Online Access Free ACCP-v6.2 Exam Questions

A customer would like to deploy ClearPass with the following objectives: they have between 2000 to 3000 corporate users that need to authenticate daily using EAP-TLS. They want to allow for up to 1000 employee devices to be onboarded. They would also like to allow up to 100 different guest users each day to authenticate using the web login feature.
Which of the following best describes the license mix that they need to purchase?

• A.CP-HW-5k, 100 Onboard, 100 Guest.
• B.CP-HW-5k, 2500 Enterprise.
• C.CP-HW-5k, 1000 Enterprise.
• D.CP-HW-2k, 1000 Onboard, 100 Guest.
• E.CP-HW-500, 1000 Onboard, 100 Guest.

Below is a screenshot of a user logged in to the Self-Service Portal:

Notice the traffic received and traffic sent statistics. Which of the following is true?

• A.These show the total amount of traffic the guest transmitted, as seen through RADIUS accounting messages sent from the NAD to ClearPass.
• B.These show the total amount of traffic the guest transmitted after account expiration, as seen through RADIUS accounting messages sent from the NAD to ClearPass.
• C.These show the total amount of traffic the guest transmitted, as seen through RADIUS CoA packets from the NAD to ClearPass.
• D.These show the total amount of traffic the NAD transmitted to ClearPass, as seen through RADIUS accounting messages from the NAD to ClearPass.

Refer to the screen capture below:

Based on the Access Tracker output for the user shown above, which of the following statements is true?

• A.A Healthy Posture Token was sent to the Policy Manager.
• B.The Aruba Terminate Session enforcement profile is applied because the posture check failed.
• C.The authentication method used is EAP-PEAP.
• D.A RADIUS-Access-Accept message is sent back to the Network Access Device.
• E.A NAP agent was used to obtain the posture token for the user.

Refer to the following Authentication sources configuration:

Which of the following scenarios is true for the above configuration?

• A.If the user is not found in the local user repository and remotelab AD, a reject message is sent back to the NAD device.
• B.If the user is not found in the local user repository a timeout message is sent back to the NAD device.
• C.If the user is not found in the local user repository but is present in the remotelab AD, a reject message is sent back to the NAD device.
• D.If the user is not found in the remotelab AD but is present in the local user repository, a reject message is sent back to the NAD device.
• E.If the user is not found in the local user repository a reject message is sent back to the NAD device.

Which of the following information is NOT required while building a Policy Service for 802.1X authentication?

• A.Authentication Source used
• B.Posture Token of the client
• C.Network Access Device used
• D.Authentication Method used
• E.Profiling information of the client