HPE6-A07 Practice Test Software

Author: Raul Mass

Question: 1

Which licenses are included in the built-in starter kit for ClearPass?

A. 10 ClearPass Guest licenses,10 ClearPass OnGuard licenses and 10 ClearPass Onboard licenses

B. 10 ClearPass Enterprise licenses

C. 25 ClearPass Policy Manager licenses

D. 25 ClearPass Profiler licenses

E. 25 ClearPass Enterprise licenses

Answer: E

Question: 2

What happens when a client successfully authenticates but does not match any Enforcement Policy rules?

A. no role is applied to the device

B. logon profile is applied to the device

C. default Enforcement profile is applied

D. guest rule is applied to the device

E. defaultrule is applied to the device

Answer: C

Explanation:

The first time a device connects, it's allowed on in a limited state (session timeout is a low value and DHCP is allowed) because it doesn't match any Enforcement policy rules based on Endpoint Category. The default enforcement profile is used.

Question: 3

When Active Directory is added as an authentication source, what should the format be for the Active Directory bin DN?

A. admin.domain.com

B. domain.com\admin

C. domain.com

D. admin@domain.com

E. admin\domain.com

Answer: D

Explanation:

For Active Directory, the bind DN can also be in the administrator@domain format (for example,administrator@acme.com).

Referencehttp://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserGuide/Auth/AuthSource_GenericLDAP.htm

Question: 4

Refer to the exhibit. A user has enabled ‘department’ and ‘memberOf’ as roles.

What is the direct effect of the user’s action?

A. The user’s authentication will be rejected if the user does not have an admin user group membership in AD.

B. The user’s memberOf attribute is sent back to the controller as a firewall role.

C. The user’s department and group membership will be seen in the Access tracker roles section.

D. The user’s authentication will be rejected if the user does nothave a department attribute in AD.

E. The user’s department is sent back to the controller as a firewall role.

Answer: A