HP HPE6-A77 Exam Practice Test Instant Access

Question 1

A Customer has these requirements:

* 2.000 loT endpoints that use MAC authentication

* 6,000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication

* 1,000 guest endpoints at peak usage that use guest self-registration

* 1500 BYOD devices estimated as 3 devices per User (500 users)

* 2,500 endpoints that have OnGuard installed and connect on a daily basis

What licenses should be installed to meet customer requirements?

A11,500 Access, 500 Onboard, 2,500 Onguard

B13.000 Access, 1.500 Onboard, 2,500 Onguard

C11,500 Access, 1,500 Onboard, 2.500 Onguard

D9,000 Access, 500 Onboard. 2.500 Onguard

Answer : C

Question 2

A customer would like to allow only the AD users with the "Manager" title from the "HQ" location to Onboard their personal devices. Any other AD users should not be authorized to pass beyond the initial device provisioning page. Which Onboard service will you use to implement this requirement?

AOnboard CP login service

BOnboard Authorization service

COnboard Provisioning service

DOnboard Pre-Auth service

Answer : A

Question 3

Refer to the exhibit:

A customer has configured a Guest Self registration page for their Cisco Wireless network with the settings shown. What should be changed in order to successfully authenticate guests users?

ASecure Login should use HTTP

BChange the Vendor Settings to Airespace Networks

CChange \he IP Address to the Cisco Controller DNS name

DLogin Method should be Controller-initiated - using HTTPs form submit

Answer : C

Question 4

A customer has deployed an OnGuard Solution to all the corporate devices using a group policy rule to push the OnGuard Agents. The network administrator is complaining that some of the agents are communicating to the ClearPass server that is located in a DMZ, outside the firewall The network administrator wants all of the agents System Health Validation traffic to stay inside the Management subnets.

What can the ClearPass administrator do to move the traffic only to the ClearPass Management Ports?

AEdit the agent.conf file being deployed to the clients to use the ClearPass Management Port for SHV updates.

BSelect the correct OnGuard Agent installer, and use the one configured for Management Port for the clients.

CConfigure a Policy Manager Zone mapping so the OnGuard agent will use the Management Port IP.

DFilter TCP port 6658 on the firewall, forcing the OnGuard agent to use the ClearPass Management port.

Answer : C

Question 5

You are integrating a Postgres SQL server with the ClearPass Policy Manager What steps will you follow to complete the integration process? (Select three)

AClick on the default filter name with pre-defined filter queries and check box to enable as role.

BSpecify a new filter with filter queries to fetch authentication and authorization attributes.

CAttribute Name under filter configuration must match one of the columns being requested from the database table.

DCreate a new Endpoint context server and add the SQL server IP, credentilas and the database name.

EAlias Name under filter configuration must match one of the columns being requested from the database table.

FCreate a new authentication source and add the SQL server IP, credentials and the database name.

Answer : B, D, F

Question 6

A customer is looking to implement a Web-Based Health Check solution with the following requirements:

* for the HR user's client devices, check if a USB stick is mounted.

* for the R&D user's client devices, check if the hard disk is fully encrypted.

The Web-Based Health Check service has been configured but the customer it is not sure how to design the Profile Policy How can be accomplished this customer request?

Acreate two Posture Policies and customize the OnGuard Agent (Persistent or Dissolvable) to select the correct SHV checks

Bcreate one Posture Policy and define Rules Conditions that will apply different Tokens for each SHV check condition

Ccreate two Posture Policies and use the Restrict by Roles option to filter for HR and R&D user roles and apply the correct SHV checks

Dcreate one Posture Policy to check the HR users client devices and use the NAP Agent to check R&D users client devices

Answer : A

Question 7

Refer to the exhibit:

You configured a new Wireless 802.1X service for a Cisco WLC broadcasting the Secure-ADM-5007 SSID. The client falls to connect to the SSID. Using the screenshots as a reference, how would you fix this issue? (Select two.)

AUpdate the service condition Radius:IETF Called-Station-ld CONTAINS secure-adm-5007

BMake sure that the Network Devices entry for the Cisco WLC has a vendor setting of 'Airspace'

CRemove the service condition Radius:lETF Service-Type BELONGSJTO Login-User (1). 2. 8

DChange the service condition to Radius:lETF Calling-Station-ld EQUALS Secure-ADM-5007

Answer : A, C

HPE6-A77 Aruba Certified ClearPass Expert Written Exam Practice Test