HP HPE6-A67 Exam Practice Test Instant Access

Question 1

An organization wants to ensure a client's antivirus is installed and up to date prior to allowing network access.

Which ClearPass feature can be used to accomplish this?

AGuest with sponsor approval

BOnGuard

CGuest with self-registration

DOnboarding

ERADIUSAuthorization

Answer : B

Question 2

Refer to the exhibit.

Based on the information shown, what is the status of the network?

AClearPass can do TCP OS finger printingbut Dictionary is not updated.

BClearPass cannot do TCP OS finger printing.

CDevice is Unknown to ClearPass.

DDevice is not authenticated.

EClearPass supports TCP finger printing but it is not enabled.

Answer : E

Question 3

Which ClearPass collectors are valid for profiling information? (Select two.)

AFTP

BSNMP

CActive Sync

DOn-enrollment

EActive Directory

Answer : B, C

http://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/PolicyProfile/Collectors.htm

Question 4

Which additional service must be added to a ClearPass server to use the OnGuard Agent health checks for 802.1x authentication?

AHTTP Posture Service

B802.1x Authentication

C802.1x Posture Service

D802.1x Enforcement policy

EWebAuth Service

Answer : E

http://community.arubanetworks.com/t5/Security/Clearpass-Onguard-implementation-and-documentation/td-p/121057

Question 5

Which statement most accurately describes how the HTTP collector words for profiling?

AHTTP packets are inspected whena user accesses any guest page on ClearPass.

BWhen a user access the Aruba controller captive portal page, HTTP packets are captured by ClearPass.

CHTTP packets are inspected only when a user accesses the ClearPass administration UI page.

DWhen a user accesses any internet page, HTTP packets are captured by ClearPass.

EHTTP packets are forwarded from the Controller to ClearPass.

Answer : A

Question 6

How is ClearPass enabled to perform DHCP profiling for devices in a network?

Aby enabling a port mirror on the network access device to mirror all user traffic toClearPass

Bby enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

Cby enabling the 'DHCP ignore' feature on network access devices

Dby configuring ClearPass as a secondary DHCP server on the client

Eby enabling profiling on ClearPass; configuration of the network access devices is not necessary

Answer : B

https://community.arubanetworks.com/aruba/attachments/aruba/ForoenEspanol/653/1/ClearPass%20Profiling%20TechNote.pdf

Question 7

Which type of ClearPass service is used to process health checks from the OnGuard agent?

AWebAuth

BRADIUS

CTACACS

DHTTP

EAppAuth

Answer : A

https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf

HPE6-A67 Aruba Certified ClearPass Associate 6.7 Exam Practice Test