When using Guest Authentication with MAC Caching service template, which statements are true?
(Choose two.)

• A.The endpoint status of the client will be treated as "known" the first time the client associates to the network.
• B.The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.
• C.Which wireless SSID and wireless controller must be indicated when configuring the template.
• D.The guest authentication is provided better security than without using MAC caching.

Comment: *

Name: *

Email: *

Verification: *

A customer is setting up Guest access with ClearPass. They are considering using 802.1X for both the Employee network and the Guest network. What are two issues the customer may encounter when deploying
802.1X with the Guest network? (Select two)

• A.the lack of encryption during the authentication process
• B.ClearPass win not be able to enforce individual Access Control policies.
• C.Guests will not be able to be uniquely identified.
• D.the high level of complexity for users to join the guest network
• E.difficult to maintain in an environment with a large number of transient guest users

Comment: *

Name: *

Email: *

Verification: *

Which are valid enforcement profile types? (Select two)

• A.Policy Service Enforcement
• B.Aruba Script Enforcement
• C.ClearPass Entity Update Enforcement
• D.RADIUS Change of Authorization (CoA)

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

what will be the enforcement for the user "nell"?

• A.Allow Full Access
• B.Secure Corp BYOD Access
• C.Allow internet Only Access
• D.Corp Secure Contractor

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What are two consequences of the Cache Timeout being set to 36000 seconds? (Select two.)

• A.Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.
• B.ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.
• C.On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.
• D.The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.
• E.A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended.

Comment: *

Name: *

Email: *

Verification: *