Refer to the exhibit.

This Aruba Mobility Controller (MC) should authenticate managers who access the Web Ul to ClearPass Policy Manager (CPPM) ClearPass admins have asked you to use RADIUS and explained that the MC should accept managers' roles in Aruba-Admin-Role VSAs Which setting should you change to follow Aruba best security practices?

• A.Change the local user role to read-only
• B.Clear the MSCHAP check box
• C.Disable local authentication
• D.Change the default role to "guest-provisioning"

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An admin has created a WLAN that uses the settings shown in the exhibits (and has not otherwise adjusted the settings in the AAA profile) A client connects to the WLAN Under which circumstances will a client receive the default role assignment?

• A.The client has attempted 802 1X authentication, but the MC could not contact the authentication server
• B.The client has attempted 802 1X authentication, but failed to maintain a reliable connection, leading to a timeout error
• C.The client has passed 802 1X authentication, and the value in the Aruba-User-Role VSA matches a role on the MC
• D.The client has passed 802 1X authentication and the authentication server did not send an Aruba-User-Role VSA

Comment: *

Name: *

Email: *

Verification: *

What is one difference between EAP-Tunneled Layer security (EAP-TLS) and Protected EAP (PEAP)?

• A.EAP-TLS begins with the establishment of a TLS tunnel, but PEAP does not use a TLS tunnel as part of Its process
• B.EAP-TLS requires the supplicant to authenticate with a certificate, hut PEAP allows the supplicant to use a username and password.
• C.EAP-TLS creates a TLS tunnel for transmitting user credentials, while PEAP authenticates the server and supplicant during a TLS handshake.
• D.EAP-TLS creates a TLS tunnel for transmitting user credentials securely while PEAP protects user credentials with TKIP encryption.

Comment: *

Name: *

Email: *

Verification: *

Device A is contacting https://arubapedia.arubanetworks.com. The web server sends a certificate chain. What does the browser do as part of validating the web server certificate?

• A.It makes sure that the key in the certificate matches the key that DeviceA uses for HTTPS.
• B.It makes sure the certificate has a DNS SAN that matches arubapedia.arubanetworks.com
• C.It makes sure that the public key in the certificate matches DeviceA's private HTTPS key.
• D.It makes sure that the public key in the certificate matches a private key stored on DeviceA.

Comment: *

Name: *

Email: *

Verification: *

What is one benefit of enabling Enhanced Secure mode on an ArubaOS-Switch?

• A.Control Plane policing rate limits edge ports to mitigate DoS attacks on network servers.
• B.A self-signed certificate is automatically added to the switch trusted platform module (TPM).
• C.Insecure algorithms for protocol such as SSH are automatically disabled.
• D.All interfaces have 802.1X authentication enabled on them by default.

Comment: *

Name: *

Email: *

Verification: *