NEW QUESTION 1
ClearPass receives fingerprinting profile data for a client device that is based on MAC OUl. NMAP. DHCP, and OnGuard Which fingerprint or fingerprints are used?

• A. All fingerprints are applied
• B. The last fingerprint gathered
• C. NMAP because it is actively obtained
• D. OnGuard because it is application based

Answer: C

NEW QUESTION 2
What is RADIUS Change of Authorization (CoA)?

• A. It allows ClearPass to transmit messages to the Network Attached Device/Network Attached Server (NAD/NAS) to modify a user’s session status
• B. It allows clients to issue a privilege escalation request to ClearPass using RADIUS to switch to TACACS+
• C. It is a mechanism that enables ClearPass to assigned a User-Based Tunnel (UBT) between a switch and controller for Dynamic Segmentation
• D. It forces the client to re-authenticate upon roaming to an access point controlled by a foreign mobility controller.

Answer: A

Explanation:
Referencehttp://www.arubanetworks.com/techdocs/ClearPass/Aruba_CPPMOnlineHelp/Content/CPPM_UserG

NEW QUESTION 3
Which two are required to add a Network Access Device (NAD) into ClearPass? (Select two.)

• A. ClearPass Admin login credentials
• B. SSH password
• C. Shared Secret
• D. HTTPS certificate
• E. NAD IP address

Answer: CE

NEW QUESTION 4
When using Guest Authentication with MAC Caching service template, which statements are true? (Select two.)

• A. The guest authentication is provided better security than without using MAC caching
• B. The guest authentication is provided better security than without using MAC caching
• C. The endpoint status of the client will be treated as "known" the first time the client associates to the network
• D. Which wireless SSID and wireless controller must be indicated when configuring the template
• E. The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term

Answer: AD

NEW QUESTION 5
What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

• A. ClearPass will validate the user credentials, then, for the duration of the cach
• B. ClearPass will just fetchaccount attributes.
• C. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials
• D. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.
• E. ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes

Answer: C

Explanation:
https://community.arubanetworks.com/blogs/arunkumar1/2020/10/20/what-is-the-differencebetween- authentication-cache-timeout-and-machine-authentication-cache-timeout

NEW QUESTION 6
Which actions are necessary to set up a ClearPass guest captive portal web login page to execute with no errors? (Select two)

• A. Configure the vendor settings in the Web Login page to match the Network Access Device (NAD).
• B. Install a publicly signed HTTPS certificate in ClearPass and the Network Access Device (NAD).
• C. Install an enterprise Certificate Authority (CA) signed HTTPS certificate in the Network Access Device (NAD).
• D. Install an enterprise Certificate Authority (CA) signed HTTPS certificate in ClearPass and the Network D18912E1457D5D1DDCBD40AB3BF70D5DAccess Device (NAD).
• E. Configure the vendor settings in the Network Access Device (NAD) to match the web login page.

Answer: BE

NEW QUESTION 7
Match the correct Profiling Collector with the Collector Type. Collector Types may be used more than once.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8
Aruba self-registration with sponsorship is a solution best applied to which type of network?

• A. a chain of auto part stores where employees are assigned mobile devices using a Mobile Device Manager (MDM) and public wireless is available for customers
• B. a large corporate environment with hundreds of contractors requiring wireless access to printers and internet but no other guest access is allowed
• C. a hotel where hundreds of guests are checked in and out of the building daily that may want access to wireless internet
• D. a chain of coffee shops using in a public downtown area with a high amount of guest turnover needing access to public wireless

Answer: B

NEW QUESTION 9
Which configuration options are necessary to add a Network Access Device into the ClearPass Policy Manager? (Select two.)

• A. ClearPass Admin Password
• B. https certificate
• C. NAD IP Address
• D. Shared Secret
• E. CLI Console Password

Answer: CD

NEW QUESTION 10
Refer to the exhibit.

What does a bold field indicate?

• A. The field is currently enabled.
• B. The field is a non-system field
• C. The field has been customized
• D. The field Is required

Answer: B

NEW QUESTION 11
What is the benefit to installing a wild card certificate for captive portal authentication?

• A. Guests no longer are required to validate certificates during captive portal.
• B. Allows different certificates for each controller for increased security
• C. Wild card certificates are provide greater security than normal certificates
• D. Allows the single wild card certificate to be installed on all controllers in the environment

Answer: D

NEW QUESTION 12
Which ClearPass fingerprint collectors are valid for active profiling of endpoints? (Select two.)

• A. DHCP fingerprinting
• B. IF-MAP
• C. SNMP
• D. HTTP user agents
• E. NMAP

Answer: CD

NEW QUESTION 13
Refer to the exhibit.

Which user authentication request will match the service rules of the Policy Service shown?

• A. a wireless user connection would fail because of miss-configured service rules
• B. a wireless user connected to any SSID named "CORP"
• C. a wireless user connecting to any SSID on an Aruba Controller
• D. a wireless user connecting to an Aruba IAP on the SSID "CORP"

Answer: D

NEW QUESTION 14
When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

• A. When you want to match Active Directory attributes directly to an enforcement policy.
• B. When you want to enable attributes as roles directly without combining multiple attributes
• C. When you want to translate and combine Active Directory attributes into ClearPass roles.
• D. When you want to match Active Directory attributes to a Aruba firewall role on a Aruba Network Access Device.

Answer: A

NEW QUESTION 15
Refer to the exhibit.

A client is attempting to authenticate using their Windows account with a bad password if the Remote Lab AD server is down for maintenance, what win be the expected result?

• A. ClearPass receives a timeout attempt when trying the Remote Lab AD server firs
• B. It will then try the server Backup 1 and receive a result of Active Directory Authentication faile
• C. No further processing will occur.
• D. ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed.No further processing will occur.
• E. ClearPass receives a timeout attempt when trying the Remote Lab AD server firs
• F. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.
• G. ClearPass receive a timeout attempt when trying the Remote Lab AD server firs
• H. No further processing will occur until the Remote Lab AD server is marked as "Down" by the Administrator.

Answer: A

NEW QUESTION 16
......