HPE6-A07: Aruba Certified ClearPass Associate 6.5

Which statement most accurately describes how users with Active Directory credentials authenticate with ClearPass when Active Directory is used as an authentication source for an 802.1x service in ClearPass?

A Kerberos request is sent from the Network Access Device to ClearPass which initiates a RADUIS request to the AD server.
A RADIUS request is sent from the Network Access Device to the AD server which communicates with ClearPass.
An LDAP request is sent from the Network Access Device to the AD server which communicates with ClearPass.
An LDAP request is sent from the Network Access Device to ClearPass which initiates a RADIUS request to the AD server.
A RADIUS request is sent from the Network Access Device to the ClearPass which communicates with the AD server.

Correct answer: C

Explanation:

Reference http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/3%20Active%20Directory/AD_auth_source_adding.htm

Refer to the exhibit. Based on the information shown, why did the Joining AD fail?

the GSS is wrong
the wrong FQDN of the AD was entered while joining
the wrong domain name was selected while joining the AD
there is a clock difference between ClearPass and AD servers
there is an IP communication issue

Correct answer: D

Which most accurately describes the First Applicable rule evaluation algorithm in Enforcement Policies?

Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.
All rules are checked and if there is no match, no Enforcement profile is applied.
Each rule is checked and once a match is found, the Enforcement profile assigned to that rule is applied. along with the default Enforcement profile.
All rules are checked for any matching rules and their respective Enforcement profiles are applied.

Correct answer: D

What is the purpose of using a role mapping policy in an 802.1x service with Active Directory as the authentication source?

to translate and combine AD attributes into ClearPass roles
to send roles from ClearPass to the AD user to update a user’s group membership
to enable attributes as roles directly without needing role mapping rules
to send Aruba firewall roles back to the Aruba Network Access Device
to send details of a user’s connection to the AD user to store in its database

Correct answer: B

What is the purpose of a guest self-registration page in ClearPass?

to allow employees to get their own devices securely connected to the network
to allow contractors to create their own accounts in Active Directory
to allow employees’ sponsors to create accounts for their guests
to allow employees to easily get their corporate devices on the network
to allow guest users to create a login account for the web login page

Correct answer: B

Explanation:

Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access Reference http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/CustomizingSelfProvisionedAccess.htm

Guest self-registration allows an administrator to customize the process for guests to create their own visitor accounts. Self-registration is also referred to as self-provisioned access

Reference http://www.arubanetworks.com/techdocs/ClearPass/6.6/Guest/Content/Configuration/CustomizingSelfProvisionedAccess.htm

What is the purpose of the pre-auth check during guest authentication?

for the NAD device to do an internal authentication check before sending the credentials to ClearPass
for the NAD device to check that ClearPass is active before sending it the RADIUS request
for ClearPass to do an internal authentication check before the NAS login happens
for the client device to do an internal sanity check before the NAS login occurs
for the client device to check that ClearPass is active before sending it the credentials

Correct answer: C

Explanation:

The way NAS devices like wireless controllers do authentication on external captive portals only allows standard reject message handling like "authentication failed". The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in. It is to do an end run around limited error handing of NAS devices on external captive portals. Reference https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254

The way NAS devices like wireless controllers do authentication on external captive portals only allows standard reject message handling like "authentication failed". The pre auth check allows CPPM to provide advanced error handling of a reject like "your time limit has been reached" before a user logs in. It is to do an end run around limited error handing of NAS devices on external captive portals.

Reference https://community.arubanetworks.com/t5/Security/why-use-pre-auth-check/m-p/93254

Where is the web login page created in the ClearPass UI?

WebAuth Service
Captive Portal Profile
ClearPass Policy Manager
Guest Login Service
ClearPass Guest

Correct answer: E

Which actions are necessary to set up a ClearPass guest captive portal web login page to authenticate guest users? (Select three.)

Configure the guest pre-authentication role on ClearPass.
Select the user login checkbox in ClearPass Guest.
Create a web login page in ClearPass Guest.
Create Guest Service in ClearPass policy Manager.
Redirect Aruba Controller URL to ClearPass server web login page.

Correct answer: ABD

Explanation:

Reference https://community.arubanetworks.com/t5/Aruba-Solution-Exchange/IAP-ClearPass-Guest-Captive-Portal/ta-p/202675

Which device uses the Quick Connect method of Onboarding? (Select two.)

iPad
iPhone
Windows
blackberry
Android

Correct answer: CE

Explanation:

Reference http://www.primecominc.com/wp-content/uploads/2015/11/Conquering-todays-BYOD-challanges-whitepaper.pdf (page 7)

ClearPass Onboard uses which type of WLAN security once the user has authenticated and onboarded the client?

EAP-PEAP
EAP-RADIUS
SSL
EAP-LEAP
EAP-TLS

Correct answer: E

Vendor:	HP
Exam Code:	HPE6-A07
Exam Name:	Aruba Certified ClearPass Associate 6.5
Date:	Jul 01, 2018
File Size:	2 MB

Download Aruba Certified ClearPass Associate 6.5.HPE6-A07.TestKing.2018-07-01.25q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown