Refer to the exhibit.
Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?
A. to display a role name on the Self-registration receipt page
B. to send a firewall role back to the controller based on the Guest User's Role ID
C. to assign Controller roles to guests
D. to assign three roles of [Contractor], [Guest] and [Employee] to every guest user
E. to create additional account roles for guest administrators to assign to guest accounts
An administrator enabled the Pre-auth check for their guest self-registration.
At what stage in the registration process in this check performed?
A. after the user clicks the login button and after the NAD sends an authentication request
B. after the user self-registers but before the user logs in
C. after the user clicks the login button but before the NAD sends an authentication request
D. when a user is re-authenticating to the network
E. before the user self-registers
Refer to the exhibit.
Which statements accurately describe the cp82 ClearPass node? (Select two.)
A. It becomes the Publisher when the primary Publisher fails.
B. It operated as a Publisher in the same cluster as the primary Publisher when the primary is active.
C. It operated as a Publisher in a separate cluster when the Publisher is active.
D. It operates as a Subscriber when the Publisher is active.
E. It stays as a Subscriber when the Publisher fails.
Refer to the exhibit.
A customer wants to enable Publisher redundancy.
Based on the network topology diagram shown, which node should the network administrator configure as the standby Publisher for the Publisher in the main data center?
A. Subscriber in the main data center
B. Publisher in the regional office
C. any of the other three Publishers
D. Publisher in the mid-size branch
E. Publisher in the DMZ
What is the purpose of the Audit Viewer in the Monitoring section of ClearPass Policy Manager?
A. to audit client authentications
B. to display changes made to the ClearPass configuration
C. to display the entire configuration of the ClearPass Policy Manager
D. to audit the network for PCI compliance
E. to display system events like high CPU usage.
A client's authentication is failing and there are no entries in the ClearPass Access tracker. What is a possible reason for the authentication failure?
A. The user account has expired.
B. The client used a wrong password.
C. The shared secret between the NAD and ClearPass does not match.
D. The user's certificate is invalid.
E. The user is not found in the database.
Refer to the exhibit.
Based on the information shown on a client's laptop, what will happen next?
A. The web login page will be displayed.
B. The client will send a NAS authentication request to ClearPass.
C. ClearPass will send a NAS authentication request to the NAD.
D. the NAD will send an authentication request to ClearPass.
E. The user will be presented with a self-registration receipt.
Refer to the exhibit.
Based on the configuration of the Enforcement Profiles in the Onboard Authorization service shown, which Onboarding action will occur?
A. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.
B. The device will be disconnected from and reconnected to the network after Onboarding is completed.
C. The device's onboard authorization request will be denied.
D. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.
E. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.
An organization implements dual SSID Onboarding. The administrator used the Onboard service template to create services for dual SSID Onboarding.
Which statement accurately describes the outcome?
A. The Onboard Provisioning service is triggered when the user connects to the provisioning SSID to Onboard their device.
B. The Onboard Authorization service is triggered when the user connects to the secure SSID.
C. The Onboard Authorization service is triggered during the Onboarding process.
D. The device connects to the secure SSID for provisioning.
E. The Onboard Authorization service is never triggered.
Refer to the exhibit.
An Enforcement Profile has been created in the Policy Manager as shown. Which action will ClearPass take based on the Enforcement Profile?
A. It will send the Session-Timeout attribute in the RADIUS Access-Request packet to the NAD and the NAD will end the user's session after 600 seconds.
B. It will send the Session-Timeout attribute in the RADIUS Access-Accept packet to the User and the user's session will be terminated after 600 seconds.
C. It will count down 600 seconds and send a RADUIS CoA message to the NAD to end the user's session after this time is up.
D. It will count down 600 seconds and send a RADUIUS CoA message to the user to end the user's session after this time is up.
E. It will send the session -Timeout attribute in the RADIUS Access-Accept packet to the NAD and the NAD will end the user's session after 600 seconds.
