HPE6-A81問題集、HP実際の試験問題

質問 1

Refer to the exhibit.

You have integrated the Cisco switch with ClearPass to do MAC-Auth for Cisco IP Phones. The phones connect to the network successfully but when you try to change the status of the device from the access tracker, you see only the ArubaOS Radius terminate session options and not the Cisco vendor terminate session options. What will you check to fix this issue?

A. Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.

B. Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.

C. Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.

D. Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.

正解: A

質問 2

A customer is troubleshooting the OnGuard Client Activity and is looking into the Live Monitoring -> OnGuard Activity section. What is the Status field representing for this client ?

A. the Client is successful authenticated

B. the Client health status is HEALTHY

C. the Client is online and sends keep-alive messages

D. the Client has been successfully profiled

正解: D

質問 3

You art deploying Cleat Pass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers. The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.
What is the most efficient way to configure the customer's guest solution? (Select two.)

A. Install the same public certificate on all Controllers with the common name "controller.{company domain)

B. Build one Web Login page with vendor settings for captiveportal-controller (company domain)

C. Install multiple public certificates with a different Common Name on each controller

D. Build one Web Login page with vendor settings for controller (company domain)

E. Build multiple Web Login pages with vendor settings configured for each controller

正解: C,D

質問 4

Refer to the exhibit.

What could be causing the error message received on the OnGuard client?

A. The Health-Check service does not have Posture Compliance option enabled

B. There is a firewall policy not allowing the OnGuard Agent to connect to ClearPass

C. The Service Selection Rules for the service are not configured correctly

D. The client's OnGuard Agent has not been configured with the correct Policy Manager Zone.

正解: C

質問 5

What is used to validate the EAP Certificate? (Select two.)

A. Server Identity

B. Key usage

C. SAN entries

D. Date

E. Common Name

正解: B,C

質問 6

Refer to the exhibit.

A customer has configured Onboard in a cluster. After the Primary server's failure, the BYOD devices fail to connect to the network. Which step below is the best starting point when troubleshooting'

A. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.

B. Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted.

C. Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA).

D. Verify the CPPM hostname in OSCP URL under TLS authentication method is updated to localhost instead of primary server's hostname.

正解: D

HP Aruba Certified ClearPass Expert Written - HPE6-A81 模擬練習