Online Access Free HPE6-A77 Exam Questions

You have recently implemented a serf-registration portal in ClearPass Guest to be used on a Guest SSID broadcast from an Aruba controller. Your customer has started complaining that the users are not able to reliably access the internet after clicking the login button on the receipt page. They tell you that the users willclick the login button multiple times and alter about a minute they gain access.
What could be causing this issue?

• A.The guest client is delayed getting an IP address from the DHCP server.
• B.The enforcement profile on ClearPass is set up with an lETF:session delay.
• C.The self-registration page is configured with a 1 minute login delay.
• D.The guest users are assigned a firewall user role that has a rate limit.

Refer to the exhibit:


You configuring an 802 1x service endpoint profiling. When the client connects to the network, ClearPass successfully profiles the client and sends Radius Change of Authorization (RCoA) but Radius Change of Authorization {RCoA) fails for the client You manually clicked on the Change Status button in the access tracker to force an RCoA but that failed too.
What must you check to ensure that the RCoA will work? (Select two.)

• A.RFC 3576 server should be mapped in the server group on the Aruba Controller
• B.RFC 3576 option is enabled for Aruba Controller under Network devicein ClearPass.
• C.RFC 3576 server IPs and the Authentication server IPs should be same in the AAA profile
• D.The RFC 3576 shared secret on ClearPass should match the Authentication Server shared secret

Refer to the exhibit:





You have configured Onboard andcannot get it working The customer has sentyouthe above screenshots How would you resolve the issue?

• A.Install a public signed server authentication certificate on the ClearPass server for EAP
• B.Copy the [EAP-TLS with OSCP Enabled] authentication method and set the correct OCSP URL
• C.Reconnect the client and select the correct certificate when prompted
• D.Re-provision the client by running the QuickConnect application as Administrator

When is it recommendedto use a certificate with multiple entries on the Subject Alternative Name?

• A.The primary authentication server Is not available to authenticate the users.
• B.The ClearPass server will be hosting captive portal pages for multiple FQDN entries
• C.Using the same certificate to Onboard clients and the Guest Captive Portal on a single ClearPass server.
• D.The ClearPass servers are placed in different OnGuard zones to allow the client agent to send SHV updates.

You have configured a Guest SSID with Captive-portal Web Authentication and MAC authentication The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

• A.The client will successfully pass the mac authentication until the mac caching time expires.
• B.The client will successfully pass the MAC authentication but still be redirected to captive portal page.
• C.The client will tail the MAC authentication and be denied access to the Guest SSID.
• D.The client will fail the MAC authentication and will be redirected to the Captive-portal login page.