HPE6-A82 Practice Test

A customer is setting up Guest access with ClearPass. They are considering using 802.1X
for both the Employee network and the Guest network. What are two issues the customer
may encounter when deploying 802 1X with the Guest network? (Select two)

A.

the lack of encryption during the authentication process

B.

ClearPass win not be able to enforce individual Access Control policies.

C.

the high level of complexity for users to join the guest network

D.

Guests will not be able to be uniquely identified.

E.

difficult to maintain in an environment with a large number of transient guest users

What is an effect of the Cache Timeout setting on the authentication source settings for
Active Directory?

A.

ClearPass will validate the user credentials, then, for the duration of the cache.
ClearPass will just fetch account attributes.

B.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and
the A/D server by caching the credentials

C.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and
the A/D server by caching the attributes.

D.

ClearPass will validate the user credentials on the first attempt, then will always fetch
the account attributes

Refer to the exhibit.

What is true regarding leaving the indicated option "Use cached Roles and Posture
attributes from previous sessions" unchecked?

A.

The service will make the enforcement decision based upon the updated Posture
regardless of caching

B.

A posture change applied to an endpoint is going to be lost each time the client reauthenticates

C.

Posturing win no longer be evaluated in determining the enforcement policy for current
or future sessions.

D.

Cached posture results are no longer stored by ClearPass but instead are saved to the
endpoint of the client

Your boss suggests configuring a guest self-registration page in ClearPass for an
upcoming conference event. What are the benefits of using guest serf-registration'? (Select
two)

A.

This strategy effectively stops employees from putting their own corporate devices on
the guest network.

B.

This will enable additional information to be gathered about guests during the
conference.

C.

This allows guest users to create and manage their own login account.

D.

This will allow employee personal devices to be Onboarded to the corporate network

E.

This will allow conference employees to pre-load additional device information as guests
arrive and register

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method
for Guests?

A.

This removes the reliance on the known or unknown status for MAC authentication.

B.

All clients with unknown endpoints will be granted guest access regardless of
authorization

C.

Client attempts will fail without an additional Authentication method applied.

D.

All clients with known endpoints will be granted guest access regardless of
authorization.