Refer to the exhibit.
A client is attempting to authenticate using their Windows account with a bad password. If the Remote Lab AD server is down for maintenance, what will be the expected result?
A. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and receive a result of Active Directory Authentication failed. No further processing will occur.
B. ClearPass try either server Backup 1 or Backup 2 depending on which has responded the fastest in prior attempts to authenticate ClearPass will then receive a result of Active Directory Authentication failed. No further processing will occur.
C. ClearPass receives a timeout attempt when trying the Remote Lab AD server first. It will then try the server Backup 1 and Backup 2; both will send a result authentication failed.
D. ClearPass receive a timeout attempt when trying the Remote Lab AD server first. No further processing will occur until the Remote Lab AD server is marked as "Down" by the Administrator.
Sponsorship has been enabled on the guest network. A guest user connects and completes the self-registration form indicating a valid sponsor. The guest then clicks submit.
What is the current state of the guest account?
A. The guest account is created in an enabled state with the "Log In" button functional.
B. The guest account is created in disabled state, the "Log In" button will appear only after the sponsor approval process is completed.
C. The guest account is created in a disabled state with the "Log In" button grayed out.
D. The guest account is not yet created and remains in a disabled state. There is not "Log In" button yet displayed.
Which ClearPass feature assesses endpoint context and client device type?
A. Profiling
B. Captive Portal
C. Onboard
D. Posture
Refer to the exhibit.
What are two consequences of the Cache Timeout being set to 36000 seconds? (Choose two.)
A. ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.
B. Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.
C. The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.
D. A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended.
E. On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.
Which statement is true about OnGuard? (Choose two.)
A. It is used to ensure that Antivirus/Antispyware programs are running
B. It supports both Windows and Mac OS X clients
C. It is used to identify and remove any malware/viruses
D. It only supports 802.1X authentication
Which are valid enforcement profile types? (Choose two.)
A. ClearPass Entity Update Enforcement
B. Aruba Script Enforcement
C. Policy Service Enforcement
D. RADIUS Change of Authorization (CoA)
Which most accurately describes the "Select All Matches" rule evaluation algorithm in Enforcement Policies?
A. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied and the rule matching stops.
B. All rules are checked, and if there is no match, no Enforcement profile is applied.
C. All rules are checked for any matching rules and their respective Enforcement profiles are applied.
D. Each rule is checked, and once a match is found, the Enforcement profile assigned to that rule is applied, along with the default Enforcement profile.
Aruba self-registration with sponsorship is a solution best applied to which type of network?
A. a large corporate environment with hundreds of contractors requiring wireless access to printers and internet but no other guest access is allowed
B. a chain of auto part stores where employees are assigned mobile devices using a Mobile Device Manager (MDM) and public wireless is available for customers
C. a hotel where hundreds of guests are checked in and out of the building daily that may want access to wireless internet
D. a chain of coffee shops using in a public downtown area with a high amount of guest turnover needing access to public wireless
What is the benefit of installing a wild card certificate for captive portal authentication?
A. Wild card certificates provide greater security than normal certificates.
B. Allows different certificates for each controller for increased security.
C. Guests no longer are required to validate certificates during captive portal.
D. Allows the single wild card certificate to be installed on all controllers in the environment.
Which Authorization Source support device profile enforcement?
A. OnGuard Repository
B. Local user Repository
C. Guest User Repository
D. Endpoint Repository
