HPE6-A77 무료 덤프문제 온라인 액세스

A customer has deployed an OnGuard Solution to all the corporate devices using a group policy rule to push the OnGuard Agents. The network administrator is complaining that some of the agents are communicating to the ClearPass server that is located in a DMZ, outside the firewall The network administrator wants all of the agents System Health Validation traffic to stay inside the Management subnets.
What can the ClearPass administrator do to move the traffic only to the ClearPass Management Ports?

• A.Select the correct OnGuard Agent installer, and use the one configured for Management Port for the clients.
• B.Filter TCP port 6658 on the firewall, forcing the OnGuard agent to use the ClearPass Management port.
• C.Configure a Policy Manager Zone mapping so the OnGuard agent will use the Management Port IP.
• D.Edit the agent.conf file being deployed to the clients to use the ClearPass Management Port for SHV updates.

Refer to the exhibit:

A customer has configured Onboard in a cluster. After the Primary server's failure, the BYOD devices fail to connect to the network. What would you do to troubleshoot?

• A.Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA)
• B.Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client
• C.Verify
  the OSCP URL under TLS authentication method is mapped to http://localhost/guestmdps_ocsp.php/2
• D.Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted

Refer to the exhibit:



Your customer configured a ClearPass server to process the Guest and Secure SSIDs broadcastingfrom both Aruba and Cisco WLAN controllers When an Employee connects to Aruba or Cisco secure SSID, the authentication hits the guest service causing the client to fail the connection to the network.
What change can be implemented to make both the secure and guest services created for Aruba and Cisco devices to work correctly?

• A.Disable HS-Guest User Authentication service and move HS-Guest MAC Authentication to seventh position.
• B.Move the HS-Guest User Authentication with MAC Caching service to the first position.
• C.Modify the service rule matching algorithm to ALLin HS-GuestUser Authentication service.
• D.Move the HS_Building Aruba 802.1x service to the second position in the service order.

While configuring a guest solution, the customer is requesting that guest user receive accessfor four hours from their first login.Which Guest Account Expiration would you select?

• A.expire_ postlogin
• B.expire_after
• C.do_expire
• D.expire_time

Refer to the exhibit:

A customer with multiple Aruba Controllers has just installed a new certificate for "*.customerdomain com" on all Aruba Controllers. While testing the existing guest Self-Registration page the customer noticed that the logins are failing. While troubleshooting they are finding no entries in the Event Viewer or Access Tracker for the tests. Suspecting that the Aruba Controllers may not be properly posting the credentials from the guest browser, they open the NAS Vendor Settings for the Guest Self-Registration Page. From the screen shown, how can you fix the errors?

• A.Change the "IP Address: field to" securelogin.customerdomain.com.
• B.Change the "IP Address field to "captiveportal-login.customerdomain.com".
• C.Add PTR records on the DNS server for "securelogin.arubanetworks.com".
• D.Change the "Secure Login:" field to "Use Vendor Default".