Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam HPE6-A70 topic 1 question 60 discussion

Actual exam question from HP's HPE6-A70
Question #: 60
Topic #: 1
[All HPE6-A70 Questions]

A company has an Aruba solution with a guest WLAN named exam_guest. A network administrator creates the guest WLAN with the wizard and does not change any of the default roles. The authentication server does not send particular role assignments for authorized users. The company wants to deny guests access to specific IP ranges after the guest authenticate.
For which role should the administrator create the rule to deny this traffic?

  • A. guest
  • B. authorized
  • C. exam_guest-guest-logon
  • D. guest-logon
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Gerald007
Highly Voted 3 years, 10 months ago
I feel like the correct answer should be A because the question states "after the guest has authenticated." "guest-logon" is used for pre-authentication (limited to DHCP & DNS). The guest role is used post-authentication.
upvoted 12 times
...
acma
Most Recent 1 year, 1 month ago
Selected Answer: A
The administrator should create the rule to deny traffic for the "guest" role. This is because the guest WLAN is named "exam_guest," and the administrator did not change any of the default roles, so guests will likely be assigned the default "guest" role. Additionally, the authentication server does not send particular role assignments for authorized users, which further supports using the "guest" role for the rule. Therefore, the correct answer is A. guest.
upvoted 1 times
...
acma
1 year, 1 month ago
Selected Answer: A
correct answer should be A
upvoted 1 times
...
Black777Eagle
1 year, 4 months ago
Selected Answer: C
ACMA Officially Certification Study Guide (Exam HPE6-A42) page 270
upvoted 2 times
Black777Eagle
1 year, 4 months ago
Sorry wrong, C is the WLAN+guest-logon is the profile role name. Not the role after authenticate. So it is A.
upvoted 1 times
...
...
orisis
1 year, 4 months ago
Selected Answer: C
The answer here is C because most of the below comments are right: after the guest has authenticated. The reason is not A is because when you create a WLAN with the wizard it creates automatically a role that is the WLAN+guest-logon in this case exam_guest-guest-logon.
upvoted 2 times
...
tirou
1 year, 11 months ago
A - by default fall into "guest" role, when RADIUS doesnt send any more specific roles
upvoted 2 times
...
Kiran04
2 years, 7 months ago
Correct ANS is C While using wizard, by default a new Guest-Logon role created to support redirection. In this case SSID name is exam_guest, so the newly created default role will be exam_guest-guest-logon. To edit any firewall policies, administrator has to edit the firewall policies of exam_guest-guest-logon role.
upvoted 2 times
...
Linares1234
2 years, 11 months ago
Guest logon is the pre-authen role Guest is post-authen role, so modify the Guest role to deny guests access to specific IP ranges Correct Answer : A
upvoted 1 times
...
StudiousGuy
3 years, 5 months ago
Correct is "A" Guest logon is the pre-authen role Guest is post-authen role, so modify the Guest role to deny guests access to specific IP ranges Correct Answer : A
upvoted 1 times
...
ahmedsoror
3 years, 7 months ago
Answer is A
upvoted 2 times
...
pouet
3 years, 7 months ago
Answer is A : Guest-logon is for preauthentication and guest is for postauthentication by default. Company wants to deny guests access to specific IP ranges after the guest authenticate
upvoted 3 times
...
hanza
3 years, 9 months ago
Edit: guest-logon indeed is defualt role assigned to guest wifi. I would edit guest-logon and create rule in last section at very bottom of guest-logon role. So answer is D
upvoted 2 times
...
hanza
3 years, 9 months ago
D is wrong, its for pre-auth with captive portal A is wrong as it allows http to any. B permits all. C is unknown. This question is isn't clear....not enough info In general to restrict something i would create new role, as editing default roles is not suggested.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...