HPE6-A15: Aruba Certified ClearPass Professional 6.5

Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

to gather and send Aruba NAD information to ClearPass
to gather information about Aruba NADs for ClearPass
to send information via RADIUS packets to Aruba NADs
to send information via RADIUS packets to clients
to send CoA packets from ClearPass to the Aruba NAD

Correct answer: C

Refer to the exhibit.

Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?

to display a role name on the Self-registration receipt page
to send a firewall role back to the controller based on the Guest User’s Role ID
to assign Controller roles to guests
to assign three roles of [Contractor], [Guest] and [Employee] to every guest user
to create additional account roles for guest administrators to assign to guest accounts

Correct answer: C

A customer wants all guests who access a company’s guest network to have their accounts approved by the receptionist, before they are given access to the network.

How should the network administrator set this up in ClearPass? (Select two.)

Enable sponsor approval confirmation in Receipt actions.
Configure SMTP messaging in the Policy Manager.
Configure a MAC caching service in the Policy Manager.
Configure a MAC auth service in the Policy Manager.
Enable sponsor approval in the captive portal authentication profile on the NAD.

Correct answer: AD

Explanation:

A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access until a sponsor (could even be a central help desk) has approved the request. When the registration form is completed by the guest/user, an on screen message is displayed for the guest stating the account requires approval.Guests are disabled upon registration and need to wait on the receipt page for the confirmation until the login button gets enabled. D. Device Mac Authentication is designed for authenticating guest devices based on their MAC address. References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 94https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access until a sponsor (could even be a central help desk) has approved the request. When the registration form is completed by the guest/user, an on screen message is displayed for the guest stating the account requires approval.

Guests are disabled upon registration and need to wait on the receipt page for the confirmation until the login button gets enabled.

D. Device Mac Authentication is designed for authenticating guest devices based on their MAC address.

References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 94

https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf

Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.

What is the Address field value ‘securelogin.arubanetworks.com’ used for?

for ClearPass to send a TACACS+ request to the NAD
for appending to the Web Login URL, before the page name
for the client to POST the user credentials to the NAD
for ClearPass to send a RADIUS request to the NAD
for appending to the Web Login URL, after the page name.

Correct answer: C

Refer to the exhibit.

A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page.

Based on the MAC Caching service information shown, which statement about the guests’ MAC address is accurate?

It will be visible in the Guest User Repository with Unknown Status
It will be deleted from the Endpoint table.
It will be visible in the Guest User Repository with Known Status.
It will be visible in the Endpoints table with Known Status.
It will be visible in the Endpoints table with Unknown Status.

Correct answer: D

A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.

How should the service be set up in the Policy Manager for this network?

Guest User Repository and Active Directory server both as authentication sources
Active Directory server as the authentication source, and Guest User Repository as the authorization source
Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources
either the Guest User Repository or Active Directory server should be the single authentication source
Guest User Repository as the authentication source and the Active Directory server as the authorization source

Correct answer: A

Refer to the exhibit.

A user logged in to the Self-Service Portal as shown.

What do the traffic received and sent statistics present?

the total amount of the traffic the quest transmitted, as seen through RADIUS CoA packets from the client to ClearPass
the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass
the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass
the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass
the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.

Correct answer: B

Refer to the exhibit.

Based on the configuration of the create_user form shown, which statement accurately describes the status?

The email field will be visible to guest users when they access the web login page.
The visitor_company field will be visible to operators creating the account.
The visitor_company field will be visible to the guest users when they access the web login page.
The visitor_phone field will be visible to the guest users in the web login page.
The visitor_phone field will be visible to operators creating the account.

Correct answer: A

Explanation:

References: https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/expire-timezone-field-is-not-showing-up-on-the-create-user-form/ta-p/250230

Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

both Login and Welcome Page
Default Role
Welcome Page
Default Guest Role
Login Page

Correct answer: E

Explanation:

The Login page is the URL of the page that appears for the user logon. This can be set to any URL. The Welcome page is the URL of the page that appears after logon and before redirection to the web URL. This can be set to any URL. References: http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/Captive_Portal_Authentic.htm

The Login page is the URL of the page that appears for the user logon. This can be set to any URL.

The Welcome page is the URL of the page that appears after logon and before redirection to the web URL. This can be set to any URL.

References: http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Captive_Portal/Captive_Portal_Authentic.htm

A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.

What are the likely causes of this? (Select two.)

The ClearPass server has a trusted server certificate issued by Verisign.
The ClearPass server has an untrusted server certificate issued by the internal Microsoft Certificate server.
The ClearPass server does not recognize the client’s certificate.
The DNS server is not replying with an IP address for www.google.com.

Correct answer: BD

Explanation:

You would need a publicly signed certificate. References: http://community.arubanetworks.com/t5/Security/Clearpass-Guest-certificate-error-for-guest-visitors/td-p/221992

You would need a publicly signed certificate.

References: http://community.arubanetworks.com/t5/Security/Clearpass-Guest-certificate-error-for-guest-visitors/td-p/221992

Vendor:	HP
Exam Code:	HPE6-A15
Exam Name:	Aruba Certified ClearPass Professional 6.5
Date:	Nov 23, 2018
File Size:	6 MB

Download Aruba Certified ClearPass Professional 6.5.HPE6-A15.PracticeTest.2018-11-23.50q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown