EMT Practice Test

1. Question Content...

---

Question1: Which checks are made with Onguard posture evaluation on ClearPass? (Select three.)

Question2: Refer to the exhibit.

An administrator configured a service and tested authentication, but was unable to complete authentication successfully. The administrator performs a Search using insight and the information displays as shown.
What is a possible reason for the ErrorCode 'Failed to classify request to service' shown?

Question3: Which statement accurately describes configuration of Data and Management ports on the ClearPass appliance? (Select two.)

Question4: Refer to the exhibit.

Based on the configuration for the client's certificate private key as shown, which statements accurately describe the settings? (Select two.)

Question5: A client's authentication is failing and there are no entries in the ClearPass Access tracker.
What is a possible reason for the authentication failure?

Question6: Refer to the exhibit.

The ClearPass Event Viewer displays an error when a user authenticates with EAP-TLS to ClearPass through an Aruba Controller Wireless Network.
What is the cause of this error?

Question7: What is a benefit of ClearPass Onguard?

Question8: Refer to the exhibit.

Based on the Access Tracker output for the user shown, which statement describes the status?

Question9: An employee provisions a personal smart phone using the Onboard process. In addition, the employee has a corporate laptop provided by IT that connects to the secure network.
How many licenses does the employee consume?

Question10: Refer to the exhibit.

A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop.
Which Enforcement Profile is applied?

Question11: Which licenses are included in the built-in Starter kit for ClearPass?

Question12: Why can the Onguard posture check not be performed during 802.1x authentication?

Question13: Refer to the exhibit.

Based on the Enforcement Policy configuration shown, when a user with Role Remote Worker connects to the network and the posture token assigned is quarantine, which Enforcement Profile will be applied?

Question14: Refer to the exhibit.

Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

Question15: When a third party Mobile Device Management server is integrated with ClearPass, where is the endpoint information from the MDM server stored in ClearPass?

Question16: Which IP address should be set as the DHCP relay on an Aruba Controller for device fingerprinting on ClearPass?

Question17: Refer to the exhibit.

A customer wants to enable Publisher redundancy.
Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?

Question18: Refer to the exhibit.

Based on the Enforcement Policy configuration shown, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

Question19:
Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully using connection protocol WEBAUTH?

Question20: Refer to the exhibit.

What can be concluded from the Access Tracker output shown?

Question21: Refer to the exhibit.
Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome when
'Automatically use my Windows logon name and password' are selected?

Question22: Refer to the exhibit.

Based on the Endpoint information shown, which collectors were used to profile the device as Apple iPad?
(Select two.)

Question23: Refer to the exhibit.

Which types of records will the report shown display?

Question24: What does a Windows client need for it to perform EAS-PEAP successfully when 'Validate server Certificate' is not enabled?

Question25: A guest self-registered through a Publisher's Register page.
Which statement accurately describes how the guest's account will be stored?

Question26: Refer to the exhibit.

What is the purpose of the 'Clock Skew Allowance' setting? (Select two.)

Question27: What does Authorization allow users to do in a Policy Service?

Question28: What is the purpose of RADIUS CoA (RFC 3576)?

Question29: What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Select two.)

Question30: Refer to the exhibit.

Based on the configuration of the create_user form shown, which statement accurately describes the status?

Question31: DRAG DROP
Use the arrows to soft the steps to request a Policy on the left into the order they are performed on the right.
Select and Place:

Question32: A customer with an Aruba Controller wants it to work with ClearPass Guest.
How should the customer configure ClearPass as an authentication server in the controller so that guests are able to authenticate successfully?

Question33: Refer to the exhibit.

Based on the information shown, what is the purpose of using [Time Source] for authorization?

Question34: Refer to the exhibit.

Which statements accurately describe the cp82 ClearPass node? (Select two.)

Question35: The "Alerts" tab in an access tracker entry shows the error message: "Access denied by policy." What is a possible cause of authentication failure?

Question36: Refer to the exhibit.

Which statement accurately reflects the status of the Policy Simulation test figure shown?

Question37: A customer would like to deploy ClearPass with these requirements:
every day, 100 employees need to authenticate with their corporate laptops using EAP-TLS

every Friday, a meeting with business partners takes place and an additional 50 devices need to

authenticate using Web Login Guest Authentication
What should the customer do regarding licenses? (Select two.)

Question38: Which component of a ClearPass Service is mandatory?

Question39: Which collectors can be used for device profiling? (Select two.)

Question40: Which types of files are stored in the Local Shared Folders database in ClearPass? (Select two.)

Question41: Refer to the exhibit.

What information can be drawn from the audit row detail shown? (Select two.)

Question42: A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage,
802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers.
Which statements accurately describe next steps? (Select two.)

Question43: Refer to the exhibit.

Based on the information shown on a client's laptop, what will happen next?

Question44: Why is a terminate session enforcement profile used during posture checks with 802.1x authentication?

Question45: Refer to the exhibit.

Based on the network topology diagram shown, how many clusters are needed for this deployment?

Question46: Which settings need to be validated for a successful EAP-TLS authentication? (Select two.)

Question47: Refer to the exhibit.

Based on the configuration of a Windows 802.1X supplicant shown, what will be the outcome of selecting
'Validate server certificate'?

Question48: A ClearPass administrator wants to make Enforcement decisions during 802.1x authentication based on a client's Onguard posture token.
Which Enforcement profile should be used on the health check service?

Question49: Refer to the exhibit.

Based on the information shown, what will be the outcome when the administrator chooses "Deny Access to this Device? (Select two.)

Question50: An SNMP probe is sent from ClearPass to a network access device, but ClearPass is unable to obtain profiling information.
What are likely causes? (Select three.)

Question51: Under which circumstances is it necessary to use an SNMP based Enforcement profile to send a VLAN?

Question52:
Based on the Policy configuration shown, which VLAN will be assigned when a user with ClearPass role Engineer authenticates to the network successfully on Saturday using connection protocol WEBAUTH?

Question53: Refer to the exhibit.

An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ.
Which role is assigned to the user in ClearPass?

Question54: Which database in the Policy Manager contains the device attributes derived by profiling?

Question55: What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?

Question56: Refer to the exhibit.

Under which circumstances will ClearPass select the Policy Service named 'Test device group'?

Question57: Refer to the exhibit.

Based on the information shown, which field in the Captive Portal Authentication profile should be changed so that guest users are redirected to a page on ClearPass when they connect to the Guest SSID?