HPE6-A68 Questions and Answers

The client used incorrect credentials to authenticate to the network.

ClearPass does not have a service enabled for MAC authentication.

The client MAC address is not present in the Endpoints table in the CrearPass database.

The RADIUS client on the Windows server failed to categorize the service correctly.

The client wireless profile is incorrectly setup.

Mobile device Management is the result of Onboarding.

Third party Mobile Device Management solutions can be integrated with ClearPass.

Mobile Device Management is the authentication that happens before Onboarding.

Mobile Device Management is an application container that is used to provision work applications.

Mobile Device Management is used to control device functions post-Onboarding.

Endpoints repository

Onboard Device repository

MDM repository

Guest User repository

Local User repository

after the user clicks the login button and after the NAD sends an authentication request

after the user self-registers but before the user logs in

after the user clicks the login button but before the NAD sends an authentication request

when a user is re-authenticating to the network

before the user self-registers

to force the client to re-authenticate upon roaming to a new Controller

to apply firewall policies based on authentication credentials

to validate a host MAC address against a whitelist or a blacklist

to authenticate users or devices before granting them access to a network

to transmit messages to the NAD/NAS to modify a user’s session status

Guest User Repository and Active Directory server both as authentication sources

Active Directory server as the authentication source, and Guest User Repository as the authorization source

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

Either the Guest User Repository or Active Directory server should be the single authentication source

Guest User Repository as the authentication source and the Active Directory server as the authorization source

The test verifies that a client with username test1 can authenticate using EAP-PEAP.

Role mapping simulation verifies if the remote lab AD has the ClearPass server certificate.

Role mapping simulation verifies that the client certificate is valid during EAP-TLS authentication.

The simulation test result shows the firewall roles assigned to the client by the Aruba Controller.

The roles assigned in the results tab are based on rules matched in the AD Role Mapping Policy.

The user will be able to log in and authenticate successfully but will then be immediate disconnected.

The user will be able to log in for the next 4.9. days, but then will no longer be able to log in.

The user will not be able to log in and authenticate.

The user will be able to log in and authenticate successfully, but will then get a quarantine role.

The user will not be able to access the Web Login page.

The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.

A new Virtual IP address should be created for each NAD.

Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.

The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

The server and client will perform an HTTPS SSL certificate exchange.

The client will verify the server certificate against a trusted CA.

The client will send its private key to the server for verification.

The server will send its private key to the client for verification.

The client will send its certificate to the server for verification.

Guest device fingerprinting

Guest endpoint health assessment

Sponsor based guest user access

Guest user self-registration for access

Guest personal device onboarding

for forming the Web Login Page URL

for Administrators to access the PHP page, but not guests

for Administrators to reference the page only

for forming the Web Login Page URL where Administrators add guest users

for informing the Web Login Page URL and the page name that guests must configure on their laptop wireless supplicant.