Free HP HPE6-A81 Exam Dumps Questions & Answers

What is used to validate the EAP Certificate? (Select two.)

• A.  Date
• B.  Common Name
• C.  SAN entries
• D.  Server Identity
• E.  Key usage

The customer has a 19.940 loT devices connected to the network and would like to use Allow All Mac Auth to authenticate the users and enforce the action based on the condition defined with the fingerprint details of the device. Which Authorization source would you use to decide the access of the devices?

• A.  Endpoint Database
• B.  Local User Database
• C.  Clear Pass Profiler Database
• D.  Guest Device Database

Refer to the exhibit.

You configured the Wired MAC - Auth service enforcement conditions with the Endpoint profiling data When mac-auth based clients connect to the network, ClearPass assigns Deny access profile. The customer has sent you the above screenshots How would you resolve the issue?

• A.  Create a new condition in last position with Type and operator as Tips:Role EQUALS [User Authenticated] with action as Allow access profile permitting any services and any ports to do profiling.
• B.  Create a new condition in first position with Type and operator as Authorization (Endpoint Repository]:Category NOT_EXISTS with action as Limited access profile allowing only DHCP service.
• C.  Change the Rules evaluation algorithm in the Enforcement policy of HPE ArubaOS Mac auth policy as "select all matches" and add the CoA action as HPE Bounce switch port in the profiler tab.
• D.  Create a new condition in the first position with Type and operator as Authorization [Endpoint Repository] Category NOT_EXISTS with action as Limited access profile and ArubaOS wireless terminate session

You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.
What happens when the client sends a DNS request to securelogin aruba networks com?

• A.  The controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.
• B.  Client does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.
• C.  The controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.
• D.  Address field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.

You have designed a ClearPass solution for an Information Technology Business Park with 50,377 concurrent sessions including the visitors. The deployment includes eight ClearPass servers handling RADIUS authentication. Guest Self-Registration. Onboard and OnGuard. CPPM1 is acting as Publisher. CPPM2 to CPPM8 are added as subscriber nodes CPPM4 is the designated Standby Publisher. Servers CPPM2 and CPPM3 will be handling the Guest and Onboard HTTPS traffic. On a few devices, Corporate users will perform username and password based authentication with Active Directory accounts and on few devices, they will be using private CA signed TLS certificates to do the authentication The customer has three Active Directories (AD1, AD2 and A03) part of Multi-Domain Forest. To provide authentication redundancy, the customer has configured multiple Virtual IP settings between ClearPass servers in a cluster.

On all the Network Access Devices (NAD), the primary authentication server is configured as the VIP IP address and the secondary authentication server rs configured as CPPM1 MGMT IP address Based on the information provided, which ClearPass nodes will you join to the AD domain

• A.  Join all the eight ClearPass servers to AD1, AD2 and AD3 domains.
• B.  Join CPPM2 to CPPM7 ClearPass servers to the AD root domain.
• C.  Join CPPM1. CPPM4 to CPPM8 to the AD1. AD2 and AD3 domains.
• D.  Join CPPM1. CPPM4 to CPPM7 servers to the AD root domain