Training, Certification & Career

                                                                        

                                                             

 

 

It’s time to progress. August is the month we will be covering the Aruba Certified ClearPass Professional certification.

 

The Aruba Certified ClearPass Professional (ACCP) exam questions cover the topics listed below. Viewing the ClearPass Essentials e-learning videos and participating in the ClearPass Essentials lab class provides the background needed for the ACCP 6.2 exam. Alternatively, reviewing the material listed below can help you along your path to ACCP. An ACCP practice quiz is coming soon!

 

 

The exam fee is $125

 

Topic Guide

 

ACCP

 

ClearPass Overview and Basic Enforcement

• [ebook] ClearPass: Understanding BYOD and today’s evolving network access security requirements
• [VIDEO] ClearPass Management Basics
• ClearPass Policy Manager 6.3 User Guide
• [VIDEO] 802.1X Authentication with Aruba Instant and ClearPass
  
• Creating a WLAN with 802.1X authentication on Clearpass - Mar 2014
• How to reset the Clearpass appadmin password cli password - Apr 2014
• Clearpass Upgrade Error - VM Upgrade Failure
• How to add new default Role in ClearPass Guest

 

Advanced Enforcement, External authentication, Posture and Profiling

• [Video] ClearPass Advanced Configuration Topics
• Using ClearPass To Manage Controller Login
• Using ClearPass to steer users to secure networks - Mar 2014
• [VIDEO] Captive Portal Authentication with Aruba Instant and ClearPass
• How to Configure management authentication for ClearPass against AD

ClearPass Maintenance & Operations

• How to Block Guest users from accessing ClearPass WebUI
• How to Add Clear-Pass to Domain
• How License Usage count is shown on CPPM

 

ClearPass Guest

• Aruba ClearPass Guest 6.3 User Guide
• Apple Captive Network Assistant Bypass with ClearPass Guest
• How to add new default Role in ClearPass Guest
• How to use ClearPass Guest as External SQL Authentication Source
• How do I create an LDAP authentication server on ClearPass Guest?
• Import Guest Accounts in ClearPass Guest
• How to configure ClearPass Guest web login when using an Aruba controller with a wildcard SSL certificate
• Guest Access Fundamentals

 

ClearPass Onboard

• ClearPass Onboard issue – Unable to upload certificate manually
• Behaviour of Onguard Agent 5.x with ClearPass 6.2 after upgrade
• How to use Onboard with single SSID on IAP

 

ClearPass Insight & Cluster

• [VIDEO] High availability for a ClearPass Cluster
• ClearPass Insight 6.3 User Guide
• [VIDEO] Using Virtual IP interfaces in a ClearPass Cluster

 ClearPass Troubleshooting

• eTIPS troubleshooting Tip #1 ? Hanging ClearPass/eTIPS Publisher
  
• CPPM fails to join to cluster : Node is already registered in the cluster
• CPPM cannot connect to Aruba Activate context server
• How many nodes can we have on a CPPM Cluster

 

 

Quiz now added. Let us know if/what changes need to be made.

 

This is question #3 in Study Guide:

 

3. Which of the following statements is NOT true about the configuration of Active Directory (AD) as an External Authentication Server in ClearPass?

A.ClearPass should join the AD domain when PEAP and MSCHAPv2 are used as the authentication type.
B.The bind DN for an AD can be in the administrator@domain format.
C.ClearPass cannot be a member of more than one AD domain.
D.The list of attributes fetched from the AD can be customized.

 

I am not so sure about this question.  

A. is correct

B seems correct

C I don't think a host can join more than one AD domain, but not sure... 

D seems correct.

 

Anyone?  ACCP seems not a popular test

 

Thanks,

 

3. Which of the following statements is NOT true about the configuration of Active Directory (AD) as an External Authentication Server in ClearPass?

A.ClearPass should join the AD domain when PEAP and MSCHAPv2 are used as the authentication type.
B.The bind DN for an AD can be in the administrator@domain format.
C.ClearPass cannot be a member of more than one AD domain.
D.The list of attributes fetched from the AD can be customized.

 

 

 

Confirm in lab.  CPPM cannot join another domain.  but the question/answer is double negative, so C is true

---

@ngutri wrote:

3. Which of the following statements is NOT true about the configuration of Active Directory (AD) as an External Authentication Server in ClearPass?

A.ClearPass should join the AD domain when PEAP and MSCHAPv2 are used as the authentication type.
B.The bind DN for an AD can be in the administrator@domain format.
C.ClearPass cannot be a member of more than one AD domain.
D.The list of attributes fetched from the AD can be customized.

 

 

 

Confirm in lab.  CPPM cannot join another domain.  but the question/answer is double negative, so C is true

---

questions like this really annoy me. why make it into an english reading / logic test instead of trying to asses the knowledge of the test taker?

 

so the answer is C, as ClearPass can actually join multiple domains fine.

The quiz link doesn't seem to be working, has the sample quiz been taken down?

most likely then, it is also almost 4 year old.

 

Is is ok to dicuss unanswered ACCP questions in study guide here?  Licensing CPPM is confusing, and it is a test question.

 

Question 1:  A customer would like to deploy ClearPass with the following objectives:

They have between 2000 to 3000 corporate users that need to authenticate daily using EAP-TLS. They want to allow for up to 1000 employee devices to be onboarded. They would also like to allow up to 100 guest users to authenticate each day using the web login feature. Which of the following best describes the license mix that they need to purchase?

 

1. CP-HW-5k, 100 Onboard, 100 Guest
2. CP-HW-500, 1000 Onboard, 100 Guest
3. CP-HW-2k, 1000 Onboard, 100 Guest
4. CP-HW-5k, 2500 Enterprise

Regards,

Answers:

1 is not enough, because 1000 onboarded devices

2 is not enough for corporate users

3 no such license 

so only 4 is the right choice????

 

---

@ngutri wrote:

Answers:

1 is not enough, because 1000 onboarded devices

2 is not enough for corporate users

3 no such license 

so only 4 is the right choice????

 

---

i agree, though i hope 3 is a typo because that would make more sense for a customer then buying way too many enterprise licenses. of course nice for the partner that sells it to them :)

5. If a client authentication is failing and there are no entries in CPPM’s Access Tracker, which of the following is a possible reason for the authentication failure?

 

A.The client used a wrong password.
B.The user is not found in the database.
C.The shared secret between Network Access Device and CPPM is not matched.
D.The user account has expired.

 

Answer C ??? 

---

@ngutri wrote:

5. If a client authentication is failing and there are no entries in CPPM’s Access Tracker, which of the following is a possible reason for the authentication failure?

 

A.The client used a wrong password.
B.The user is not found in the database.
C.The shared secret between Network Access Device and CPPM is not matched.
D.The user account has expired.

 

Answer C ??? 

---

Yes. C is the only answer pertaining to communication between the controller and ClearPass. Resulting in a empty Access Tracker. The other ones would show up in the Access Tracker.

I am scheduled to take the ACCP exam next week.  I think this study information will be great.  In addition some of the material is helping me at work.

Good to hear the material is working. Lets us know how the cert test goes.

As I prepare for my ClearPass exam tomorrow I was wondering how close the questions are to the type that will be on the exam. One question on the practice quiz asked about Aruba Providing a professional service for captive portals. It doesn't seem like that type of question would be on an exam.

Just curious.

Jerry

Thi questions are made by community members and do not represent actual questions. A lot of them are similar questions.

I just sat the ACCP v6.2 and failed by 1 point.  Arrrgh!!.  I guest I just have to study harder.  I was looking to see  if there is a wait period to retake ACCP v6.2.  I have not seen anu documentation on when you can recertify.

I found the wait time before I can recertify is 10 days.

I passed the ACCP exam yesterday.  A combination of working with Clearpass, the link on the ACCP Becoming Mobility Certified page in this forum, and practice tests.  So now I am ACMP and ACCP certified. 

Now on toother certs CISSP and BCNE. 

 

Jerry

Excellent news! Congrats on the new cert.

Congrats on the cert, Jerry! Quick question:

 

When you mentioned "practice tests", plural, other than the one listed in the reference materials above (the QuizBean one), what other practice tests did you take? I haven't been able to find any others. If you could tell me where to look for them, I'd really appreciate it as I'm slated to take the ACCP in about two weeks.

 

Thank you!

 

What is the passing score? 

Passing is 75%.

 

Kevin

hey guys,

I attended a CPE instructor led training last week and want to schedule my ACCP exam. Now I'm a bit confused. When I log in to the PearsonVue site there are two ACCP exams. One with the version 6.2 and one in version 6.3.

is there a big difference in the question set or do I have any disadvantages if I write the "old" exam? Or is it the same question set whatever which version I book?

I don't there is a big difference in the exam.  Both exam guides are good.  The 6.3 exam guide has the new features that are introduced in that released.  Other than that they are very similar.

 

Jerry

Your CPE class was based upon 6.3.  Please take that exam as it more closely aligns with your lectures and labs.

 

Kevin