When is it appropriate to use the built-in Local user database in ClearPass?

• A.In a large campus environment where Students and Contractors account for 35.000 entries that change weekly
• B.In a hospitality deployment for guest accounts created and managed by start
• C.In small-business environments where the user accounts rarely change and new accounts are uncommon.
• D.In a public-facing guest network environment where the guests are prompted to self-register

Comment: *

Name: *

Email: *

Verification: *

What are benefits of using Network Device Groups in ClearPass? (Select two.)

• A.Another way to add a customizable "attribute" field to reference when processing authentication requests
• B.Network Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group
• C.Can apply to both Network Access Devices (NADs) as wen as client machines as a way to filter authentication requests
• D.A Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group
• E.Allows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which user authentication request will match the service rules of the Policy Service shown?

• A.a wireless user connected to any SSID named "CORP"
• B.a wireless user connecting to any SSID on an Aruba Controller
• C.a wireless user connection would fail because of miss-configured service rules
• D.a wireless user connecting to an Aruba IAP on the SSID "CORP"

Comment: *

Name: *

Email: *

Verification: *

What is RADIUS Change of Authorization (CoA)?

• A.It allows ClearPass to transmit messages to the Network Attached Device/Network Attached Server (NAD/NAS) to modify a user's session status
• B.It allows clients to issue a privilege escalation request to ClearPass using RADIUS to switch to TACACS+
• C.It is a mechanism that enables ClearPass to assigned a User-Based Tunnel (UBT) between a switch and controller for Dynamic Segmentation
• D.It forces the client to re-authenticate upon roaming to an access point controlled by a foreign mobility controller.

Comment: *

Name: *

Email: *

Verification: *

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

• A.When you want to translate and combine Active Directory attributes into ClearPass roles.
• B.When you want to match Active Directory attributes directly to an enforcement policy.
• C.When you want to match Active Directory attributes to an Aruba firewall role on an Aruba Network Access Device.
• D.When you want to enable attributes as roles directly without combining multiple attributes.

Comment: *

Name: *

Email: *

Verification: *