HPE6-A81 試験問題を無料オンラインアクセス

A customer has deployed an OnGuard Solution to all the corporate devices using a group policy result to push the OnGuard Agtnts. The network administrator is complaining that soma of the agents are communicating to the ClearPass server that is located in a DMZ. outside the firewall The network administrator wants all of the agents System Health Validation traffic to stay inside the Management subnets.
What can the ClearPass administrator do to move the traffic only to the ClearPass Management Ports?

• A.Edit the agent.conf file being deployed to the clients to use the ClearPass Management Port for SHV updates
• B.Filter TCP port 6658 on the firewall, forcing the OnGuard agent to use the ClearPass Management port.
• C.Select the correct OnGuard Agent installer, and use the one configured for Management Port for the clients.
• D.Configure a Policy Manager Zone mapping so the OnGuard agent will use the Management Port IP.

Your customer has recently implemented a seIf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller Your customer has started complaining that the users are not able to reliably access the Internet after clicking the login button on the receipt page They tell you that the users will click the login button multiple times and after about a minute they gam access.
What could be causing this issue?

• A.The guest users are assigned multiple DNS servers delaying DNS response.
• B.The enforcement profile on ClearPass is set up with an IETF:session delay.
• C.The self-registration page is configured with a 1 minute login delay.
• D.The guest users are assigned a firewall user role that has a rate limit.

There is an Aruba Controller configured to stand Guest AAA requests to ClearPass If the customer would likt tht most effective way to ensure the lowest license usage counts, how should the controller be configured?

• A.Configure EAP Termination on the Aruba Controller and the client will send a stop message.
• B.Aruba Controller will send stop messages if RADIUS Accounting Server Group is defined in the authentication profile.
• C.Aruba Controller will send stop messages only if EAP termination and Interim accounting are enabled.
• D.Aruba Controller will send stop messages only if both accounting and Interim accounting are enabled.

Refer to the exhibit.

Your customer has configured the 802.1 X service enforcement conditions with the Endpoint profiling dat a. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly What is the cause of the issue?

• A.An additional authorization source should be configured for profiling to work.
• B.The enforcement policy conditions configured with profiling data are not correct
• C.The enforcement policy rules evaluation algorithm is not configured correctly.
• D.The option, use cached roles and posture from previous sessions should be enabled.

You have configured a Guest SSIO with Captive-portaI Web Authentication and MAC authentication. The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

• A.The client will fail the MAC authentication and be denied access to the Guest SSIO.
• B.The client will fail to get the MAC Caching role and will be redirected to the captive portal login page
• C.The client will successfully pass the MAC authentication but still be redirected to captive portal page.
• D.The client will successfully pass the mac authentication until the mac caching time expires.