Latest Jan-2022 HP HPE6-A81 Dumps Updated 60 Questions
PDF Download Free of HPE6-A81 Valid Practice Test Questions
HP HPE6-A81 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 27
A customer has multiple Aruba Controllers integrated with ClearPass for guest access using a controller-initialed login method. The customer is aware that a public CA-signed captive portal certificate is required in Aruba controllers for controller-initiated workflows. The customer has purchased unique public CA-signed server certificates for each controller.
What configuration steps would you suggest to the customer to complete the deployment? (Select three.)
- A. Edit the HTML header in the weblogin/ self-registration register page with a script to match the controllers IP and captive portal certificate CN names respectively.
- B. From the Aruba controller, enable the option "Add switch IP address in the redirection URL" under the respective L3 Authentication profile mapped in the initial role
- C. From the weblogin/ self-registration page NAS Vendor settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.
- D. Add all the controller IP address and its certificate common names in the DNS server's Forward Lookup Zones and Reverse Lookup Zones to resolve queries from client.
- E. From the Aruba controller, enable the option 'Add switch ip address in the redirection URL' under the respective guest AAA profile mapped in the VAP profile.
- F. From the weblogin/ self-registration page Login form settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.
Answer: C,E,F
NEW QUESTION 28
Refer to the exhibit.
A customer has configured Onboard in his lab ClearPass server and Windows devices work as expected but cannot get the Apple iOS devices to Onboard successfully Where would you look to troubleshoot the issue? {Select two)
- A. Check if the customer has installed a custom HTTPS certificate for iOS and another internal PKI HTTPS certificate for other devices.
- B. Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority.
- C. Check if the customer installed the internal PKI Root certificate presented by the ClearPass during the provisioning process.
- D. Check if the customer has installed the same internal PKI signed RADIUS server certificate as the HTTPS server certificate.
- E. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
Answer: B,E
NEW QUESTION 29
Which using Allow All MAC AUTH, which authentication source should be mapped to the service?
- A. Endpoint Database
- B. Any Authentication source
- C. Guest Device Database
- D. Static Host List
Answer: D
NEW QUESTION 30
Refer to the exhibit.
What enforcement prof lit will be assigned to the Windows 10 MDH enabled devices if it completes user authentication and is already profiled by ClearPess?
- A. Cisco Redirect URL - Service Unavailable
- B. Cisco Redirect ACL for profiling
- C. Default - Deny Access Profile
- D. Cisco Full Access VLAN
Answer: C
NEW QUESTION 31
The customer would like to add a default common self-registration sponsor email under the initial value on all the ten self-registration pages created for different locations except for the guest registration page created for Sunnyvale location to use a different sponsor email in initial value. Under self-registration form fields, you have "Edit" and "Edit Base Field" Which edit options will you choose to make minimal configuration changes to implement the customer's requirement? (Select two)
- A. Update the specific sponsor email by clicking on "Edit Base Field" option of the sponsor_email form filed on the Sunnyvale location register form page
- B. Update the specific sponsor email by clicking on the "Edit" option of the sponsor_email form filed on the Sunnyvale self-registration register form page
- C. Update the common sponsor email by clicking the "Edit" option of the sponsor email form field on the one of the self-registration register form page
- D. Update the sponsor email by clicking on both "Edit" and "Edit Base Field" options of the sponsor_email filed on the Sunnyvale register page
- E. Update the common sponsor email by clicking the "Edit Base Field" option of the sponsor_email form field on the one of the self-registration form page
Answer: C,D
NEW QUESTION 32
Which statements art true about Aruba down loadable user roles? (select three)
- A. Aruba downloadable user role are universally available across the environment.
- B. Can use these result for other authentication methods not involving ClearPass.
- C. Can be applied only on ports or WLAN users authenticated by ClearPass.
- D. Administering downloadable user roles can be difficult for a large enterprise.
- E. Aruba downloadable user role is a built in enforcement template in ClearPass.
- F. Downloadable role names must be defined in Aruba switch or controller.
Answer: B,C,F
NEW QUESTION 33
While configuring the service rule conditions which NAS-Port-Type value should be used to differentiate the service for wired and wireless authentication?
- A. Ethernet (19) and Wireless-802 11(18)
- B. Ethernet (15) and Wireless-802 II (19)
- C. Ethernet (5) and Wireless-802 11 (9)
- D. Ethernet (O)and W.reless-802 11 (1)
Answer: C
NEW QUESTION 34
When building an SNMP-based enforcement profile what option can you assign to the user as actions? (Select three).
- A. Enforce Firewall policies
- B. Reset the connection after the settings has been pushed
- C. ClearPass Downloadable Role
- D. Set a session timeout for the client
- E. Send captive portal web re-direct URL
- F. Enforce a VLAN ID for the client
Answer: D,E,F
NEW QUESTION 35
Refer to the exhibit.
The customer complains that the user shown cannot log into the ClearPess Server at an administrator using the [Policy Manager Admin Network Login Service]. What could be the reason for this?
- A. The user might be used for a TACACS authentication.
- B. The local user authentication might be disabled.
- C. The mapping on the role should be changed to [RADIUS Super Admin]
- D. The account created does not fit this purpose.
Answer: D
NEW QUESTION 36
Refer to the exhibit.
You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password. Using the screenshots as a reference, how would you fix this issue?
- A. Install a public signed HTTPS web server certificate on the ClearPass server
- B. Check the network settings for the correct SSID name spelling.
- C. Change the network settings to use EAP-TLS for the authentication protocol.
- D. Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method
Answer: A
NEW QUESTION 37
A customer has two different geographical sites deployed with two ClearPass servers in each site. Site A has the Publisher (CPPM1) and a subscriber (CPPM2) and Site B has two subscribers (CPPM3 S CPPM4) All wired and wireless authentication requests from the respective sites are handled by respective CPPMs deployed in the sites When both the CPPM servers in Site B are lost, the authentications from Site B is handled by Site A subscriber (CPPM2). To control the Multi-Master Cache flush and reduce the amount of inter-site traffic, the customer also created a new Policy Manager Zone (Zone1) The Site B CPPM3 & CPPM4 are part of Zone! and Site A CPPM2 is also mapped to Zone1 as it will act as the backup RADIUS server for Site B The corporate laptops are installed with Persistent agent to run the OnGuard check and the OnGuard settings are also mapped to the Zones The Site A corporate user subnets are mapped to default zone and the Site 6 corporate user subnets are mapped to Zone1. The customer has the following issue in the setup: The corporate clients from Site A authenticating against the CPPM2 as their Primary RADIUS server assigns Quarantine enforcement profile even though the user s health status is Healthy.
What is the cause of this issue?
- A. Multi-master cache also contains the roles and posture of the connected clients and is shared only with the members part of that Policy Manager Zone. CPPM2 belongs to Zone1 and the OnGuard setting for Site A is part of the default zone and the OnGuard system health validation information is sent to one of the nodes that are part of its home zone only. As Posture cache for Site A is not available with CPPM2. it fails to apply the enforcement profile based on correct health status.
- B. Multi-master cache also contains the roles and posture of the connected clients and is shared across all members part of the cluster. The OnGuard setting for Site A is part of only the default zone and the system health validation information is sent to one of the nodes that are part of its home zone only As the OnGuard setting of the Site A corporate user subset is not mapped with default as well as Zone1. CPPM2 fails to apply the enforcement profile based on correct health status.
- C. Multi-master cache also contains the roles and posture of the associated and unassociated clients and is shared with all members part of that Policy Manager Zone. CPPM2 belongs to Zone1 and the OnGuard setting for Site A is part of the default zone and the system health validation information is sent to one of the nodes that are part of its home zone As Posture cache for Site A hi not available with CPPMZ. it fails to apply the enforcement profile based on correct health status.
- D. Multi-master cache also contains the roles and posture of the connected clients and is shared across all members part of the cluster. The OnGuard setting for Site A is part of only the default zone and the OnGuard system health validation information is sent to one of the nodes that is part of its home zone only. As the CPPM2 is also not mapped to the default zone as well as Zone1, CPPM2 fails to apply the enforcement profile based on correct health status.
Answer: B
NEW QUESTION 38
Refer to the exhibit.
When creating a new report, there is in option to send report Notifications by Email Where is the email server configured?
- A. In the ClearPass Policy Manager Messaging Setup under Administration.
- B. In the Insight Reports Interface under Administration on the sidebar menu
- C. In the Insight report on the next screen of the report definition
- D. In the ClearPass Policy Manager Endpoint Context Servers under Administration.
Answer: D
NEW QUESTION 39
Refer to the exhibit.
You configured a new Wireless 802.1 X service for a Cisco WLC broadcasting the secure-AOM-5007 SSID. The client fails to connect to the SSIO. Using the screenshots as a reference, how would you fix this issue?
- A. Change the service condition to Radius:lETF Calling-Station-Id EQUALS Secure-ADM-5007
- B. Make sure that the Network Devices entry for the Cisco WLC has a vendor setting of "Airespace"
- C. Update the service condition Radws:IETF Called-Stat ion-Id CONTAINS secure-AOM-5007
- D. Remove the service condition Radius:IETF Service-Type BEL0NGS_T0 Login-User (1), 2.8
Answer: C
NEW QUESTION 40
Refer to the exhibit.
A customer has just configured a Posture Policy and the T 2 -Health check Service. Next they installed the OnGuard Agent on a test client connected to the Secure_Employee SSID. When they check Access Tracker they see many WEBAUTH requests are being triggered What could be the reason'
- A. TCP port 6658 is not allowed between the client and the ClearPass server.
- B. OnGuard Web-Based Health Check interval has been configured to three minutes.
- C. The OnGuard Agent trigger the events based on changing the Health Status.
- D. The OnGuard Agent is connecting to the Data Port interface on ClearPass.
Answer: B
NEW QUESTION 41
A customer has acquired another company that has its own Active Directory infrastructure. The 802 1X PEAP authentication works with the customer's original Active Directory servers but the customer would like to authenticate users from the acquired company as well.
What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)
- A. Create a new Authentication Source, type Active Directory.
- B. Add the new AD server(s) as backup into the existing Authentication Source.
- C. Create a new Authentication Source, type Generic LDAP.
- D. Join the ClearPass server(s) to the new AD domain.
- E. There is no need to join ClearPass to the new AD domain.
Answer: C,E
NEW QUESTION 42
You have configured a Guest SSIO with Captive-portaI Web Authentication and MAC authentication. The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?
- A. The client will successfully pass the MAC authentication but still be redirected to captive portal page.
- B. The client will fail to get the MAC Caching role and will be redirected to the captive portal login page
- C. The client will fail the MAC authentication and be denied access to the Guest SSIO.
- D. The client will successfully pass the mac authentication until the mac caching time expires.
Answer: A
NEW QUESTION 43
Refer to the exhibit.
You have set up a home lab for ACCX exam preparation with Aruba Clear Pass integrated with Aruba Controller and Instant Access Point Guest Mac Caching functionality is configured only for Aruba Controller's guest SSID and a common Web Login page is configured for both NAD devices You tested and verified the mac caching functionality for a client by connecting it to the Aruba Controller's guest SSID.
What will happen when you disconnect the client from Aruba Controller's guest SSID and connect it to Instant APs guest SSID?
- A. The client will fail the mac authentication and will be redirected to the captive portal page.
- B. The client does not have to complete any authentication as the re-connection was immediate.
- C. The client will bypass the captive portal authentication by completing the MAC authentication.
- D. The client will be redirected to the captive portal page to complete the web authentication.
Answer: C
NEW QUESTION 44
Under OnBoard Management and Control, which option will deny the user from re-enrolling one of his devices with Onboard?
View by Certificate >> Click on the device >> Delete certificate
- A. Click on the device >> Revoke certificate >> Revoke this client certificate
- B. Delete this client certificate View by Dev >> Click on the device
- C. Manage Access >> Deny access to this device View by Certificate
- D. View by Username >> Click on the user >> Delete Actions >> Delete all devices
Answer: A
NEW QUESTION 45
Where is the following information stored in Clear Pass?
- Roles and Posture for Connected Clients - System Health for OnGuard - Machine authentication State - CoA session info - Mapping of connected clients to NAS/NAD
- A. Endpoint database
- B. ClearPass system cache
- C. Insight database
- D. Multi-Master cache
Answer: C
NEW QUESTION 46
A customer is planning to implement machine and user authentication on infrastructure with one Aruba Controller and a single ClearPass Server. What should the customer consider while designing this solution? (Select three.)
- A. The customer does not need to worry about Multi-Master Catht Survivability because the Controller will also cache the machine state.
- B. Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication
- C. Machine Authentication only uses EAP TLS. as such a PKI infrastructure should be in place for machine authentication.
- D. The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.
- E. The Windows User must log off. restart or disconnect their machine to initiate a machine authentication before the cache expires.
- F. The machine authentication status rs written in the Multi-master cache on the ClearPass Server for 24 hrs
Answer: B,E,F
NEW QUESTION 47
You have designed a ClearPass solution for an Information Technology Business Park with 50,377 concurrent sessions including the visitors. The deployment includes eight ClearPass servers handling RADIUS authentication. Guest Self-Registration. Onboard and OnGuard. CPPM1 is acting as Publisher. CPPM2 to CPPM8 are added as subscriber nodes CPPM4 is the designated Standby Publisher. Servers CPPM2 and CPPM3 will be handling the Guest and Onboard HTTPS traffic. On a few devices, Corporate users will perform username and password based authentication with Active Directory accounts and on few devices, they will be using private CA signed TLS certificates to do the authentication The customer has three Active Directories (AD1, AD2 and A03) part of Multi-Domain Forest. To provide authentication redundancy, the customer has configured multiple Virtual IP settings between ClearPass servers in a cluster.
On all the Network Access Devices (NAD), the primary authentication server is configured as the VIP IP address and the secondary authentication server rs configured as CPPM1 MGMT IP address Based on the information provided, which ClearPass nodes will you join to the AD domain
- A. Join CPPM1. CPPM4 to CPPM8 to the AD1. AD2 and AD3 domains.
- B. Join all the eight ClearPass servers to AD1, AD2 and AD3 domains.
- C. Join CPPM2 to CPPM7 ClearPass servers to the AD root domain.
- D. Join CPPM1. CPPM4 to CPPM7 servers to the AD root domain
Answer: A
NEW QUESTION 48
Which statement is true about Radius IETF attributes Called-Stat ion-Id and Calling-Station-ld?
- A. Called-Station-Id contains the mac address of the supplicant and SSID name while Calling-Station-Id contains the mac address of the authenticator.
- B. Called-Station-ld contains the mac address of the authenticator while Calling-Station-ld contains the mac address of the supplicant and SSID name.
- C. Called-Station-ld contains the mac address of the supplicant while Calling-Station-ld contains the mac address of the authenticator.
- D. Called-Station-ld contains the mac address of the authenticator while Calling-Station-Id contains the mac address of the supplicant.
Answer: B
NEW QUESTION 49
......
HPE6-A81 Test Engine files, HPE6-A81 Dumps PDF: https://www.troytecdumps.com/HPE6-A81-troytec-exam-dumps.html