HPE6-A81 試験問題を無料オンラインアクセス

Refer to the exhibit.

You configured the Wired MAC - Auth service enforcement conditions with the Endpoint profiling data When mac-auth based clients connect to the network, ClearPass assigns Deny access profile. The customer has sent you the above screenshots How would you resolve the issue?

• A.Create a new condition in the first position with Type and operator as Authorization [Endpoint Repository] Category NOT_EXISTS with action as Limited access profile and ArubaOS wireless terminate session
• B.Change the Rules evaluation algorithm in the Enforcement policy of HPE ArubaOS Mac auth policy as "select all matches" and add the CoA action as HPE Bounce switch port in the profiler tab.
• C.Create a new condition in first position with Type and operator as Authorization (Endpoint Repository]:Category NOT_EXISTS with action as Limited access profile allowing only DHCP service.
• D.Create a new condition in last position with Type and operator as Tips:Role EQUALS [User Authenticated] with action as Allow access profile permitting any services and any ports to do profiling.

A customer is planning to implement machine and user authentication on infrastructure with one Aruba Controller and a single ClearPass Server. What should the customer consider while designing this solution? (Select three.)

• A.The customer does not need to worry about Multi-Master Catht Survivability because the Controller will also cache the machine state.
• B.The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.
• C.Machine Authentication only uses EAP TLS. as such a PKI infrastructure should be in place for machine authentication.
• D.Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication
• E.The Windows User must log off. restart or disconnect their machine to initiate a machine authentication before the cache expires.
• F.The machine authentication status rs written in the Multi-master cache on the ClearPass Server for 24 hrs

Under OnBoard Management and Control, which option will deny the user from re-enrolling one of his devices with Onboard?
View by Certificate >> Click on the device >> Delete certificate

• A.View by Username >> Click on the user >> Delete Actions >> Delete all devices
• B.Manage Access >> Deny access to this device View by Certificate
• C.Click on the device >> Revoke certificate >> Revoke this client certificate
• D.Delete this client certificate View by Dev >> Click on the device

You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.
What happens when the client sends a DNS request to securelogin aruba networks com?

• A.The controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.
• B.Address field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.
• C.Client does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.
• D.The controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.

Refer to the exhibit.

A customer has configured Onboard in a cluster. After the Primary server's failure, the BYOD devices fail to connect to the network. Which step below is the best starting point when troubleshooting'

• A.Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
• B.Verify the CPPM hostname in OSCP URL under TLS authentication method is updated to localhost instead of primary server's hostname.
• C.Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted.
• D.Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA).