Free Aruba Certified ClearPass Expert Written Exam HPE6-A81 Exam Practice Test

You art deploying Cleat Pass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers. The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.What is the most efficient way to configure the customer's guest solution? (Select two.)

• Install the same public certificate on all Controllers with the common name 'controller.{company domain)
  
• Build multiple Web Login pages with vendor settings configured for each controller
  
• Build one Web Login page with vendor settings for captiveportal-controller (company domain)
  
• Build one Web Login page with vendor settings for controller (company domain)
  
• Install multiple public certificates with a different Common Name on each controller
  

A corporate Clear Pass Cluster with two servers located at a single site, has both Management and Data port IP addresses configured. The Management port IPs art in the DataCenter networks subnet, while the Data port IPs are in the DMZ. What is the difference between using one Virtual IP for the AAA traffic versus sending AAA requests to the physical IPs for each server' (Select two.)

• Using the one Virtual IP can provide failover.
  
• One Virtual IP can be used together with the individual server IPs for load balancing.
  
• By using the Virtual IP, the failover wait time is faster than using individual server IPs.
  
• The failover can be accomplished only by using Virtual IP
  
• The Individual IPs can provide failover and load balancing.
  

The customer has a 19.940 loT devices connected to the network and would like to use Allow All Mac Auth to authenticate the users and enforce the action based on the condition defined with the fingerprint details of the device. Which Authorization source would you use to decide the access of the devices?

• Clear Pass Profiler Database
  
• Endpoint Database
  
• Local User Database
  
• Guest Device Database
  

The customer would like to add a default common self-registration sponsor email under the initial value on all the ten self-registration pages created for different locations except for the guest registration page created for Sunnyvale location to use a different sponsor email in initial value. Under self-registration form fields, you have 'Edit' and 'Edit Base Field'Which edit options will you choose to make minimal configuration changes to implement the customer's requirement? (Select two)

• Update the common sponsor email by clicking the 'Edit' option of the sponsor email form field on the one of the self-registration register form page
  
• Update the sponsor email by clicking on both 'Edit' and 'Edit Base Field' options of the sponsor_email filed on the Sunnyvale register page
  
• Update the specific sponsor email by clicking on 'Edit Base Field' option of the sponsor_email form filed on the Sunnyvale location register form page
  
• Update the common sponsor email by clicking the 'Edit Base Field' option of the sponsor_email form field on the one of the self-registration form page
  
• Update the specific sponsor email by clicking on the 'Edit' option of the sponsor_email form filed on the Sunnyvale self-registration register form page
  

A customer is troubleshooting a user that has complained about randomly having issues connecting the network with EAP PEAP using the Corporate Laptop. The initial checks are showing a number of authentication failures but no sign of issues with the ClearPass server or AD.What can the Customer do to monitor this user Authentication trend closely over the next few days?

• configure a Report using Radius Failed Authentication template and schedule it to run every 5 mins
  
• configure an Alert using Failed Authentication template with Threshold 1. Interval 5 mins
  
• add the user name in the Insight/Alert/Watchlitst and get the authentication failures notifications within 30 seconds
  
• add to ClearPass Insight Dashboard the Authentication Status widget for this specific user
  

Your customer has read about a feature in OnGuard for OnGuard Persistent Agent and Agentless OnGuard that can display a new Posture Results web page to notify that and users with posture results for unhealthy clients after the health check is done. Where do you configure this option?

• Policy Manager > Configuration > Enforcement > Profiles > Add a new profiles with Agent Enforcement as the template, and on the Attributes tab add the new Show Posture Results in Guest Page attribute and set the value for the attribute to true.
  
• Policy Manager > Configuration > Enforcement > Profiles > Add new profile with Aruba Radius Enforcement as the template, and on the Attributes tab add the Aruba-User-Role configured with the captive portal profile mapped with default Posture Check web page URL.
  
• Policy Manager > Configuration > Services > Edit the Web-base Health Check Only service, and on the posture tab under Remediation URL add the default Quarantined Blocked web page URL and complete the service configuration by hitting save.
  
• Policy Manager > Configuration > Services > Edit the Web-base Health Check Only service, and on the posture tab enable the checkbox for the new option Show Posture Results in Guest Page and complete the service configuration by hitting save.
  

What configuration steps should you follow to add terms and conditions page on Guest seIf-registration for CPPM? (Select two).

• Edit the creetoraccepiterms form field in register page and change HTML section by pointing the hyperlink to the HTML file uploaded
  
• Edit the accept_terms form field in receipt page and change HTML section by pointing the hyper link to the HTML file uploaded m Guest Manager
  
• Create an HTML page with custom terms and condition and upload it to public files under Clearpass Guest -> configuration -> content manager
  
• Edit the creatoracceprterms form field in receipt page and change HTML section by pointing the hyperlink to the HTML file uploaded
  
• Create an HTML page with custom terms and condition and upload it to private files under Clearpass Guest -> configuration -> content manager
  

What is used to validate the EAP Certificate? (Select two.)

• Key usage
  
• Date
  
• Server Identity
  
• SAN entries
  
• Common Name
  

What is the Secure SSIO (otherwise referred to as Single SSID) OnBoard deployment service workflow?

• Onboard Provisioning RADIUS service, Onboard Authorization Application service, Onboard Pre-Auth Application service. Onboard Provisioning RADIUS service Onboard B. Provisioning RADIUS service,
  
• Onboard Authorization RADIUS service. Onboard Pre-Auth Application service. Onboard Provisioning RADIUS service Onboard C. C. Provisioning RADIUS service. Onboard Prt-Auth Application service.
  
• Onboard Authorization Application service. Onboard Provisioning RADIUS service Onboard
  
• Provisioning RADIUS service. Onboard Pre-Auth RADIUS service. Onboard Authorization Application service. Onboard Provisioning RADIUS service.
  

Which statements are true about that integration between ClearPass Policy Manager and ClearPass Device Insight? (Select two)

• Policy Manager stops using ClearPass Profiler for fingerprinting and uses Device Insight Analyzer instead for endpoint in-depth data analysis.
  
• ClearPass Device Insight updates ClearPass Policy Manager every 60 minutes if it detects a change in device classification like device spoofing.
  
• To provide enhanced profiling and reporting. additional configuration is required to transmit data in both directions between CPPM and Device Insight.
  
• When Device Insight integration mode is enabled. you can still use Update Fingerprint button to Update Endpoints at Configuration > Identity > Endpoints
  
• An attribute named Device Insight Tags art added to the Endpoints that art available to use in service, role-mapping, and enforcement policy Rules