While configuring a guest solution, the customer is requesting that guest user receive access for four hours from their first login. Which Guest Account Expiration would you select?
A. expire_after
B. do_expire
C. expire_time
D. expire_ postlogin
Refer to the exhibit: You have configured Onboard but me customer could not onboard one of his devices and has sent you the above screenshots. How could you resolve the issue?
A. Instruct the user to delete the profile on one of their other BYOD devices.
B. Instruct the user to run the Quick connect application in Sponsor Mode.
C. Increase the maximum number of devices allowed by the individual user account.
D. Increase the maximum number of devices that all users can provision to 3.
A corporate ClearPass Cluster with two servers located at a single site, has both Management and Data port IP addresses configured. The Management port IPs are in the DataCenter networks subnet, while the Data port IPs are in the DMZ. What is the difference between using one Virtual IP for the AAA traffic versus sending AAA requests to the physical IPs for each server? (Select two.)
A. The failover can be accomplished only by using Virtual IP.
B. The Individual IPs can provide failover and load balancing.
C. One Virtual IP can be used together with the individual server IPs for load balancing.
D. By using the Virtual IP, the failover convergence is faster than using individual server IPs.
E. Using the one Virtual IP can provide failover and load balancing.
You have configured a Guest SSID with Captive-portal Web Authentication and MAC authentication The MAC caching expiry time set to 12 hours and the Guest Account expiration time is set to 8 hours. What will happen if the guest were to disconnect from the SSID and re-connect 9 hours later?
A. The client will tail the MAC authentication and be denied access to the Guest SSID.
B. The client will successfully pass the mac authentication until the mac caching time expires.
C. The client will successfully pass the MAC authentication but still be redirected to captive portal page.
D. The client will fail the MAC authentication and will be redirected to the Captive-portal login page.
Refer to the exhibit:
What is true about the Insight Master Server? {Select two)
A. It Is recommended to have an insight server for every zone to limit the traffic between sites.
B. The Publisher is selected by default as Insight Master Server but It can be changed.
C. There is no need to configure an insight Master Server when using default reports and alerts.
D. An insight Master Server should be selected in order to configure reports and alerts.
E. When enabling a server to be the insight Master any existing insight Master is overwritten.
Refer to the exhibit:
The customer created a new enforcement policy condition to allow VIP Users access without additional security compliance checks hut cannot gel it working. The customer has sent you the above screenshots. How would you resolve the issue?
A. Ask the VIP user to complete the one time web health check to get the VIP profile.
B. Set the Enforcement Policy rules evaluation algorithm to evaluate all.
C. Include VIP User role along with the Healthy posture enforcement condition.
D. Modify the Enforcement Policy and re-order the VIP user condition to the lop.
Refer to the exhibit:
The customer configured an 802.1x service with different enforcement actions for personal and corporate
laptops. The corporate laptops are always being redirected to the BYOD Portal. The customer has sent
you the above screenshots.
How would you resolve the issue? (Select two)
A. Modify the enforcement policy and change the rule evaluation algorithm to select first match
B. Modify the enforcement policy and re-order the condition with posture not_equals to healthy as the sixth condition
C. Modify the enforcement policy and re-order the EAP-PEAP with [user authenticated] rule to the last condition.
D. Modify the enforcement policy and re-order the condition with Posture - Unknown as the fifth condition
E. Remove the EAP-PEAP with [user authenticated] condition for Onboard and create another service
Refer to the exhibit:
A customer with multiple Aruba Controllers has just installed a new certificate for "*.customerdomain com" on all Aruba Controllers. While testing the existing guest Self-Registration page the customer noticed that the logins are failing. While troubleshooting they are finding no entries in the Event Viewer or Access Tracker for the tests. Suspecting that the Aruba Controllers may not be properly posting the credentials from the guest browser, they open the NAS Vendor Settings for the Guest Self-Registration Page. From the screen shown, how can you fix the errors?
A. Change the "IP Address: field to" securelogin.customerdomain.com.
B. Change the "Secure Login:" field to "Use Vendor Default".
C. Change the "IP Address field to "captiveportal-login.customerdomain.com".
D. Add PTR records on the DNS server for "securelogin.arubanetworks.com".
Refer to the exhibit:
You configured the 802 1 x service enforcement conditions with the Endpoint profiling data. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly. What is the cause of the issue?
A. An additional authorization source should be configured for profiling to work.
B. The enforcement policy conditions configured with profiling data are not correct.
C. The enforcement policy rules evaluation algorithm Is not configured correctly.
D. The option, use cached roles and posture from previous sessions should be enabled.
What is the Secure SSID {otherwise referred to as Single SSID) OnBoard deployment service workflow?
A. OnBoard Provisioning RADIUS service, OnBoard Authorization RADIUS service. OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service
B. OnBoard Provisioning RADIUS service, OnBoard Pre-Auth RADIUS service, OnBoard Authorization Application service. OnBoard Provisioning RADIUS service
C. OnBoard Provisioning RADIUS service, OnBoard Pre-Auth Application service. OnBoard Authorization Application service, OnBoard Provisioning RADIUS service
D. OnBoard Provisioning RADIUS service, OnBoard Authorization Application service, OnBoard Pre- Auth Application service, OnBoard Provisioning RADIUS service
