Refer to the screenshot below of a MAC Caching service:
A guest connects to the Guest SSID and authenticates successfully using the guest.php web login page. Which of the following is true?
A. Their MAC address will be visible in the Endpoints table with Known Status.
B. Their MAC address will be visible in the Endpoints table with Unknown Status.
C. Their MAC address will be visible in the Guest User Repository with Known Status.
D. Their MAC address will be visible in the Guest User Repository with Unknown Status.
E. Their MAC address will be deleted from the Endpoints table.
Refer to the screen capture below: Based on the Translation Rule configuration shown above, which of the following statements is true?
A. A user from group MatchAdmin will be assigned the operator profile of IT Administrators.
B. All active directory users will be assigned the operator profile of IT Administrators.
C. All admin users will be assigned the operator profile of IT Administrators.
D. A user from group Administrators will be assigned the operator profile of IT Administrators.
E. This translation rule is not valid for Active Directory administrators.
Refer to the screenshot below:
At which stage of the onboard process is workspace installed?
A. Pre-provisioning stage
B. Provisioning stage
C. Authentication stage
D. After authentication stage
Refer to the screenshot below: This authentication method is applied to a service processing EAP-TLS authentications. Which of the following is FALSE?
A. Devices with revoked certificates will not be allowed access
B. Devices with deleted certificates will not be allowed access
C. Devices will perform OCSP check to their laptop's localhost OCSP server
D. Devices will perform OCSP check with Clearpass
Which of the following device types support Exchange ActiveSync configuration with Onboard?
A. Windows laptop
B. Apple iOS device
C. Android device
D. Mac OS X device
E. Linux Laptop
A Publisher node in a cluster goes down and Subscribers are no longer able to reach the publisher. Which of the following is true? (Choose 2).
A. Users authenticating with the Publisher node continue to authenticate.
B. Users authenticating with the Subscriber nodes are no longer able to authenticate.
C. Users authenticating with the Publisher node are no longer able to authenticate.
D. Users authenticating with the Subscriber nodes continue to authenticate.
E. No users can authenticate to either the Publisher or Subscriber nodes.
Which of the following statements is true about the Clearpass hardware appliances?
A. DHCP can be used to assign IP addresses to management and data ports.
B. Both Management and Data Ports must be configured.
C. Clearpass has a default management IP of 172.16.0.254.
D. Only static IP addresses are allowed on the management and data ports.
E. The maximum number of devices supported is 5000.
Shown here is an Aruba Instant configuration screenshot What is the purpose of enabling the 'Dynamic RADIUS proxy' feature?
A. The Instant AP will proxy all RADIUS Access-Requests sent to it from clients and will forward these to ClearPass.
B. The Instant AP will send a RADIUS Access-Reject packet to other Instant APs in the cluster if credentials are incorrect, to reduce the number of RADIUS requests sent to ClearPass.
C. All Instant APs in the cluster will use the Virtual Controller IP as the Source IP for RADIUS requests.
D. All Instant APs in the cluster will use the Virtual Controller IP as the Destination IP for RADIUS requests.
E. The Instant AP will proxy all RADIUS Access-Requests sent to it from Clearpass and will forward these to the clients.
Refer to the following configuration for a VLAN Enforcement Policy: Which of the following statements is true for the above configuration?
A. This profile will be applied to requests coming from an end user in the Device Group HQ.
B. This profile will be applied to requests coming from a Network Access Device in the Device Group HQ.
C. The profile will be applied to requests processed by a ClearPass appliance in Device Group HQ.
D. This profile will be applied to all users.
E. This profile will be applied to RADIUS requests that have timed out after 10800 seconds.
Which of the following statements is NOT true about OnGuard? (Choose 2)
A. It is used to identify and remove any malware/viruses.
B. It is used to ensure that Antivirus/Antispyware programs are running and are up to date as desired.
C. It supports both Windows and Mac OS X clients.
D. It only supports 802.1X authentication.
E. It supports both a persistent and web based agent.
