Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free HP HPE6-A68 Practice Exam with Questions & Answers | Set: 2

Questions 11

HPE6-A68 Question 11

Based on the Local User repository in ClearPass shown, which Aruba firewall role will be assigned to “mike” when this user authenticates Aruba Controller?

Options:
A.

We can’t know this from the screenshot above.

B.

mike

C.

Employee

D.

john

HP HPE6-A68 Premium Access
Questions 12

Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

Options:
A.

when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

B.

when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

C.

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

D.

when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

E.

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

Questions 13

Refer to the exhibit.

HPE6-A68 Question 13

Based on the Translation Rule configuration shown, what will be the outcome?

Options:
A.

An AD user from group Administrators will be assigned the operator profile of IT Administrators.

B.

All ClearPass Policy Manager admin users who are members of the Administrators AD group will be assigned the TACACS profile of IT Administrators.

C.

All active directory users will be assigned the operator profile of IT Administrators.

D.

A user from AD group MatchAdmin will be assigned the operator profile of IT Administrators.

Questions 14

During a web login authentication, what is expected to happen as part of the Automated NAS login?

Options:
A.

NAD sends TACACS+ request to ClearPass.

B.

ClearPass sends TACACS+ request to NAD.

C.

Client device sends RADIUS request to NAD.

D.

NAD sends RADIUS request to ClearPass.

E.

ClearPass sends RADIUS request to NAD.

Questions 15

Refer to the exhibit.

HPE6-A68 Question 15

Based on the Aruba TACACS+ dictionary shown, how is the Aruba-Role attribute used?

Options:
A.

The Aruba-Admin-Role on the controller is applies to users using TACACS+ to login to the Policy Manager

B.

To assign different privileges to clients during 802.1X authentication

C.

To assign different privileges to administrators logging into an Aruba NAD

D.

It is used by ClearPass to assign TIPS roles to clients during 802.1X authentication

E.

To assign different privileges to administrators logging into ClearPass

Questions 16

Refer to the exhibit.

HPE6-A68 Question 16

An AD user’s department attribute is configured as “HR”. The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD.

Which roles are assigned to the user in ClearPass? (Select two.)

Options:
A.

Executive

B.

iOS Device

C.

Vendor

D.

Remote Employee

E.

HR Local

Questions 17

If the “Alerts” tab in an access tracker entry shows the following error message: “Access denied by policy”, what could be a possible cause for authentication failure?

Options:
A.

Configuration of the Enforcement Policy.

B.

An error in the role mapping policy.

C.

Failure to select an appropriate authentication method for the authentication request.

D.

Implementation of a firewall policy on ClearPass.

E.

Failure to find an appropriate service to process the authentication request.

Questions 18

Refer to the exhibit.

HPE6-A68 Question 18

Based on the Authentication sources configuration shown, which statement accurately describes the outcome if the user is not found?

Options:
A.

If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

B.

If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

C.

If the user is not found in the local user repository a reject message is sent back to the NAD.

D.

If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

E.

If the user is not found in the local user repository a timeout message is sent back to the NAD.

Questions 19

Refer to the exhibit.

HPE6-A68 Question 19

An AD user’s department attribute value is configured as “Product Management”. The user connects on Monday to a NAD that belongs to the Device Group HQ.

Which role is assigned to the user in ClearPass?

Options:
A.

HR Local

B.

[Guest]

C.

[Employee]

D.

Linux User

E.

Executive

Questions 20

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

Options:
A.

the ClearPass server must have the network device added as a valid NAD

B.

the ClearPass server certificate must be installed on the NAD

C.

a matching shared secret must be configured on both the ClearPass server and NAD

D.

an NTP server needs to be set up on the NAD

E.

a bind username and bind password must be provided