QUESTION: 17

Refer to the exhibit:

The customer complains that the user shown cannot log into the ClearPass Server as an administrator using the [Policy Manager Admin Network Login Service].
What could be the reason for this?

The user might be used for a TACACS authentication
The account created does not fit this purpose.
The mapping on the role should be changed to [RADIUS Super Admin]
The local user authentication might be disabled

Answer(s): B

Reveal Solution Next Question

QUESTION: 18

A customer is planning to implement machine and user authentication on infrastructure with one Aruba Controller and a single ClearPass Server What should the customer consider while designing this solution? (Select three.)

The Windows User must log off, restart or disconnect their machine to initiate a machine authentication before the cache expires.
The machine authentication status is written in the Multi-master cache on the ClearPass Server for 24 hrs.
Onboard must be used to install the Certificates on the personal devices to do the user and machine authentication.
The Customer should enable Multi-Master Cache Survivability as the Aruba Controller will not cache the machine state.
Machine Authentication only uses EAP TLS, as such a PKI infrastructure should be in place for machine authentication.
The customer does not need to worry about Multi-Master Cache Survivability because the Controller will also cache the machine state.

Answer(s): B,C,E

Reveal Solution Next Question

QUESTION: 19

A customer is complaining that some of the devices, in their manufacturing network, are not getting profiled while other loT devices from the same subnet have been correctly profiled. The network switches have been configured for DHCP IP helpers and IF-MAP has been configured on the Aruba Controllers.
What can the customer do to discover those devices as well? (Select two.)

Update the Fingerprints Dictionary to the latest in case new devices have been added.
Open a TAC case to help you troubleshoot the DHCP device profile functionality.
Add the ClearPass Server IP as an IP helper address on the default gateway as well.
Allow time for IF-MAP service on the controller to discover the new devices as well.
Manually create a new device fingerprint for the devices that are not being profiled.

Answer(s): D,E

Reveal Solution Next Question

QUESTION: 20

You are deploying ClearPass Policy Manager with Guest functionality for a customer with multiple Aruba Networks Mobility Controllers The customer wants to avoid SSL errors during guest access but due to company security policy cannot use a wildcard certificate on ClearPass or the Controllers.
What is the most efficient way to configure the customers guest solution? (Select two.)

Build multiple Web Login pages with vendor settings configured for each controller
Install the same public certificate on all Controllers with the common name "controller {company domain}"
Build one Web Login page with vendor settings for controller {company domain)
Install multiple public certificates with a different Common Name on each controller

Answer(s): A,B

Reveal Solution Next Question

Free HPE6-A77 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

QUESTION: 19

QUESTION: 20