最新のHPE6-A68学習ガイド2022年最新の- 提供するのはテストエンジンとPDF [Q41-Q55]

Rate this post

最新のHPE6-A68学習ガイド2022年最新の- 提供するのはテストエンジンとPDF

最新版を今すぐ試そうHPE6-A68練習テスト問題解答が待ってます

HP HPE6-A68 認定試験の出題範囲：

トピック	出題範囲
トピック 1	AAAの外部認証 ClearPass
トピック 2	エンドポイント分析運用および管理ユーザー
トピック 3	クラスタリングと冗長性 ClearPassの概要

41、Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value ‘securelogin.arubanetworks.com’ used for?

For the client to POST the user credentials to the NAD.

For ClearPass to send a RADIUS request to the NAD.

For ClearPass to send a TACACS+ request to the NAD.

For appending to the Web Login URL, after the page name.

For appending to the Web Login URL, before the page name.

Explanation/Reference:

42、Refer to the exhibit.

An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.
What is a possible reason for the ErrorCode ‘Failed to classify request to service’ shown?

The user failed authentication due to an incorrect password.

ClearPass could not match the authentication request to a service, but the user passed authentication.

ClearPass service authentication sources were not configured correctly.

The NAD did not send the authentication request.

ClearPass service rules were not configured correctly.

43、Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

radius01 was deleted from the list of authentication sources.

The policy service was moved to position number 4.

radius01 was moved to position number 4.

The policy service was moved to position number 3.

raduis01 was added as an authentication source.

44、Which CLI command is used to upgrade the image of a ClearPass server?

Image update

System upgrade

Upgrade image

Reboot

Upgrade software

Explanation
When logged in as appadmin, you can manually install the Upgrade and Patch binaries imported via the CLI using the following commands:
* system update (for patches)
* system upgrade (for upgrades)
References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 564
https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%

45、Which CLI command is used to upgrade the image of a ClearPass server?

Image update

System upgrade

Upgrade image

Reboot

Upgrade software

When logged in as appadmin, you can manually install the Upgrade and Patch binaries imported via the CLI using the following commands:
* system update (for patches)
* system upgrade (for upgrades)
References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 564
https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

46、What are Operator Profiles used for?

to enforce role based access control for Aruba Controllers

to enforce role based access control for ClearPass Policy Manager admin users

to enforce role based access control for ClearPass Guest Admin users

to assign ClearPass roles to guest users

to map AD attributes to admin privilege levels in ClearPass Guest

An operator profile determines what actions an operator is permitted to take when using ClearPass Guest.
References: http://www.arubanetworks.com/techdocs/ClearPass/CPGuest_UG_HTML_6.5/Content/OperatorLogins/OperatorProfiles.htm

47、Which components of a ClearPass is mandatory?

Authorization Source

Profiler

Role Mapping Policy

Enforcement

Posture

An enforcement policy is a way to organize enforcement profiles and apply them to users or Policy Manager roles. Based on the enforcement policy assigned to the role, enforcement profiles are applied to the service request.

48、Which checks are made with Onguard posture evaluation in ClearPass? (Select three.)

Registry keys

EAP TLS certificate validity

Client role check

Peer-to-peer application checks

Operating System version

49、Refer to the exhibit.

An AD user’s department attribute value is configured as “QA”. The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?

HR Local

Remote Employee

[Guest]

iOS Device

Executive

50、Use this form to make changes to the RADIUS Web Login Guest Network.

A Web Login page is configured in Clear Pass Guest as shown.
What is the purpose of the Pre-Auth Check?

To authenticate users after the NAD sends an authentication request to ClerPass

To authenticate users before the client sends the credentials to the NAD

To authenticate users when they are roaming from one NAD to another

To authenticate users before they launch the Web Login Page

To replace the need for the NAD to send an authentication request to ClearPass

51、Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

both Login and Welcome Page

Default Role

Welcome Page

Default Guest Role

Explanation
The Login page is the URL of the page that appears for the user logon. This can be set to any URL.
The Welcome page is the URL of the page that appears after logon and before redirection to the web URL.
This can be set to any URL.
References:
http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/C

52、What does a Windows client need for it to perform EAS-PEAP successfully when ‘Validate server Certificate’ is not enabled?

Pre-shared key

Client Certificate

WPA2-PSK

Username and Password

Server Certificate

53、Use the arrows to sort the steps to request a Policy Service on the left into the order they are performed on the right.

54、Why can the Onguard posture check not be performed during 802.1x authentication?

Health Checks cannot be used with 802.1x.

Onguard uses RADIUS, so an additional service must be created.

Onguard uses HTTPS, so an additional service must be created.

Onguard uses TACACS, so an additional service must be created.

802.1x is already secure, so Onguard is not needed.

OnGuard uses HTTPS to send posture information to the ClearPass appliance. For OnGuard to use HTTPS, it must have access to the network. If a customer requires 802.1x authentication on the wired switch, a separate 802.1x authentication must be used prior to the OnGuard posture check. In this example, an 802.1x PEAP-EAP-MSCHAPv2 authentication is completed first. A separate WebAuth service must be setup with posture checks to use the OnGuard agent.
References: MAC Authentication and OnGuard Posture Enforcement using Dell WSeries ClearPass and Dell Networking Switches (August 2013), page 21

55、Refer to the exhibit.

Based on the configuration for the client’s certificate private key as shown, which statements accurately describe the settings? (Select two.)