HPE Aruba Networking switches are implementing MAC-Auth to HPE Aruba Networking ClearPass Policy Manager (CPPM) for a company's printers. The company wants to quarantine a client that spoofs a legitimate printer's MAC address. You plan to add a rule to the MAC-Auth service enforcement policy for this purpose. What condition should you include?

• A.Endpoint Compliance EQUALS false
• B.Endpoint Device Insight Tag EXISTS
• C.Authorization: [Endpoints Repository] Compromised EQUALS true
• D.Authorization: [Endpoints Repository] Conflict EQUALS true

Comment: *

Name: *

Email: *

Verification: *

A company has AOS-CX switches and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants switches to implement 802.1X authentication to CPPM and download user roles.
What is one task that you must complete on the switches to support this use case?

• A.Specify CPPM as the RADIUS server with the exact CN in CPPM's HTTPS certificate.
• B.Install the root CA certificate for CPPM's RADIUS certificate in a TA profile on the switches.
• C.Configure empty user-roles with names that match enforcement profile names on CPPM.
• D.Specify a ClearPass username and password that match the name and RADIUS secret in a CPPM network device entry.

Comment: *

Name: *

Email: *

Verification: *

You are using OpenSSL to obtain a certificate signed by a Certification Authority (CA). You have entered this command:
openssl req -new -out file1.pem -newkey rsa:3072 -keyout file2.pem
Enter PEM pass phrase: **********
Verifying - Enter PEM pass phrase: **********
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:California
Locality Name (eg, city) []:Sunnyvale
Organization Name (eg, company) [Internet Widgits Pty Ltd]:example.com
Organizational Unit Name (eg, section) []:Infrastructure
Common Name (e.g. server FQDN or YOUR name) []:radius.example.com
What is one guideline for continuing to obtain a certificate?

• A.You should use a third-party tool to encrypt file2.pem before sending it and file1.pem to the CA.
• B.You should concatenate file1.pem and file2.pem into a single file, and submit that to the desired CA to sign.
• C.You should submit file1.pem, but not file2.pem, to the desired CA to sign.
• D.You should submit file2.pem, but not file1.pem, to the desired CA to sign.

Comment: *

Name: *

Email: *

Verification: *

HPE Aruba Networking ClearPass Policy Manager (CPPM) uses a service to authenticate clients. You are now adding the Endpoints Repository as an authorization source for the service, and you want to add rules to the service's policies that apply different access levels based, in part, on a client's device category. You need to ensure that CPPM can apply the new correct access level after discovering new clients' categories.
What should you enable on the service?

• A.The Posture Compliance option in the Service tab
• B.The Profile Endpoints option in the Service tab
• C.The Use cached Roles and Posture attributes from previous sessions option in the Enforcement tab
• D.The Audit End-host option in the Service tab

Comment: *

Name: *

Email: *

Verification: *

A company has a variety of HPE Aruba Networking solutions, including an HPE Aruba Networking infrastructure and HPE Aruba Networking ClearPass Policy Manager (CPPM). The company passes traffic from the corporate LAN destined to the data center through a third-party SRX firewall. The company would like to further protect itself from internal threats. What is one solution that you can recommend?

• A.Have the third-party firewall send Syslogs to CPPM, which can work with network devices to lock internal attackers out of the network.
• B.Add ClearPass Device Insight (CPDI) to the solution, integrate it with the third-party firewall to develop more complete device profiles.
• C.Configure CPPM to poll the third-party firewall for a broad array of information about internal clients, such as profile and posture.
• D.Use tunnel mode SSIDs and user-based tunneling (UBT) on AOS-CX switches to pass all internal traffic directly through the third-party firewall.

Comment: *

Name: *

Email: *

Verification: *