HP HPE6-A77 問題集

質問 1：
Refer to the exhibit:




Your company has a postgres SQL database with the MAC addresses of the company-owned tablets You have configured a role mapping condition to tag the SQL devices. When one of the tablets connects to the network, it does not get the correct role and receives a deny access profile.
How would you resolve the issue?
A. Enable authorization tab in the service and add the SQL server as an authorization source.
B. Add the SQL server as an authentication source and map .t under the authentication tab in the service.
C. Edit the SQL authentication source niter attributes and modify the SQL server filter query.
D. Remove SQL condition from role mapping policy and add it under the enforcement policy conditions.
正解：C

質問 2：
Refer to the exhibit:

A customer has configured Onboard in a cluster. After the Primary server's failure, the BYOD devices fail to connect to the network. What would you do to troubleshoot?
A. Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted
B. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client
C. Verify
the OSCP URL under TLS authentication method is mapped to http://localhost/guestmdps_ocsp.php/2
D. Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA)
正解：A

質問 3：
Refer to the exhibit:

When creating a new report, there is an option to send report Notifications by Email. Where is the email server configured?
A. In the Insight Reports Interface under Administration on the sidebar menu.
B. In the ClearPass Policy Manager Messaging setup under Administration.
C. In the insight report on the next screen of the report definition.
D. In the ClearPass Policy Manager Endpoint Context servers under Administration.
正解：A

質問 4：
You are integrating a Postgres SQL server with the ClearPass Policy Manager What steps will you follow to complete the integration process? (Select three)
A. Alias Name under filter configuration must match one of the columns being requested from the database table.
B. Specify a new filter with filter queries to fetch authentication and authorization attributes.
C. Create a new Endpoint context server andadd the SQL server IP, credentilas and the database name.
D. Create a new authentication source and add the SQL server IP, credentials and the database name.
E. Click on the default filter name with pre-defined filter queries and check box to enable as role.
F. Attribute Name under filter configuration must match one of the columns being requested from the database table.
正解：B,C,D

質問 5：
A customer is planning to implement machine and user authentication on infrastructure with one Aruba Controller and a single ClearPass Server What should the customer consider while designing this solution?
(Select three.)
A. Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication.
B. The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.
C. The customer does not need to worry about Multi-Master Cache Survivability because the Controller will also cache the machine state.
D. The Windows User must log off, restart or disconnect their machine to initiate a machine authentication before the cache expires.
E. Machine Authentication only uses EAP TLS, as such a PKI infrastructure should be in place for machine authentication.
F. The machine authentication status is written in the Multi-master cache on the ClearPass Server for 24 hrs.
正解：A,E,F

質問 6：
A customer has acquired another company that has its own Active Directory infrastructure The 802 1X authentication works with the customers original Active Directory servers but the customer would like to authenticate users from the acquired company as well. What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)
A. Create a new Authentication Source, type Generic LDAP.
B. Add the new AD server(s) as backup into the existing Authentication Source.
C. Join the ClearPass server(s) to the new AD domain.
D. Create a new Authentication Source, type Active Directory.
E. There is no need to Join ClearPass to the new AD domain.
正解：C,E