Aruba Certified ClearPass Expert Written Exam (HPE6-A77) Free Practice Test

Question 1

A customer has created a Guest Sett-Registration page that they would like to use it as'template'for all the new pages that are going to be created from now on. Their goal is to ensure that the header and footer on every page are the same, and any edits made to them are automatically reflected on every Self-Registration Page.
What should be configured in order to accomplish this request?

A. Copy the "template" page and edit it each time a new Self-Registration Page is needed

B. Save this "template" page as a new Skin to be used on other Self-Registration pages

C. Save the "template" page as Master Self-Registration page

D. Create child pages when creating new Self-Registration pages and select the "template" as Parent

Correct Answer: B

Question 2

Refer to the Exhibit:

A customer wants to integrate posture validationinto an Aruba Wireless 802.1X authentication service During testing, the client connects to the Aruba Employee Secure SSID and is redirected to the Captive Portal page where the user can download the OnGuard Agent After the Agent is installed, the client receives the Healthy token the client remains connected to the Captive Portal page ClearPass is assigning the endpoint the following roles: T2-Staff-User. (Machine Authenticated! and T2-SOL-Device.
What could cause this behavior?

A. RFC-3576 Is not configured correctly on the Aruba Controller and does not update the role.

B. The Enforcement Policy conditions for rule 1 are not configured correctly.

C. Used Cached Results: has not been enabled In the Aruba 802.1X Wireless Service

D. The Enforcement Profile should bounce the connection instead of a Terminate session

Correct Answer: C

Question 3

You are deploying ClearPass Policy Manager with Guest functionality for a customer withmultiple Aruba Networks Mobility Controllers The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.
What is the most efficient way to configure the customers guest solution? (Select two.)

A. Build multiple Web Login pages with vendor settings configured for each controller

B. Install the same public certificate on all Controllers with the common name "controller {company domain}"

C. Install multiple public certificates with a different Common Name on each controller

D. Build one Web Login page with vendor settings for controller {company domain)

Correct Answer: A,B

Question 4

A customer would like to allow only the AD users with the "Manager" title from the "HQ" location to Onboard their personal devices. Any other AD users should not be authorized to pass beyond the initial device provisioning page. Which Onboard service will you use to implement this requirement?

A. Onboard CP login service

B. Onboard Provisioning service

C. Onboard Pre-Auth service

D. Onboard Authorization service

Correct Answer: A

Question 5

Refer to the exhibit:

A customer has configured Onboard and Windows devices workas expected but cannot get the Apple iOS devices to Onboard successfully. Where would you look to troubleshoot the Issued (Select two)

A. Check if the ClearPass HTTPS server certificate installed in the server is issued by a trusted commercial certificate authority.

B. Check if a DNS entryis available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.

C. Check if the customer installed the internal PKl Root certificate presented by the ClearPass during the provisioning process.

D. Check if the customer has Instated a custom HTTPS certificate for IDS and another internal PKl HTTPS certificate for other devices.

E. Check if the customer has installed the sameinternal PKl signed RADIUS server certificate as the HTTPS server certificate.

Correct Answer: A,B

Question 6

Refer to the exhibit:

You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password.
Using the screenshots as a reference, how would you fix this issue?

A. Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method.

B. Install a public signedHTTPs web server certificate on the ClearPass server.

C. Change the network settings to use EAP-TLS for the authentication protocol.

D. Check the network settings for the correct SSID name spelling.

Correct Answer: D

Welcome to TestSimulate

HP Aruba Certified ClearPass Expert Written (HPE6-A77) Free Practice Test