HP HPE6-A82 問題集

質問 1：
What are benefits of using Network Device Groups in ClearPass? (Select two.)
A. A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group
B. Another way to add a customizable "attribute" field to reference when processing authentication requests
C. Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group
D. Can apply to both Network Access Devices (NADs) as wen as client machines as a way to filter authentication requests
E. Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to
正解：B,E

質問 2：
Refer to the exhibit.

A client is attempting to authenticate using their Windows account with a bad password if the Remote Lab AD server is down for maintenance, what win be the expected result?
A. ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed.
No further processing will occur.
B. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.
C. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and receive a result of Active Directory Authentication failed. No further processing will occur.
D. ClearPass receive a timeout attempt when trying the Remote Lab AD server first. No further processing will occur until the Remote Lab AD server is marked as "Down" by the Administrator.
正解：C

質問 3：
What happens when a client successfully authenticates but does not match any Enforcement Policy rules?
A. A RADIUS Accept is returned and the default Enforcement Profile is applied.
B. A RADIUS Accept is retuned, and the default rule is applied to the device.
C. A RADIUS reject is returned for the client.
D. A RADIUS Accept is returned with no Enforcement Profile applied
正解：A

質問 4：
Refer to the exhibit.

Which user authentication request will match the service rules of the Policy Service shown?
A. a wireless user connecting to any SSID on an Aruba Controller
B. a wireless user connecting to an Aruba IAP on the SSID "CORP"
C. a wireless user connection would fail because of miss-configured service rules
D. a wireless user connected to any SSID named "CORP"
正解：B

質問 5：
When using Guest Authentication with MAC Caching service template, which statements are true? (Select two.)
A. The guest authentication is provided better security than without using MAC caching
B. Which wireless SSID and wireless controller must be indicated when configuring the template
C. The endpoint status of the client will be treated as "known" the first time the client associates to the network
D. The guest authentication is provided better security than without using MAC caching
E. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term
正解：A,B

質問 6：
What is the benefit to installing a wild card certificate for captive portal authentication?
A. Guests no longer are required to validate certificates during captive portal.
B. Allows different certificates for each controller for increased security
C. Wild card certificates are provide greater security than normal certificates
D. Allows the single wild card certificate to be installed on all controllers in the environment
正解：D

質問 7：
Refer to the exhibit.

what will be the enforcement for the user "neil"?
A. Allow internet Only Access
B. Allow Full Access
C. Corp Secure Contractor
D. Secure Corp BYOD Access
正解：B