HPE6-A77 by HP Valid Free Exam Practice Test

Question 1

You have configured a Guest SSID with Captive-portal Web Authentication and MAC authentication The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

A. The client will tail the MAC authentication and be denied access to the Guest SSID. B. The client will fail the MAC authentication and will be redirected to the Captive-portal login page. C. The client will successfully pass the MAC authentication but still be redirected to captive portal page. D. The client will successfully pass the mac authentication until the mac caching time expires.

Correct Answer: C

Question 2

Refer to the exhibit:

You have configured Onboard but me customer could not onboard one of his devices and has sent you the above screenshots. How could you resolve the issue?

A. Increase the maximum number ofdevices that all users can provision to 3. B. Increase the maximum number ofdevices allowed by the individual user account. C. Instruct the user to run the Quick connect application in Sponsor Mode. D. Instruct the user to delete the profile on one of their other BYOD devices.

Correct Answer: A

Question 3

Refer to the exhibit:

You are doing a ClearPass PoC at a customer site with a single Aruba Mobility Controller. The customer asked for a demonstration of a simple Web Login functionality. You used a service template to create the guest services. During testing, the usergets redirected back to the weblogin page with an Authentication failed message. The guest configurations on the Aruba Mobility Controller are configured correctly.
Why would the guest fail to authenticate successfully?

A. The username and/or password used for authentication is incorrect Re-enter the correct password on the weblogin page. B. The Unique-Device-Count does not allow any Client devices.Update the Enforcement policy condition:
Unique-Device-Count. C. The username used for authentication does not exist in the Guest User Database Create a new user and authenticate again. D. The authentication source mapped in the service is incorrect, it should be mapped as (Guest Device Repository] [Local SQL DB].

Correct Answer: D

Question 4

A customer has completed all the required configurations in the Windows server in order for Active Directory Certificate Services (ADCS) to sign Onboard device TLS certificates. The Onboard portal and the Onboard services are also configured. Testing shows that the Client certificates ate still signed by the Onboard Certificate Authority and not ADCS.
How can you help the customer with the situation?

A. Enable access to SCEP servers from the Certificate Authority to make ClearPass Onboard to use of the Active Directory Certificate Services (ADCS) web enrollment to sign the device TLS certificates. B. Educate the customer that, when integrating with Active Directory Certificate Services (ADCS) the Onboard CA will the same authority used for signing me final TLS certificate of the device. C. Configure
the identity certificate signer as Active Directory Certificate Services and enter the ADCS URL
http://ADCSVVeoEnrollmentServemostname/certsrv in the OnBoard Provisioning settings. D. Enable access to EST servers from the Certificate Authority to make ClearPass Onboard to use of the Active Directory Certificate Services (ADCS) web enrollment to sign the device TLS certificates.

Correct Answer: D

Question 5

Refer to the exhibit:

A customer with multiple Aruba Controllers has just installed a new certificate for "*.customerdomain com" on all Aruba Controllers. While testing the existing guest Self-Registration page the customer noticed that the logins are failing. While troubleshooting they are finding no entries in the Event Viewer or Access Tracker for the tests. Suspecting that the Aruba Controllers may not be properly posting the credentials from the guest browser, they open the NAS Vendor Settings for the Guest Self-Registration Page. From the screen shown, how can you fix the errors?

A. Add PTR records on the DNS server for "securelogin.arubanetworks.com". B. Change the "Secure Login:" field to "Use Vendor Default". C. Change the "IP Address field to "captiveportal-login.customerdomain.com". D. Change the "IP Address: field to" securelogin.customerdomain.com.

Correct Answer: B

Question 6

How does the RadSec improve the RADIUS message exchange? (Select two.)

A. It can be used on an unsecured network or the Internet. B. Only the NAD needs to trust the ClearPass Certificate. C. It builds a TTLS tunnel between the NAD and ClearPass. D. It encrypts the entire RADIUS message. E. It uses UDP to exchange the radius packets.

Correct Answer: D,E

HP Aruba Certified ClearPass Expert Written - HPE6-A77 Exam Practice Test