.
Answer: A
NEW QUESTION 21
The customer has a 19.940 loT devices connected to the network and would like to use Allow All Mac Auth to authenticate the users and enforce the action based on the condition defined with the fingerprint details of the device. Which Authorization source would you use to decide the access of the devices?
- A. Guest Device Database
- B. Endpoint Database
- C. Clear Pass Profiler Database
- D. Local User Database
Answer: A
NEW QUESTION 22
Refer to the exhibit.
You configured a new Wireless 802.1 X service for a Cisco WLC broadcasting the secure-AOM-5007 SSID. The client fails to connect to the SSIO. Using the screenshots as a reference, how would you fix this issue?
- A. Update the service condition Radws:IETF Called-Stat ion-Id CONTAINS secure-AOM-5007
- B. Remove the service condition Radius:IETF Service-Type BEL0NGS_T0 Login-User (1), 2.8
- C. Make sure that the Network Devices entry for the Cisco WLC has a vendor setting of "Airespace"
- D. Change the service condition to Radius:lETF Calling-Station-Id EQUALS Secure-ADM-5007
Answer: A
NEW QUESTION 23
Refer to the exhibit.
A customer has configured Onboard in a cluster with two nodes. All devices were onboarded in the network through node1 but those clients fail to authenticate through node2 with the error shown What steps would you suggest to make provisioning and authentication work across the entire cluster? (Select three)
- A. Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).
- B. Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.
- C. Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate.
- D. Have all of the BYOO clients disconnect and reconnect to the network.
Answer: A,B,D
NEW QUESTION 24
The customer would like to add a default common self-registration sponsor email under the initial value on all the ten self-registration pages created for different locations except for the guest registration page created for Sunnyvale location to use a different sponsor email in initial value. Under self-registration form fields, you have "Edit" and "Edit Base Field" Which edit options will you choose to make minimal configuration changes to implement the customer's requirement? (Select two)
- A. Update the common sponsor email by clicking the "Edit Base Field" option of the sponsor_email form field on the one of the self-registration form page
- B. Update the sponsor email by clicking on both "Edit" and "Edit Base Field" options of the sponsor_email filed on the Sunnyvale register page
- C. Update the specific sponsor email by clicking on "Edit Base Field" option of the sponsor_email form filed on the Sunnyvale location register form page
- D. Update the specific sponsor email by clicking on the "Edit" option of the sponsor_email form filed on the Sunnyvale self-registration register form page
- E. Update the common sponsor email by clicking the "Edit" option of the sponsor email form field on the one of the self-registration register form page
Answer: B,E
NEW QUESTION 25
A customer is troubleshooting a user that has complained about randomly having issues connecting the network with EAP PEAP using the Corporate Laptop. The initial checks are showing a number of authentication failures but no sign of issues with the ClearPass server or AD.
What can the Customer do to monitor this user Authentication trend closely over the next few days?
- A. add the user name in the Insight/Alert/Watchlitst and get the authentication failures notifications within 30 seconds
- B. configure a Report using Radius Failed Authentication template and schedule it to run every 5 mins
- C. configure an Alert using Failed Authentication template with Threshold 1. Interval 5 mins
- D. add to ClearPass Insight Dashboard the Authentication Status widget for this specific user
Answer: A
NEW QUESTION 26
A Customer has these requirements:
* 2.000 loT endpoints that use MAC authentication
* 6.000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication
* 1.000 guest endpoints at peak usage that use guest self-registration
* 1500 BYOD devices estimated as 3 devices per User (500 users)
* 2.500 endpoints that have OnGuard installed and connect on a daily basis What licenses should be installed to meet customer requirements?
- A. 13.000 Access. 1.500 Onboard. 2.500 OnGuard
- B. 11.500 Access. 1.500 Onboard. 2.500 OnGuard
- C. 11.500 Access. 500 Onboard. 2.500 OnGuard
- D. 9.000 Access. 500 Onboard. 2.500 OnGuard
Answer: B
NEW QUESTION 27
Refer to the exhibit.
A customer it troubleshooting a client not getting the SHV posture updated and the OnGuard agent shows the Health Status Not Known. What could the user do to update the health status?
- A. connect using an interface that is configured as Managed Interface
- B. modify the agent.conf file and add the WIRED interface to it
- C. change the Policy Manager Zone mapping and add the WIRED interface range
- D. reinstall the OnGuard agent from the Wired interface
Answer: B
NEW QUESTION 28
Refer to the exhibit.
A customer has just configured a Posture Policy and the T 2 -Health check Service. Next they installed the OnGuard Agent on a test client connected to the Secure_Employee SSID. When they check Access Tracker they see many WEBAUTH requests are being triggered What could be the reason'
- A. OnGuard Web-Based Health Check interval has been configured to three minutes.
- B. The OnGuard Agent is connecting to the Data Port interface on ClearPass.
- C. TCP port 6658 is not allowed between the client and the ClearPass server.
- D. The OnGuard Agent trigger the events based on changing the Health Status.
Answer: A
NEW QUESTION 29
There is an Aruba Controller configured to stand Guest AAA requests to ClearPass If the customer would likt tht most effective way to ensure the lowest license usage counts, how should the controller be configured?
- A. Aruba Controller will send stop messages only if both accounting and Interim accounting are enabled.
- B. Aruba Controller will send stop messages only if EAP termination and Interim accounting are enabled.
- C. Configure EAP Termination on the Aruba Controller and the client will send a stop message.
- D. Aruba Controller will send stop messages if RADIUS Accounting Server Group is defined in the authentication profile.
Answer: D
NEW QUESTION 30
Refer to the exhibit.
A customer is doing a new ClearPass installation and is setting up clustering between two ClearPass servers running a 6.8.6 version. The ClearPass server failed to add the subscriber node. The customer was able to login to the console of the ClearPass server with the same CLI password used during the cluster setup. The customer has sent you the screenshots seeking your support Why did an attempt to add a subscriber node failed showing that error?
- A. The subscriber server is running with a public signed and trusted HTTPS certificate
- B. The data and time in the subscriber was not synchronized with the NTP server
- C. The default database certificate used in the publisher server is not a valid certificate
- D. The subscriber server is running with a default self -signed HTTPS certificate
Answer: D
NEW QUESTION 31
Refer to the exhibit.
You have integrated the Cisco switch with ClearPass to do MAC-Auth for Cisco IP Phones. The phones connect to the network successfully but when you try to change the status of the device from the access tracker, you see only the ArubaOS Radius terminate session options and not the Cisco vendor terminate session options. What will you check to fix this issue?
- A. Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.
- B. Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.
- C. Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.
- D. Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.
Answer: C
NEW QUESTION 32
Where is the following information stored in Clear Pass?
- Roles and Posture for Connected Clients - System Health for OnGuard - Machine authentication State - CoA session info - Mapping of connected clients to NAS/NAD
- A. ClearPass system cache
- B. Insight database
- C. Multi-Master cache
- D. Endpoint database
Answer: B
NEW QUESTION 33
Your customer has recently implemented a seIf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller Your customer has started complaining that the users are not able to reliably access the Internet after clicking the login button on the receipt page They tell you that the users will click the login button multiple times and after about a minute they gam access.
What could be causing this issue?
- A. The guest users are assigned multiple DNS servers delaying DNS response.
- B. The guest users are assigned a firewall user role that has a rate limit.
- C. The enforcement profile on ClearPass is set up with an IETF:session delay.
- D. The self-registration page is configured with a 1 minute login delay.
Answer: C
NEW QUESTION 34
Refer to the exhibit.
A customer has configured Onboard in his lab ClearPass server and Windows devices work as expected but cannot get the Apple iOS devices to Onboard successfully Where would you look to troubleshoot the issue? {Select two)
- A. Check if the customer installed the internal PKI Root certificate presented by the ClearPass during the provisioning process.
- B. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
- C. Check if the customer has installed the same internal PKI signed RADIUS server certificate as the HTTPS server certificate.
- D. Check if the customer has installed a custom HTTPS certificate for iOS and another internal PKI HTTPS certificate for other devices.
- E. Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority.
Answer: B,E
NEW QUESTION 35
You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.
What happens when the client sends a DNS request to securelogin aruba networks com?
- A. The controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.
- B. The controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.
- C. Client does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.
- D. Address field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.
Answer: D
NEW QUESTION 36
Refer to the exhibit.
A customer hat configured the Aruba Controller for administrative authentication using ClearPass as A TACAC5 serve' During tasting, the read-only user is getting the root access role What could be a possible reason for this behavior? (Select two.)
- A. The ClearPass user role associated to the read-only user is wrong.
- B. The read-only enforcement profile is mapped to the root role
- C. On the Controller, the TACACS authentication server is not configured for Session authorization
- D. The Controller's Admin Authentication Options Default role is mapped to root
- E. The Controller Sarver Group Hatch Rules are changing the user role.
Answer: A,D
NEW QUESTION 37
Your customer has read about a feature in OnGuard for OnGuard Persistent Agent and Agentless OnGuard that can display a new Posture Results web page to notify that and users with posture results for unhealthy clients after the health check is done. Where do you configure this option?
- A. Policy Manager > Configuration > Enforcement > Profiles > Add a new profiles with Agent Enforcement as the template, and on the Attributes tab add the new Show Posture Results in Guest Page attribute and set the value for the attribute to true.
- B. Policy Manager > Configuration > Enforcement > Profiles > Add new profile with Aruba Radius Enforcement as the template, and on the Attributes tab add the Aruba-User-Role configured with the captive portal profile mapped with default Posture Check web page URL.
- C. Policy Manager > Configuration > Services > Edit the Web-base Health Check Only service, and on the posture tab under Remediation URL add the default Quarantined Blocked web page URL and complete the service configuration by hitting save.
- D. Policy Manager > Configuration > Services > Edit the Web-base Health Check Only service, and on the posture tab enable the checkbox for the new option Show Posture Results in Guest Page and complete the service configuration by hitting save.
Answer: C
NEW QUESTION 38
Which statements are true about that integration between ClearPass Policy Manager and ClearPass Device Insight? (Select two)
- A. ClearPass Device Insight updates ClearPass Policy Manager every 60 minutes if it detects a change in device classification like device spoofing.
- B. An attribute named Device Insight Tags art added to the Endpoints that art available to use in service, role-mapping, and enforcement policy Rules
- C. To provide enhanced profiling and reporting. additional configuration is required to transmit data in both directions between CPPM and Device Insight.
- D. Policy Manager stops using ClearPass Profiler for fingerprinting and uses Device Insight Analyzer instead for endpoint in-depth data analysis.
- E. When Device Insight integration mode is enabled. you can still use Update Fingerprint button to Update Endpoints at Configuration > Identity > Endpoints
Answer: C,E
NEW QUESTION 39
Refer to the exhibit.
What could be causing the error message received on the OnGuard client?
- A. The Health-Check service does not have Posture Compliance option enabled
- B. The Service Selection Rules for the service are not configured correctly
- C. The client's OnGuard Agent has not been configured with the correct Policy Manager Zone.
- D. There is a firewall policy not allowing the OnGuard Agent to connect to ClearPass
Answer: B
NEW QUESTION 40
......
Fully Updated Free Actual HP HPE6-A81 Exam Questions: https://www.passtestking.com/HP/HPE6-A81-practice-exam-dumps.html