Free HP HPE6-A81 Practice Exam with Questions & Answers

Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.

Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.

Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.

Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.

The traffic on the TCP port 6658 is congested due to the fact that this port is also used by the IPSec keep-alive packets of the SO-WAN solution.

The OnGuard Clients are automatically mapped to the Policy Manager Zone based on their IP range but an ACL on the switch could be blocking access.

The Aruba-user-role received by the IAP is filtering the TCP port 6658 to the Clear Pass servers and after 10 seconds the SSL fallback gets activated and randomly generates the issue

The ClearPass Policy Manager zones have been defined but the local IP subnets have not but properly mapped to the zones and the OnGuard Agent might connect to any of the servers in the cluster.

The enforcement profile on ClearPass is set up with an IETF:session delay.

The self-registration page is configured with a 1 minute login delay.

The guest users are assigned a firewall user role that has a rate limit.

The guest users are assigned multiple DNS servers delaying DNS response.

Install the same public certificate on all Controllers with the common name "controller.{company domain)

Build multiple Web Login pages with vendor settings configured for each controller

Build one Web Login page with vendor settings for captiveportal-controller (company domain)

Build one Web Login page with vendor settings for controller (company domain)

Install multiple public certificates with a different Common Name on each controller

Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate.

Have all of the BYOO clients disconnect and reconnect to the network.

Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.

Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).

The customer does not need to worry about Multi-Master Catht Survivability because the Controller will also cache the machine state.

The Windows User must log off. restart or disconnect their machine to initiate a machine authentication before the cache expires.

The machine authentication status rs written in the Multi-master cache on the ClearPass Server for 24 hrs

The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.

Machine Authentication only uses EAP TLS. as such a PKI infrastructure should be in place for machine authentication.

Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication

Administering downloadable user roles can be difficult for a large enterprise.

Can be applied only on ports or WLAN users authenticated by ClearPass.

Can use these result for other authentication methods not involving ClearPass.

Aruba downloadable user role are universally available across the environment.

Aruba downloadable user role is a built in enforcement template in ClearPass.

Downloadable role names must be defined in Aruba switch or controller.

Verify the CPPM hostname in OSCP URL under TLS authentication method is updated to localhost instead of primary server's hostname.

Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted.

Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.

Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA).

Select the correct OnGuard Agent installer, and use the one configured for Management Port for the clients.

Filter TCP port 6658 on the firewall, forcing the OnGuard agent to use the ClearPass Management port.

Configure a Policy Manager Zone mapping so the OnGuard agent will use the Management Port IP.

Edit the agent.conf file being deployed to the clients to use the ClearPass Management Port for SHV updates

Configure ClearPass Management IP in the DHCP Helper address

Configure IF-MAP on all networking devices to send additional information to ClearPass

Configure IF-MAP only on Aruba Mobility Controller, providing ClearPass username and password

Configure the authentication service to Audit the endpoints using, the embedded Nmap Server