Online Access Free HPE6-A81 Exam Questions

Refer to the exhibit.

A customer has configured Onboard in a cluster with two nodes. All devices were onboarded in the network through node1 but those clients fail to authenticate through node2 with the error shown What steps would you suggest to make provisioning and authentication work across the entire cluster? (Select three)

• A.Configure the Network Settings in Onboard to trust the Policy Manager EAP certificate.
• B.Make sure that the EAP certificates on both nodes are issued by one common root Certificate Authority (CA).
• C.Have all of the BYOO clients disconnect and reconnect to the network.
• D.Configure the Onboard Root CA to trust the Policy Manager EAP certificate root.

You have configured a Guest SSIO with Captive-portaI Web Authentication and MAC authentication. The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?

• A.The client will fail to get the MAC Caching role and will be redirected to the captive portal login page
• B.The client will successfully pass the MAC authentication but still be redirected to captive portal page.
• C.The client will fail the MAC authentication and be denied access to the Guest SSIO.
• D.The client will successfully pass the mac authentication until the mac caching time expires.

A corporate Clear Pass Cluster with two servers located at a single site, has both Management and Data port IP addresses configured. The Management port IPs art in the DataCenter networks subnet, while the Data port IPs are in the DMZ. What is the difference between using one Virtual IP for the AAA traffic versus sending AAA requests to the physical IPs for each server' (Select two.)

• A.The Individual IPs can provide failover and load balancing.
• B.Using the one Virtual IP can provide failover.
• C.By using the Virtual IP, the failover wait time is faster than using individual server IPs.
• D.One Virtual IP can be used together with the individual server IPs for load balancing.
• E.The failover can be accomplished only by using Virtual IP

While configuring the service rule conditions which NAS-Port-Type value should be used to differentiate the service for wired and wireless authentication?

• A.Ethernet (5) and Wireless-802 11 (9)
• B.Ethernet (O)and W.reless-802 11 (1)
• C.Ethernet (19) and Wireless-802 11(18)
• D.Ethernet (15) and Wireless-802 II (19)

Under OnBoard Management and Control, which option will deny the user from re-enrolling one of his devices with Onboard?
View by Certificate >> Click on the device >> Delete certificate

• A.Manage Access >> Deny access to this device View by Certificate
• B.Click on the device >> Revoke certificate >> Revoke this client certificate
• C.Delete this client certificate View by Dev >> Click on the device
• D.View by Username >> Click on the user >> Delete Actions >> Delete all devices