HPE6-A68 by HP Actual Free Exam Q&As

Question 1

Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device? (Select two.)

A. Configure ClearPass as an Authentication server on the network device. B. Enable RADIUS accounting on the NAD. C. Configure a RADIUS Enforcement Profile on ClearPass for the desired privilege level. D. Configure ClearPass roles on the network device. E. Configure a TACACS Enforcement Profile on ClearPass for the desired privilege level.

Discussion 0

Correct Answer: A,E Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

An organization implements dual SSID Onboarding. The administrator used the Onboard service template to create services for dual SSID Onboarding.
Which statement accurately describes the outcome?

A. The device connects to the secure SSID for provisioning. B. The Onboard Authorization service is triggered when the user connects to the secure SSID. C. The Onboard Authorization service is triggered during the Onboarding process. D. The Onboard Provisioning service is triggered when the user connects to the provisioning SSID to Onboard their device. E. The Onboard Authorization service is never triggered.

Discussion 0

Correct Answer: C Vote an answer

Question 3

A customer would like to deploy ClearPass with these requirements:
between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS should allow for up to 1000 employee devices to be Onboarded should allow up to 100 guest users each day to authenticate using the web login feature What is the license mix that customer will need to purchase?

A. CP-HW-5k, 1000 Enterprise B. CP-HW-5k, 100 Onboard, 100 Guest C. CP-HW-500, 1000 Onboard, 100 Guest D. CP-HW-2k, 1000 Onboard, 100 Guest E. CP-HW-5k, 2500 Enterprise

Discussion 0

Correct Answer: E Vote an answer

Question 4

Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting 'Validate server certificate'?

A. The client will send its certificate to the server for verification. B. The server and client will perform an HTTPS SSL certificate exchange. C. The client will verify the server certificate against a trusted CA. D. The server will send its private key to the client for verification. E. The client will send its private key to the server for verification.

Discussion 0

Correct Answer: C Vote an answer

Question 5

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

A. the ClearPass server must have the network device added as a valid NAD B. a bind username and bind password must be provided C. an NTP server needs to be set up on the NAD D. a matching shared secret must be configured on both the ClearPass server and NAD E. the ClearPass server certificate must be installed on the NAD

Discussion 0

Correct Answer: A,D Vote an answer

Question 6

Refer to the exhibit.

Under which circumstances will ClearPass select the Policy Service named 'Test device group'?

A. when the IP address of the NAD is part of the device group HQ B. when the Aruba access point that the client is associated to is part of the device group HQ C. when the ClearPass IP address is part of the device group HQ D. when an end user IP address is part of the device group HQ E. when the NAD belongs to an Airware device group HQ

Discussion 0

Correct Answer: A Vote an answer

Question 7

Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an email request sent to the sponsor?

A. after 'Submit form (3)' B. after 'Login Message page (5)' C. after 'Automated NAS login (6)' D. after 'Redirects (1)' E. after 'Guest Role (7)'

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

HP Aruba Certified ClearPass Professional - HPE6-A68 Exam Practice Test