EMT Practice Test

1. Question Content...

---

Question1: An employee authenticates using a corporate laptop and runs the persistent Onguard agent to send a health check back the Policy Manager. Based on the health of the device, a VLAN is assigned to the corporate laptop.
Which licenses are consumed in this scenario?

Question2: In a single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

Question3: Refer to the exhibit.

What is the purpose of the 'Clock Skew Allowance' setting? (Select two.)

Question4: Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

Question5: Refer to the exhibit.

What can be concluded from the Access Tracker output shown?

Question6: Refer to the exhibit.

Which statements accurately describe the cp82 ClearPass node? (Select two.)

Question7: Which components can use Active Directory authorization attributes for the decision-making process?
(Select two.)

Question8: Refer to the exhibit.

An employee connects a corporate laptop to the network and authenticates for the first time using EAP- TLS.
Based on the Enforcement Policy configuration shown, which Enforcement Profile will be sent?

Question9: ClearPass and a wired switch are configured for 802.1x authentication with RADIUS CoA (RFC 3576) on UDP port 3799. This port has been blocked by a firewall between the wired switch and ClearPass.
What will be the outcome of this state?

Question10: Refer to the exhibit.

Based on the Enforcement Policy configuration shown, which Enforcement Profile will an employee receive when connecting an IOS device to the network or the first time using EAP-PEAP?

Question11: Which steps are required to use ClearPass as a TACACS+ Authentication server for a network device?
(Select two.)

Question12: A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage,
802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statements accurately describe next steps? (Select two.)

Question13: Refer to the exhibit.

Based on the configuration for the client's certificate private key as shown, which statements accurately describe the settings? (Select two.)

Question14: Refer to the exhibit.

Which types of records will the report shown display?

Question15: Refer to the exhibit.

An administrator logs in to the Guest module in ClearPass and 'Manage Accounts' displays as shown.
When a user with username [email protected] attempts to access the Web Login page, what will be the outcome?

Question16: A customer would like to deploy ClearPass with these requirements:
-2000 devices need to be Onboarded
-2000 corporate devices need to run posture checks daily
-500 guest users need to authenticate each day using the web login feature What is the license mix that customer will need to purchase?

Question17: Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting
'Validate server certificate'?

Question18: A customer with an Aruba Controller wants it to work with ClearPass Guest.
How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

Question19: DRAG DROP
Use the arrows to soft the steps to request a Policy on the left into the order they are performed on the right.
Select and Place:

Question20: An SNMP probe is sent from ClearPass to a network access device, but ClearPass is unable to obtain profiling information.
What are likely causes? (Select three.)

Question21: Which use cases will require a ClearPass Guest application license? (Select two.)

Question22: Refer to the exhibit.

Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

Question23: Refer to the exhibit.

Based on the Translation Rule configuration shown, what will be the outcome?

Question24: What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

Question25: Refer to the exhibit.

An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ.
Which role is assigned to the user in ClearPass?

Question26: Refer to the exhibit.

Which statement accurately reflects the status of the Policy Simulation test figure shown?

Question27: Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the Address field value 'securelogin.arubanetworks.com' used for?

Question28: Refer to the exhibit.

Based on the Attribute configuration shown, which statement accurately describes the status of attribute values?

Question29: Refer to the exhibit.

Based on the information shown on a client's laptop, what will happen next?

Question30: Refer to the exhibit.


Based on the ClearPass and Aruba Controller configuration settings for Onboarding shown, which statement accurately describes an employee's new personal device connecting to the Onboarding network? (Select two.)

Question31: What does a Windows client need for it to perform EAS-PEAP successfully when 'Validate server Certificate' is not enabled?

Question32: Refer to the exhibit.

Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?

Question33: A customer would like to deploy ClearPass with these requirements:
between 2000 to 3000 corporate users need to authenticate daily using EAP-TLS

should allow for up to 1000 employee devices to be Onboarded

should allow up to 100 guest users each day to authenticate using the web login feature

What is the license mix that customer will need to purchase?

Question34: When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

Question35: Refer to the exhibit.

An AD user's department attribute value is configured as "QA". The user authenticates from a laptop running MAC OS X.
Which role is assigned to the user in ClearPass?

Question36: Which authorization servers are supported by ClearPass? (Select two.)

Question37: The "Alerts" tab in an access tracker entry shows the error message: "Access denied by policy." What is a possible cause of authentication failure?

Question38: Refer to the exhibit.

Based on the Enforcement Policy configuration shown, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

Question39: In which ways can ClearPass derive client roles during policy service processing? (Select two.)

Question40: Which authentication protocols can be used for authenticating Windows clients that are Onboarded?
(Select two.)

Question41: Refer to the exhibit.

An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD.
Which roles are assigned to the user in ClearPass? (Select two.)

Question42: Refer to the exhibit.

Based on the configuration for 'maximum devices' shown, which statement accurately describes its settings?

Question43: Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

Question44: Refer to the exhibit.

A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop.
Which Enforcement Profile is applied?

Question45: What is the purpose of RADIUS CoA (RFC 3576)?

Question46: An administrator enabled the Pre-auth check for their guest self-registration.
At what stage in the registration process in this check performed?

Question47: Refer to the exhibit.

Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?

Question48: Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

Question49: A customer wants all guests who access a company's guest network to have their accounts approved by the receptionist, before they are given access to the network.
How should the network administrator set this up in ClearPass? (Select two.)

Question50: A customer would like to deploy ClearPass with these requirements:
every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS

every Friday, a meeting with business partners takes place and an additional 50 devices need to

authenticate using Web Login Guest Authentication
What should the customer do regarding licenses? (Select two.)

Question51: Refer to the exhibit.

Based on the information shown, what is the purpose of using [Time Source] for authorization?

Question52: Why is a terminate session enforcement profile used during posture checks with 802.1x authentication?

Question53: Use this form to make changes to the RADIUS Web Login Guest Network.

A Web Login page is configured in Clear Pass Guest as shown.
What is the purpose of the Pre-Auth Check?

Question54: What is the purpose of Operator Profiles?

Question55:
Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully using connection protocol WEBAUTH?

Question56: A client's authentication is failing and there are no entries in the ClearPass Access tracker.
What is a possible reason for the authentication failure?

Question57: Refer to the exhibit.

Under which circumstances will ClearPass select the Policy Service named 'Test device group'?

Question58: Refer to the exhibit.

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad?
(Select two.)

Question59: Why can the Onguard posture check not be performed during 802.1x authentication?

Question60: Refer to the exhibit.

Based on the Enforcement Policy configuration shown, when a user with Role Remote Worker connects to the network and the posture token assigned is quarantine, which Enforcement Profile will be applied?

Question61: Refer to the exhibit.

When configuring a Web Login Page in ClearPass Guest, the information shown is displayed.
What is the page name field used for?

Question62: Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage is an email request sent to the sponsor?

Question63: Which licenses are included in the built-in Starter kit for ClearPass?

Question64: Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

Question65: When is the RADIUS server certificate used? (Select two.)

Question66: What is the certificate format PKCS #7, or .p7b, used for?

Question67: Refer to the exhibit.

A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page.
Based on the MAC Caching service information shown, which statement about the guests' MAC address is accurate?

Question68: Refer to the exhibit.

Which statements accurately reflects the status of the Policy Simulation test figure shown?

Question69: An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network.
How many licenses does the employee consume?

Question70: A hotel chain deployed ClearPass Guest. When hotel guests connect to the Guest SSID, launch a web browser and enter the address www.google.com, they are unable to immediately see the web login page.
What are the likely causes of this? (Select two.)

Question71: Which device type supports Exchange ActiveSync configuration with Onboard?

Question72: Refer to the exhibit.

A customer wants to enable Publisher redundancy.
Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

Question73: Refer to the exhibit.

An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.
What is a possible reason for the ErrorCode 'Failed to classify request to service' shown?

Question74: What is a benefit of ClearPass Onguard?

Question75: What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Question76: Refer to the exhibit.

Based on the configuration of the create_user form shown, which statement accurately describes the status?

Question77: Which collectors can be used for device profiling? (Select two.)

Question78: Refer to the exhibit.

A user logged in to the Self-Service Portal as shown.
What do the traffic received and sent statistics present?

Question79: Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

Question80: Refer to the exhibit.

The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.
What is the cause of this error?

Question81: Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?

Question82: Refer to the exhibit.

In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

Question83: Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Question84: Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Question85: What does Authorization allow users to do in a Policy Service?

Question86: Refer to the exhibit.

An Enforcement Profile has been created in the Policy Manager as shown.
Which action will ClearPass take based on the Enforcement Profile?

Question87: Refer to the exhibit.

Based on the guest Self-Registration with Sponsor Approval workflow shown, at which stage does the sponsor approve the user's request?

Question88: Which CLI command is used to upgrade the image of a ClearPass server?

Question89: Which devices support Apple over-the-air provisioning? (Select two.)

Question90: An organization implements dual SSID Onboarding. The administrator used the Onboard service template to create services for dual SSID Onboarding.
Which statement accurately describes the outcome?

Question91: A guest self-registered through a Publisher's Register page.
Which statement accurately describes how the guest's account will be stored?

Question92: Refer to the exhibit.

Based on the network topology diagram shown, how many clusters are needed for this deployment?

Question93: An Android device goes through the single-SSID Onboarding process and successfully connects using EAP-TLS to the secure network.
What is the order in which services are triggered?

Question94: Which component of a ClearPass Service is mandatory?

Question95: A university wants to deploy ClearPass with the Guest module. The university has two types that need to use web login authentication. The first type of users are students whose accounts are in an Active Directory server. The second type of users are friends of students who need to self-register to access the network.
How should the service be set up in the Policy Manager for this network?

Question96: A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client's Onguard posture token.
Which Enforcement profile should be used on the health check service?