Refer to the exhibit.Based on the Enforcement Policy configuration shown, when a user with Role Remote Worker connects to the network and the posture token assigned is quarantine, which Enforcement Profile will be applied?
Answer(s): B
The first rule will match, and the Remote Employee ACL will be used.
Refer to the exhibit.Based on the Access Tracker output for the user shown, which statement describes the status?
We see System Posture Status: HEALTHY(0)End systems that pass all SHV tests receive a Healthy Posture Token, if they fail a single test they receive a Quarantine Posture Token.
CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 13 https://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access- byod/21122/1/OnGuard%20config%20Tech%20Note%20v1.pdf
Why can the Onguard posture check not be performed during 802.1x authentication?
Answer(s): C
OnGuard uses HTTPS to send posture information to the ClearPass appliance. For OnGuard to use HTTPS, it must have access to the network. If a customer requires 802.1x authentication on the wired switch, a separate 802.1x authentication must be used prior to the OnGuard posture check. In this example, an 802.1x PEAP-EAP-MSCHAPv2 authentication is completed first. A separate WebAuth service must be setup with posture checks to use the OnGuard agent. Reference: MAC Authentication and OnGuard Posture Enforcement using Dell WSeries ClearPass and Dell Networking Switches (August 2013), page 21
Refer to the exhibit.Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?
The OnGuard Agent enforcement policy retrieves the posture token. If the token is HEALTHY it returns a healthy message to the agent and bounces the session. If the token is UNHEALTHY it returns an unhealthy message to the agent and bounces the session.
CLEARPASS ONGUARD CONFIGURATION GUIDE (July 2015), page 27
Post your Comments and Discuss HP HPE6-A68 exam with other Community members:
To protect our content from bots for real learners like you, we ask you to register for free. Sign in or sign up now to continue with the HPE6-A68 material!