HP HPE6-A82 Aruba Certified ClearPass Associate Exam Exam Practice Test

When you want to match Active Directory attributes directly to an enforcement policy.

When you want to enable attributes as roles directly without combining multiple attributes

When you want to translate and combine Active Directory attributes into ClearPass roles.

When you want to match Active Directory attributes to a Aruba firewall role on a Aruba Network Access Device.

The guest authentication is provided better security than without using MAC caching

The guest authentication is provided better security than without using MAC caching

The endpoint status of the client will be treated as "known" the first time the client associates to the network

Which wireless SSID and wireless controller must be indicated when configuring the template

The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term

Using the "Import Accounts" under ClearPass Guest

Using the "Create Account" or "Create Multiple'' options under ClearPass Guest

Assigning the default role "Lobby Ambassador to a receptionist to then add the accounts

Using the "Sync Accounts'' under ClearPass Guest

importing accounts from Active Directory once ClearPass is added with Admin credentials

DHCP options 43 and 150

RADIUS to ClearPass

HTTPS to ClearPass

HTTPS to the Internet

DHCP address assignment

DNS resolution

A RADIUS Accept is returned and the default Enforcement Profile is applied.

A RADIUS reject is returned for the client.

A RADIUS Accept is retuned, and the default rule is applied to the device.

A RADIUS Accept is returned with no Enforcement Profile applied

This will allow conference employees to pre-load additional device information as guests arrive and

register.

This strategy effectively stops employees from putting their own corporate devices on the guest network.

This will enable additional information to be gathered about guests during the conference.

This allows guest users to create and manage their own login account.

D18912E1457D5D1DDCBD40AB3BF70D5D

This will allow employee personal devices to be Onboarded to the corporate network

The service will make the enforcement decision based upon the updated Posture regardless of caching

A posture change applied to an endpoint is going to be lost each time the client re-authenticates

Posturing win no longer be evaluated in determining the enforcement policy for current or future sessions.

Cached posture results are no longer stored by ClearPass but instead are saved to the endpoint of the client.

This removes the reliance on the known or unknown status for MAC authentication.

All clients with unknown endpoints will be granted guest access regardless of authorization

Client attempts will fail without an additional Authentication method applied.

All clients with known endpoints will be granted guest access regardless of authorization.

Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to

Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group

A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group

Another way to add a customizable "attribute" field to reference when processing authentication requests

Can apply to both Network Access Devices (NADs) as wen as client machines as a way to filter authentication requests