Online Access Free HPE6-A81 Exam Questions

A customer has a Clear Pass cluster deployment with four servers, two servers at the data center and two servers at a large remote site connected over an SO-WAN solution. The customer would like to implement OnGuard. Guest Self-Registration, and 802.1 X authentication across their entire environment. During testing the customer is complaining that users connecting to an Instant Cluster Employee S5ID at the remote site, with the OnGuard Persistent Agent installed are randomly getting their health check missed.
What could be a possible cause of this behavior?

• A.The OnGuard Clients are automatically mapped to the Policy Manager Zone based on their IP range but an ACL on the switch could be blocking access.
• B.The Aruba-user-role received by the IAP is filtering the TCP port 6658 to the Clear Pass servers and after 10 seconds the SSL fallback gets activated and randomly generates the issue
• C.The ClearPass Policy Manager zones have been defined but the local IP subnets have not but properly mapped to the zones and the OnGuard Agent might connect to any of the servers in the cluster.
• D.The traffic on the TCP port 6658 is congested due to the fact that this port is also used by the IPSec keep-alive packets of the SO-WAN solution.

A customer is troubleshooting a user that has complained about randomly having issues connecting the network with EAP PEAP using the Corporate Laptop. The initial checks are showing a number of authentication failures but no sign of issues with the ClearPass server or AD.
What can the Customer do to monitor this user Authentication trend closely over the next few days?

• A.add to ClearPass Insight Dashboard the Authentication Status widget for this specific user
• B.configure a Report using Radius Failed Authentication template and schedule it to run every 5 mins
• C.add the user name in the Insight/Alert/Watchlitst and get the authentication failures notifications within 30 seconds
• D.configure an Alert using Failed Authentication template with Threshold 1. Interval 5 mins

A customer has acquired another company that has its own Active Directory infrastructure. The 802 1X PEAP authentication works with the customer's original Active Directory servers but the customer would like to authenticate users from the acquired company as well.
What steps are required, in regards to the Authentication Sources, in order to support this request? (Select two.)

• A.There is no need to join ClearPass to the new AD domain.
• B.Join the ClearPass server(s) to the new AD domain.
• C.Create a new Authentication Source, type Generic LDAP.
• D.Create a new Authentication Source, type Active Directory.
• E.Add the new AD server(s) as backup into the existing Authentication Source.

Refer to the exhibit.

Your customer has configured the 802.1 X service enforcement conditions with the Endpoint profiling dat a. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly What is the cause of the issue?

• A.The enforcement policy rules evaluation algorithm is not configured correctly.
• B.An additional authorization source should be configured for profiling to work.
• C.The enforcement policy conditions configured with profiling data are not correct
• D.The option, use cached roles and posture from previous sessions should be enabled.

Refer to the exhibit.

A customer with multiple Aruba Controllers has just installed a new certificate for "'.customerdomain.com- on all Aruba Controllers While testing the existing guest Self-Registration page the customer noticed that the logins are failing While troubleshooting they are finding no entries in the Event Viewer or Access Tracker for the tests Suspecting that the Aruba Controllers may not be properly posting the credentials from the guest browser, they open the NAS Vendor Settings for the Guest Self-Registration Page.

• A.Change the "Secure Login' field to "Use Vendor Default".
• B.Add PTR records on the DNS server for "securelogin arubanetworks.com".
• C.Change the 'IP Address field to" securelogin.customerdomain.com
• D.Change the "IP Address field to "captiveportal-login.customerdomain.com".