HPE6-A77 試験問題を無料オンラインアクセス

Refer to the exhibit:


A customer has configured a service with the Onboard Devices Repository as an Authentication Source and an Active Directory Domain Server as an Authorization Source. What will happen if the client certificate is still valid and the user account associated with the certificate is disabled in Active Directory?

• A.Enforcement will apply the [Deny Access Profile]
• B.ClearPass will redirect the client to Onboard again
• C.ClearPass will block network access to the device
• D.ClearPass will not process the request
• E.ClearPass will allow the device to access the network.

A customer would like to allow only the AD users with the "Manager" title from the "HQ" location to Onboard their personal devices. Any other AD users should not be authorized to pass beyond the initial device provisioning page. Which Onboard service will you use to implement this requirement?

• A.Onboard Provisioning service
• B.Onboard Pre-Auth service
• C.Onboard Authorization service
• D.Onboard CP login service

A Customer has these requirements:
* 2.000 loT endpoints that use MAC authentication
* 6,000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication
* 1,000 guest endpoints at peak usage that use guest self-registration
* 1500 BYOD devices estimated as 3 devices per User (500 users)
* 2,500 endpoints that have OnGuard installed and connect on a daily basis What licenses should be installed to meet customer requirements?

• A.11,500 Access, 1,500 Onboard, 2.500 Onguard
• B.11,500 Access, 500 Onboard, 2,500 Onguard
• C.13.000 Access, 1.500 Onboard, 2,500 Onguard
• D.9,000 Access, 500 Onboard. 2.500 Onguard

A customer has configured Onboard with Single SSID provision for Aruba IAP Windows devices work as expected but cannot get the Apple iOS devices to work. The Apple iOS devices automatically get redirected to a blank page and do not get the Onboard portal page. What would you check to fix the issue?

• A.Verify if Onboard Pre-Provisioning enforcement profile sends the correct Aruba user role.
• B.Verify if the checkbox "Enable bypassing the Apple Captive Network Assistant" is checked.
• C.Verify if the external captive portal profile is enabled to use HTTPS with port 443.
• D.Verify if the Onboard URL is updated correctly in the external captive portal profile.

When is it recommendedto use a certificate with multiple entries on the Subject Alternative Name?

• A.The ClearPass server will be hosting captive portal pages for multiple FQDN entries
• B.The primary authentication server Is not available to authenticate the users.
• C.The ClearPass servers are placed in different OnGuard zones to allow the client agent to send SHV updates.
• D.Using the same certificate to Onboard clients and the Guest Captive Portal on a single ClearPass server.