HPE6-A68 Aruba Certified ClearPass Professional (ACCP) V6.7 Questions and Answers

Registry keys

EAP TLS certificate validity

Client role check

Peer-to-peer application checks

Operating System version

If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD.

If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD.

If the user is not found in the local user repository a reject message is sent back to the NAD.

If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD.

If the user is not found in the local user repository a timeout message is sent back to the NAD.

The client is compliant. However, there is an update available to remediate the client to HEALTHY state.

The posture of the client is unknown.

The client is infected and is a threat to other systems in the network.

The client is out of compliance, but has HEALTHY state.

The client is out of compliance.

Enforcement Policy

Posture token derivation

Role Mapping

Endpoint Profiler

Chained simulation

Guest device fingerprinting

Guest endpoint health assessment

Sponsor based guest user access

Guest user self-registration for access

Guest personal device onboarding

to force the client to re-authenticate upon roaming to a new Controller

to apply firewall policies based on authentication credentials

to validate a host MAC address against a whitelist or a blacklist

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user’s session status

The private key is stored in the ClearPass server.

The private key is stored in the user device.

The private key for TLS client certificates is not created.

More bits in the private key will increase security.

More bits in the private key will reduce security.

It will be stored in the Publisher’s guest user repository and the Subscriber’s Onboard user repository.

It will be stored in the Publisher’s local user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository permanently, but only for 14 days in the Subscriber’s guest user repository,

It will be stored in both the Publisher’s guest user repository and the Subscriber’s guest user repository.

It will be stored in the Publisher’s guest user repository, but not the Subscriber’s.

10 ClearPass Guest licenses, 10 ClearPass Onguard licenses and 10 ClearPass Onboard licenses

25 ClearPass Profiler licenses

25 ClearPass Enterprise licenses

10 ClearPass Enterprise licenses

25 ClearPass Redundancy licenses

The email field will be visible to guest users when they access the web login page.

The visitor_company field will be visible to operators creating the account.

The visitor_company field will be visible to the guest users when they access the web login page.

The visitor_phone field will be visible to the guest users in the web login page.

The visitor_phone field will be visible to operators creating the account.

From the attributes configured in Active Directory

From the server derivation rule in the Aruba Controller server group for the client

From the Aruba Network Access Device

From the attributes configured in a Network Access Device

Through a role mapping policy

RestrictedACL

Remote Employee ACL

[Deny Access Profile]

EMPLOYEE_VLAN

HR VLAN

for forming the Web Login Page URL

for Administrators to access the PHP page, but not guests

for Administrators to reference the page only

for forming the Web Login Page URL where Administrators add guest users

for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.

The server and client will perform an HTTPS SSL certificate exchange.

The client will verify the server certificate against a trusted CA.

The client will send its private key to the server for verification.

The server will send its private key to the client for verification.

The client will send its certificate to the server for verification.