Free HP HPE6-A77 Exam Dumps Questions & Answers

Where is the following information stored in ClearPass?
- Roles and Posture for Connected Clients - System Health for OnGuard - Machine authentication State - CoA session info - Mapping of connected clients to NAS/NAD

• A.insight database
• B.Endpoint database
• C.ClearPass system cache
• D.Multi-Master cache

A customer is complaining that some ofthe devices, in their manufacturing network, are not getting profiled while other loT devices from the same subnet have been correctly profiled. The network switches have been configured for DHCP IP helpers and IF-MAP has been configured on the Aruba Controllers. What can the customer do to discover those devices as well? (Select two.)

• A.Manually create a new device fingerprint for the devices that are not being profiled.
• B.Update the Fingerprints Dictionary to the latest in case new devices have been added.
• C.Add the ClearPass Server IP as an IP helper address on the default gateway as well.
• D.Open a TAC case to help you troubleshoot the DHCP device profile functionality.
• E.Allow time for IF-MAP service on the controller to discover the new devices as well.

You have Integrated ClearPass Onboard with Active Directory Certificate Services (ADCS) web enrollment to sign the Anal device TLS certificates The Onboard provisioning process completes successfully but when the user finally clicks connect, the user falls to connect to the network with an unknown_ca certificate error.
What steps will you follow to complete the requirement?

• A.Export the self-signed certificate from the ClearPass servers and manually add them as trusted certificates in clients
• B.Add the ADCS root certificate to both the CPPM Certificate trust list and to the Onboard Certificate Store trust list
• C.Make sure both the ClearPass servers have different certificates used for both SSL and RADIUS server identity.
• D.Make sure that the ClearPass servers are using the default self-signed certificates for both SSL and RADIUS server identity

What is the Secure SSID {otherwise referred to as Single SSID) OnBoard deployment service workflow?

• A.OnBoard Provisioning RADIUS service, OnBoard Authorization RADIUS service. OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service
• B.OnBoard Provisioning RADIUS service, OnBoard Authorization Application service, OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service
• C.OnBoard Provisioning RADIUS service, OnBoard Pre-Auth RADIUS service, OnBoard Authorization Application service. OnBoard Provisioning RADIUS service
• D.OnBoard Provisioning RADIUS service, OnBoard Pre-Auth Application service. OnBoard Authorization Application service, OnBoard Provisioning RADIUS service

Refer to the exhibit:



You are doing a ClearPass PoC at a customer site with a single Aruba Mobility Controller. The customer asked for a demonstration of a simple Web Login functionality. You used a service template to create the guest services. During testing, the usergets redirected back to the weblogin page with an Authentication failed message. The guest configurations on the Aruba Mobility Controller are configured correctly.
Why would the guest fail to authenticate successfully?

• A.The username and/or password used for authentication is incorrect Re-enter the correct password on the weblogin page.
• B.The authentication source mapped in the service is incorrect, it should be mapped as (Guest Device Repository] [Local SQL DB].
• C.The Unique-Device-Count does not allow any Client devices.Update the Enforcement policy condition:
  Unique-Device-Count.
• D.The username used for authentication does not exist in the Guest User Database Create a new user and authenticate again.