CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. HP
  5. HPE6-A68

Free HPE6-A68 Exam Braindumps (page: 11)

Page 10 of 30
PDF with 116 Questions

Refer to the exhibit.



A customer wants to enable Publisher redundancy.
Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

  1. Subscriber in the main data center
  2. Publisher in the regional office
  3. Any of the other three Publishers
  4. Publisher in the mid-size branch
  5. Publisher in the DMZ

Answer(s): A

Explanation:

ClearPass Policy Manager allows you to designate one of the subscriber nodes in a cluster to be the Standby Publisher, thereby providing for that subscriber node to be automatically promoted to active Publisher status in the event that the Publisher goes out of service. This ensures that any service degradation is limited to an absolute minimum.


Reference:

http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/5%20Cluster %20Deployment/Standby_publisher.htm



A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server
outage, 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statements accurately describe next steps? (Select two.)

  1. The NAD should be configured with the primary node IP address for RADIUS authentication on the 802.1x network.
  2. A new Virtual IP address should be created for each NAD.
  3. Both the primary and secondary nodes will respond to authentication requests sent to the Virtual IP address when the primary node is active.
  4. The primary node will respond to authentication requests sent to the Virtual IP address when the primary node is active.
  5. The NAD should be configured with the Virtual IP address for RADIUS authentications on the 802.1x network.

Answer(s): D,E

Explanation:

In an Aruba network, APs are controlled by a controller. The APs tunnel all data to the controller for processing, including encryption/decryption and bridging/forwarding data. Local controller redundancy provides APs with failover to a backup controller if a controller becomes unavailable. Local controller redundancy is provided by running VRRP between a pair of controllers. The APs are then configured to connect to the "virtual-IP" configured for the VRRP instance.


Reference:

http://www.arubanetworks.com/techdocs/ArubaOS_64x_WebHelp/Content/ArubaFrameStyles/VRR P/Redundancy_Parameters.htm



ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.
What will be the outcome of this state?

  1. RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.
  2. During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.
  3. RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.
  4. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.
  5. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

Answer(s): D



Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

  1. Static IP addresses are only allowed on the management port.
  2. Configuration of the data port is mandatory.
  3. Configuration on the management port is mandatory.
  4. Configuration of the data port if optional.
  5. Configuration of the management port is optional.

Answer(s): C,D

Explanation:

The Management port (ethernet 0) provides access for cluster administration and appliance maintenance using the WebUI, CLI, or internal cluster communication. This configuration is mandatory.
The configuration of the data port is optional. If this port is not configured, requests are redirected to the Management port.


Reference:

http://www.arubanetworks.com/techdocs/ClearPass/Aruba_DeployGd_HTML/Content/1%20About %20ClearPass/Hardware_Appliance.htm






Post your Comments and Discuss HP HPE6-A68 exam with other Community members:

HPE6-A68 Discussions & Posts