HP HPE6-A81 Value Pack (Frequently Bought Together)

Refer to the exhibit.


A customer is doing a new ClearPass installation and is setting up clustering between two ClearPass servers running a 6.8.6 version. The ClearPass server failed to add the subscriber node. The customer was able to login to the console of the ClearPass server with the same CLI password used during the cluster setup. The customer has sent you the screenshots seeking your support Why did an attempt to add a subscriber node failed showing that error?

• A. The subscriber server is running with a public signed and trusted HTTPS certificate
• B. The default database certificate used in the publisher server is not a valid certificate
• C. The data and time in the subscriber was not synchronized with the NTP server
• D. The subscriber server is running with a default self -signed HTTPS certificate

Refer to the exhibit.

A customer has configured Onboard in a cluster. After the Primary server's failure, the BYOD devices fail to connect to the network. Which step below is the best starting point when troubleshooting'

• A. Verify the CPPM hostname in OSCP URL under TLS authentication method is updated to localhost instead of primary server's hostname.
• B. Reboot the active ClearPass server and reconnect the client to the SSID by selecting the correct certificate when prompted.
• C. Check if a DNS entry is available for the ClearPass hostname in the certificate, resolvable from the DNS server assigned to the client.
• D. Check EAP certificate on the secondary node is issued by the same common root Certificate Authority (CA).

Refer to the exhibit.


You have integrated the Cisco switch with ClearPass to do MAC-Auth for Cisco IP Phones. The phones connect to the network successfully but when you try to change the status of the device from the access tracker, you see only the ArubaOS Radius terminate session options and not the Cisco vendor terminate session options. What will you check to fix this issue?

• A. Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.
• B. Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.
• C. Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.
• D. Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.

When building an SNMP-based enforcement profile what option can you assign to the user as actions? (Select three).

• A. Enforce Firewall policies
• B. Set a session timeout for the client
• C. Reset the connection after the settings has been pushed
• D. ClearPass Downloadable Role
• E. Enforce a VLAN ID for the client
• F. Send captive portal web re-direct URL

A Customer has these requirements:
* 2.000 loT endpoints that use MAC authentication
* 6.000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication
* 1.000 guest endpoints at peak usage that use guest self-registration
* 1500 BYOD devices estimated as 3 devices per User (500 users)
* 2.500 endpoints that have OnGuard installed and connect on a daily basis What licenses should be installed to meet customer requirements?

• A. 13.000 Access. 1.500 Onboard. 2.500 OnGuard
• B. 11.500 Access. 1.500 Onboard. 2.500 OnGuard
• C. 9.000 Access. 500 Onboard. 2.500 OnGuard
• D. 11.500 Access. 500 Onboard. 2.500 OnGuard