HPE6-A68 Aruba Certified ClearPass Professional (ACCP) 6.7 Question and Answers

Deny Access Profile

Onboard Device Repository

Cannot be determined

Onboard Post-Provisioning – Aruba

Onboard Pre-Provisioning – Aruba

Deny Access

Employee VLAN

Internet VLAN

Full Access VLAN

Post-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

Pre-Onboarding, the device will be redirected to the ‘Onboarding Page’ Captive Portal.

The BYOD-Provision role is a ClearPass internal role and exists in ClearPass.

The device will not be redirected to any Onboarding page.

Pre-Onboarding, the device will be assigned the BYOD-Provision firewall role in the Aruba Controller.

Guest User Repository and Active Directory server both as authentication sources

Active Directory server as the authentication source, and Guest User Repository as the authorization source

Guest User Repository as the authentication source, and Guest User Repository and Active Directory server as authorization sources

Either the Guest User Repository or Active Directory server should be the single authentication source

Guest User Repository as the authentication source and the Active Directory server as the authorization source

Static IP addresses are only allowed on the management port.

Configuration of the data port is mandatory.

Configuration on the management port is mandatory.

Configuration of the data port if optional.

Configuration of the management port is optional.

Linux laptop

Mac OS X device

Apple iOS device

Windows laptop

Android device

Enable sponsor approval confirmation in Receipt actions.

Configure SMTP messaging in the Policy Manager.

Configure a MAC caching service in the Policy Manager.

Configure a MAC auth service in the Policy Manager.

Enable sponsor approval in the captive portal authentication profile on the NAD.

to enforce role based access control for Aruba Controllers

to enforce role based access control for ClearPass Policy Manager admin users

to enforce role based access control for ClearPass Guest Admin users

to assign ClearPass roles to guest users

to map AD attributes to admin privilege levels in ClearPass Guest

WIRELESS_GUEST_NETWORK

WIRELESS_CAPTIVE_NETWORK

WIRELESS_HANDHELD_NETWORK

Deny Access

WIRELESS_EMPLOYEE_NETWORK

After the RADIUS Access-Request

After the NAS login, but before the RADIUS Access-Request

Before the user can submit the registration form

After the RADIUS Access-Response

After the receipt page is displayed, before the NAS login

to send information via RADIUS packets to Aruba NADs

to gather and send Aruba NAD information to ClearPass

to send information via RADIUS packets to clients

to gather information about Aruba NADs for ClearPass

to send CoA packets from ClearPass to the Aruba NAD

It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user’s session after 600 seconds.

It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user’s session will be terminated after 600 seconds.

It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user’s session after this time is up.

It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user’s session after this time is up.

It will send the session –Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user’s session after 600 seconds.

when a VLAN must be assigned to a wired user on an Aruba Mobility Controller

when a VLAN must be assigned to a wireless user on an Aruba Mobility Controller

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS return attributes

when a VLAN must be assigned to a wired user on an Aruba Mobility Access Switch

when a VLAN must be assigned to a wired user on a third party wired switch that does not support RADIUS accounting

RADIUS CoA

Quarantine VLAN

Full Access VLAN

RADIUS Accept

RADIUS Reject