Aruba Certified ClearPass Expert Written Exam (HPE6-A81) Free Practice Test

Question 1

When building an SNMP-based enforcement profile what option can you assign to the user as actions? (Select three).

A. Set a session timeout for the client

B. Enforce Firewall policies

C. Enforce a VLAN ID for the client

D. ClearPass Downloadable Role

E. Reset the connection after the settings has been pushed

F. Send captive portal web re-direct URL

Correct Answer: A,C,F

Question 2

Which statement is true about Radius IETF attributes Called-Stat ion-Id and Calling-Station-ld?

A. Called-Station-ld contains the mac address of the authenticator while Calling-Station-Id contains the mac address of the supplicant.

B. Called-Station-Id contains the mac address of the supplicant and SSID name while Calling-Station-Id contains the mac address of the authenticator.

C. Called-Station-ld contains the mac address of the authenticator while Calling-Station-ld contains the mac address of the supplicant and SSID name.

D. Called-Station-ld contains the mac address of the supplicant while Calling-Station-ld contains the mac address of the authenticator.

Correct Answer: C

Question 3

A customer has multiple Aruba Controllers integrated with ClearPass for guest access using a controller-initialed login method. The customer is aware that a public CA-signed captive portal certificate is required in Aruba controllers for controller-initiated workflows. The customer has purchased unique public CA-signed server certificates for each controller.
What configuration steps would you suggest to the customer to complete the deployment? (Select three.)

A. From the Aruba controller, enable the option "Add switch IP address in the redirection URL" under the respective L3 Authentication profile mapped in the initial role

B. From the Aruba controller, enable the option 'Add switch ip address in the redirection URL' under the respective guest AAA profile mapped in the VAP profile.

C. Edit the HTML header in the weblogin/ self-registration register page with a script to match the controllers IP and captive portal certificate CN names respectively.

D. From the weblogin/ self-registration page NAS Vendor settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

E. From the weblogin/ self-registration page Login form settings, enable the check box for "The controller will send the IP to submit credentials" under Dynamic address.

F. Add all the controller IP address and its certificate common names in the DNS server's Forward Lookup Zones and Reverse Lookup Zones to resolve queries from client.

Correct Answer: B,D,E

Question 4

Your customer has recently implemented a seIf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller Your customer has started complaining that the users are not able to reliably access the Internet after clicking the login button on the receipt page They tell you that the users will click the login button multiple times and after about a minute they gam access.
What could be causing this issue?

A. The guest users are assigned multiple DNS servers delaying DNS response.

B. The enforcement profile on ClearPass is set up with an IETF:session delay.

C. The self-registration page is configured with a 1 minute login delay.

D. The guest users are assigned a firewall user role that has a rate limit.

Correct Answer: B

Question 5

What configuration steps should you follow to add terms and conditions page on Guest seIf-registration for CPPM? (Select two).

A. Edit the creetoraccepiterms form field in register page and change HTML section by pointing the hyperlink to the HTML file uploaded

B. Edit the accept_terms form field in receipt page and change HTML section by pointing the hyper link to the HTML file uploaded m Guest Manager

C. Edit the creatoracceprterms form field in receipt page and change HTML section by pointing the hyperlink to the HTML file uploaded

D. Create an HTML page with custom terms and condition and upload it to public files under Clearpass Guest -> configuration -> content manager

E. Create an HTML page with custom terms and condition and upload it to private files under Clearpass Guest -> configuration -> content manager

Correct Answer: C,D

Question 6

While configuring the service rule conditions which NAS-Port-Type value should be used to differentiate the service for wired and wireless authentication?

A. Ethernet (O)and W.reless-802 11 (1)

B. Ethernet (19) and Wireless-802 11(18)

C. Ethernet (5) and Wireless-802 11 (9)

D. Ethernet (15) and Wireless-802 II (19)

Correct Answer: C

Welcome to TestSimulate

HP Aruba Certified ClearPass Expert Written (HPE6-A81) Free Practice Test