HPE6-A82 Sample Questions Answers

configuring ClearPass as a DHCP relay for the client

DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not

necessary

enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

ClearPass will validate the user credentials, then, for the duration of the cache. ClearPass will just fetch account attributes.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.

ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes

Cisco Device Sensor

Exchange Plugging agent

3rd part MDM

DNS fingerprinting

NAD ARP listening handler

Local user Repository

Endpoint Repository

OnGuard Repository

Gust User Repository

Device Category

Device Family

Device Health

Device Type

Device Location

selects the Posture Policy used with OnGuard

selects the Enforcement Profiles used in a service

selects the Service to process a request

selects the Authentication Source for the client

ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour

period.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

A user changing departments may not see their Department attribute change in AD reflected while

authenticating until the Cache Timeout period has ended.

On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

PEAP

Guest serf-registration

EAP-TLS

MAC Authentication

IF-MAP

MAC OUI

HTTP

TCP header capture

SNMP

Interim Accounting on the Network Access Device (NAD).

Enable Active Sessions in ClearPass Guest

Enable Logging of Accounting Start-Stop packets.

Make sure the Endpoint Profiling is configured

Using the "Import Accounts" under ClearPass Guest

Using the "Create Account" or "Create Multiple'' options under ClearPass Guest

Assigning the default role "Lobby Ambassador to a receptionist to then add the accounts

Using the "Sync Accounts'' under ClearPass Guest

importing accounts from Active Directory once ClearPass is added with Admin credentials

enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

DHCP profiling is enabled on ClearPass by default configuration of the network access devices is not necessary

configuring ClearPass as a DHCP relay for the client

ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and receive a result of Active Directory Authentication failed. No further processing will occur.

ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed.

No further processing will occur.

ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.

ClearPass receive a timeout attempt when trying the Remote Lab AD server first. No further processing will occur until the Remote Lab AD server is marked as "Down" by the Administrator.

Requires the purchase of a supported Cisco Access Point licensed as an Aruoa Monitor Mode AP. to then act as !he sensor

Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation

Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP)

Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets

Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature

All fingerprints are applied

The last fingerprint gathered

NMAP because it is actively obtained

OnGuard because it is application based