HPE6-A77 by HP Actual Free Exam Q&As

Question 1

Refer to the exhibit:

You have configured Onboard andcannot get it working The customer has sentyouthe above screenshots How would you resolve the issue?

A. Reconnect the client and select the correct certificate when prompted B. Install a public signed server authentication certificate on the ClearPass server for EAP C. Re-provision the client by running the QuickConnect application as Administrator D. Copy the [EAP-TLS with OSCP Enabled] authentication method and set the correct OCSP URL

Discussion 0

Correct Answer: C Vote an answer

Question 2

Refer to the exhibit:

A year ago, your customer deployed an Aruba ClearPass Policy Manager Server for a Guest SSIC hosted in an IAP Cluster.The customer just created a new Web Login Page forthe Guest SSID. Even though the previous Web Login page worked test with the new Web Login Page are falling and the customer has forwarded you the above screenshots What recommendation would you give the customer to tix the issue?

A. The Address filed under the WebLogin Vendor settings is not configured correctly, it should be set to instantarubanetworks.com B. The WebLogin Pre-Auth Check is set to Aruba Application Authentication which requires a separate application service on the policy manager C. The customer should reset the password tor the username accx@exam com using Guest Manage Accounts D. The service type configured is not correct. The Guest authentication should De an Application authentication type of service.

Discussion 0

Correct Answer: D Vote an answer

Question 3

What is the Open SSID (otherwise referred to as Dual SSID) Onboard deployment service workflow?

A. OnBoard Pre-Auth RADIUS service. OnBoard Authorization Application service. OnBoard Provisioning RADIUS service B. OnBoard Pre-Auth Application service, OnBoard Authorization Application service. OnBoard Provisioning RADIUS service C. OnBoard Authorization Application service, OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service D. OnBoard Authorization RADIUS service, OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service

Discussion 0

Correct Answer: C Vote an answer

Question 4

Refer to the exhibit:

After the helpdesk revoked the certificate of a device reported to be lost oy an employee, the lost device was seen as connected successfully to the secure network. Further testing has shown that device revocation is not working.
What steps should you follow to make device revocations work?

A. Copy the default [EAP-TLS with OSCP Enabled] authentication method and set The Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA. Remove EAP-TLS and map the custom created method to the OnBoard Authorization Service. B. Edit the default [EAP-TLS with OSCP Enabled] authentication method and set the Verify certificate using OSCP option as required then update the correct OSCP URL link of the OnBoard CA Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the OnBoard Provisioning Service. C. copy the default [EAP-TLS with OSCP Enabled] authentication method and set the verify certificate using OSCP: option as "required" then configure the correct OSCF URL link for the OnBoard CA.
Remove EAP-TLS and map the new [EAP-TLS with OSCP Enabled] method to the 802 1X Radius Service. D. Remove the EAP-TLS authentication method configuration changes are required and add "EAP-TLS with OCSP Enabled" authentication method in the OnBoard Provisioning service.
No other configuration changes are required.

Discussion 0

Correct Answer: D Vote an answer

Question 5

What are valid options for Network Access Device Settings? (Select two.)

A. In CLI settings, you can define the access credentials and the command templates that will be used. B. You can configure SNMP Read Settings to monitor the load of a NAD in order not to overload it with the requests. C. You can configure SNMP Write Settings to send commands to the devices that do not support other methods. D. The OnConnect Enforcement allows you to enable specific ports that trigger Enforcement when any device connects. E. On the Attributes tab. you can enable the service to write attributes like Location and Device type based on policy.

Discussion 0

Correct Answer: D,E Vote an answer

Question 6

Refer to the exhibit:

Your customer configured a ClearPass server to process the Guest and Secure SSIDs broadcastingfrom both Aruba and Cisco WLAN controllers When an Employee connects to Aruba or Cisco secure SSID, the authentication hits the guest service causing the client to fail the connection to the network.
What change can be implemented to make both the secure and guest services created for Aruba and Cisco devices to work correctly?

A. Move the HS_Building Aruba 802.1x service to the second position in the service order. B. Modify the service rule matching algorithm to ALLin HS-GuestUser Authentication service. C. Move the HS-Guest User Authentication with MAC Caching service to the first position. D. Disable HS-Guest User Authentication service and move HS-Guest MAC Authentication to seventh position.

Discussion 0

Correct Answer: C Vote an answer

HP Aruba Certified ClearPass Expert Written - HPE6-A77 Exam Practice Test