Free Aruba Certified ClearPass Associate Exam HPE6-A82 Exam Practice Test

When joining ClearPass to an Active Directory (AD) domain, what information is required? (Select two.)

• ClearPass Policy Manager (CPPM) enterprise credentials.
  
• Domain Administrator credentials with at least read access
  
• Domain User credentials with read-write access
  
• Cache Timeout value set to at least 10 hours
  
• Fully Qualified Domain Name (FQDN) of the AD Domain Controller.
  

Which authentication method requires a client certificate?

• PEAP
  
• Guest serf-registration
  
• EAP-TLS
  
• MAC Authentication
  

When is it appropriate to use the built-in Local user database in ClearPass?

• In small-business environments where the user accounts rarely change and new accounts are uncommon.
  
• In a hospitality deployment for guest accounts created and managed by start
  
• In a public-facing guest network environment where the guests are prompted to self-register
  
• In a large campus environment where Students and Contractors account for 35.000 entries that change weekly
  

Which fingerprint collectors can help to distinguish between an iPhone and an iPad? (Select two.)

• IF-MAP
  
• MAC OUI
  
• HTTP
  
• TCP header capture
  
• SNMP
  

Which option support DHCP profiling for devices in a network?

• enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass
  
• enabling the DHCP server to profile endpoints and forward meta-data to ClearPass
  
• DHCP profiling is enabled on ClearPass by default configuration of the network access devices is not necessary
  
• configuring ClearPass as a DHCP relay for the client
  

Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?

• Because DHCP fingerprinted is a Layer-3 function, it cannot t>e used with an 802 1X authentication service.
  
• The client needs to be granted limited access before the enforcement policy can take into account the device type
  
• When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information
  
• The client needs to connect to an open network first to be profiled, then shifted to the secure 802.1x network.
  

What are 'Known' endpoints in ClearPass?

• These are endpoints whose beacons have been detected but have never completed authentication
  
• The label 'Known' indicates rogue endpoints labeled as 'friendly' or 'ignore'
  
• 'Known' endpoints have be fingerprinted to determine their operating system and manufacturer.
  
• 'Known' endpoints can be authenticated based on MAC address to bypass the captive portal login.
  

An organization with 345 employees wants to have the guest create their own accounts for access to the public WLAN. and when guests reconnect they do not want the guest to have to tog in againWhich ClearPass features can be used to meet these requirements?

• ClearPass Onboard Portal
  
• Guest access with MAC caching
  
• Guest serf-registration with sponsor approval
  
• Enforcement based on endpoint profiling
  

What are two ways to add guest accounts to ClearPass? (Select two.)

• Using the 'Import Accounts' under ClearPass Guest
  
• Using the 'Create Account' or 'Create Multiple'' options under ClearPass Guest
  
• Assigning the default role 'Lobby Ambassador to a receptionist to then add the accounts
  
• Using the 'Sync Accounts'' under ClearPass Guest
  
• importing accounts from Active Directory once ClearPass is added with Admin credentials
  

When using Guest Authentication with MAC Caching service template, which statements are true? (Select two.)

• The guest authentication is provided better security than without using MAC caching
  
• The guest authentication is provided better security than without using MAC caching
  
• The endpoint status of the client will be treated as 'known' the first time the client associates to the network
  
• Which wireless SSID and wireless controller must be indicated when configuring the template
  
• The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term