Question 1

A customer is setting up Guest access with ClearPass. They are considering using 802.1X for both the Employee network and the Guest network. What are two issues the customer may encounter when deploying 802.1X with the Guest network? (Choose two.)

Accepted Answer

802.1X is complex for transient guest users to maintain and join, making it unsuitable for guest networks.

Question 2

Sponsorship has been enabled on the guest network. A guest user connects and completes the self-registration form indicating a valid sponsor. The guest then clicks submit . What is the current state of the guest account?

Accepted Answer

The guest account is created in disabled state, the "Log In" button will appear only after the sponsor approval process is completed.

Question 3

What is true regarding Posturing and Profiling?

Accepted Answer

D

Question 4

What are "known" endpoints in ClearPass?

Accepted Answer

The answer of What are "known" endpoints in ClearPass?
...

Question 5

Which statement is true about OnGuard? (Choose two.)

Accepted Answer

OnGuard is a component of network access control solutions that ensures security compliance by checking if Antivirus/Antispyware programs are running and supports both Windows and Mac OS X clients.

Question 6

When ClearPass is communicating with external context servers, which connection protocol is typically used?

Accepted Answer

The answer of When ClearPass is communicating with external context...

Question 7

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

Accepted Answer

This removes the reliance on the known or unknown status for MAC authentication.

Question 8

An organization has configured guest self-registration with internal sponsorship. Which options can be configured to send guest users their credentials outside of the initial login web-page? (Choose two.)

Accepted Answer

The answer of An organization has configured guest self-registration with...

Question 9

Refer to the exhibit.  When creating a new ClearPass Service, the [Time Source] has been added as an authorization source. What time source is ClearPass referencing?

Accepted Answer

The answer of Refer to the exhibit.  When creating...

Question 10

Refer to the exhibit.  A user connects to an Aruba Access Point wireless SSID named "Secure-Corporate" and performs an 802.1X authentication with ClearPass as the authentication server. Based on this service configuration, which service will be triggered?

Accepted Answer

The answer of Refer to the exhibit.  A user...

Question 11

Refer to the exhibit.  What does Search Base Dn do when joining an Active Directory domain? (Choose two.)

Accepted Answer

The answer of Refer to the exhibit.  What does...

Question 12

Refer to the exhibit.  Which user authentication request will match the service rules of the Policy Service shown?

Accepted Answer

The answer of Refer to the exhibit.  Which user...

Question 13

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

Accepted Answer

The answer of When should a role mapping policy be...

Question 14

A customer with 677 employees would like to authenticate employees using a captive portal guest web login page. Employees should use their AD credentials to login on this page. Which statement is true?

Accepted Answer

The customer needs to add the AD server as an authentication source in a guest service to authenticate employees using their AD credentials on the captive portal guest web login page.

Question 15

Which option supports DHCP profiling for devices in a network?

Accepted Answer

The answer of Which option supports DHCP profiling for devices...

Question 16

Refer to the exhibit.  Where will the guests browser be redirected during a captive portal login attempt?

Accepted Answer

The answer of Refer to the exhibit.  Where will...

Question 17

What happens when a client successfully authenticates but does not match any Enforcement Policy rules?

Accepted Answer

A RADIUS Accept is returned, and the default Enforcement Profile is applied.

Question 18

What is RADIUS Change of Authorization (CoA)?

Accepted Answer

RADIUS Change of Authorization (CoA) allows ClearPass to send messages to the NAD/NAS to change a user's session status, such as disconnecting a session or changing the user's access level.

Question 19

What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

Accepted Answer

The Cache Timeout setting is intended to reduce traffic by caching attributes, not credentials, between ClearPass and the Active Directory server.

Question 20

Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?

Accepted Answer

When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information.

Exam 22: HPE Sales Certified - Aruba Products and Solutions