HPE6-A82 Aruba Certified ClearPass Associate Exam Questions and Answers

YAML

SOAP and XML

REST APIs over HTTPS

FTP over SSH

ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and receive a result of Active Directory Authentication failed . No further processing will occur.

ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed .

No further processing will occur.

ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.

ClearPass receive a timeout attempt when trying the Remote Lab AD server first. No further processing will occur until the Remote Lab AD server is marked as " Down " by the Administrator.

Interim Accounting on the Network Access Device (NAD).

Enable Active Sessions in ClearPass Guest

Enable Logging of Accounting Start-Stop packets.

Make sure the Endpoint Profiling is configured

Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to

Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group

A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group

Another way to add a customizable " attribute " field to reference when processing authentication requests

Can apply to both Network Access Devices (NADs) as wen as client machines as a way to filter authentication requests

It is used to identify and remove any malware/viruses

It is used to ensure that Antivirus/Antispyware programs are running

It supports Doth Windows and Mac OS X clients

It only supports 802 1X authentication

Guest with self-registration

ClearPass Onboard

MAC authentication with profiling

Policy Manager Enforcement

ClearPass Admin login credentials

SSH password

Shared Secret

HTTPS certificate

NAD IP address

Using the " Import Accounts " under ClearPass Guest

Using the " Create Account " or " Create Multiple ' ' options under ClearPass Guest

Assigning the default role " Lobby Ambassador to a receptionist to then add the accounts

Using the " Sync Accounts ' ' under ClearPass Guest

importing accounts from Active Directory once ClearPass is added with Admin credentials

configuring ClearPass as a DHCP relay for the client

DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not

necessary

enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

Device Category

Device Family

Device Health

Device Type

Device Location

Requires the purchase of a supported Cisco Access Point licensed as an Aruoa Monitor Mode AP. to then act as !he sensor

Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation

Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP)

Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets

Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature

Service One

Service Two

Service Three

No service will be triggered

Guests no longer are required to validate certificates during captive portal.

Allows different certificates for each controller for increased security

Wild card certificates are provide greater security than normal certificates

Allows the single wild card certificate to be installed on all controllers in the environment

The customer needs to add second guest service in the policy manager for the guest network.

The customer needs to add the AD server as an authentication source in a guest service

Employees must be taken to a separate web login page on the guest network

The customer needs to add the AD servers RADIUS certificate to the guest network.