Refer to the exhibit:





You have configured Onboard andcannot get it working The customer has sentyouthe above screenshots How would you resolve the issue?

• A.Re-provision the client by running the QuickConnect application as Administrator
• B.Copy the [EAP-TLS with OSCP Enabled] authentication method and set the correct OCSP URL
• C.Reconnect the client and select the correct certificate when prompted
• D.Install a public signed server authentication certificate on the ClearPass server for EAP

Comment: *

Name: *

Email: *

Verification: *

A Customer has these requirements:
* 2.000 loT endpoints that use MAC authentication
* 6,000 endpoints using a mix of username/password and certificate (Corporate/BYOD) based authentication
* 1,000 guest endpoints at peak usage that use guest self-registration
* 1500 BYOD devices estimated as 3 devices per User (500 users)
* 2,500 endpoints that have OnGuard installed and connect on a daily basis What licenses should be installed to meet customer requirements?

• A.11,500 Access, 500 Onboard, 2,500 Onguard
• B.9,000 Access, 500 Onboard. 2.500 Onguard
• C.13.000 Access, 1.500 Onboard, 2,500 Onguard
• D.11,500 Access, 1,500 Onboard, 2.500 Onguard

Comment: *

Name: *

Email: *

Verification: *

What is the Secure SSID {otherwise referred to as Single SSID) OnBoard deployment service workflow?

• A.OnBoard Provisioning RADIUS service, OnBoard Authorization RADIUS service. OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service
• B.OnBoard Provisioning RADIUS service, OnBoard Pre-Auth RADIUS service, OnBoard Authorization Application service. OnBoard Provisioning RADIUS service
• C.OnBoard Provisioning RADIUS service, OnBoard Pre-Auth Application service. OnBoard Authorization Application service, OnBoard Provisioning RADIUS service
• D.OnBoard Provisioning RADIUS service, OnBoard Authorization Application service, OnBoard Pre-Auth Application service, OnBoard Provisioning RADIUS service

Comment: *

Name: *

Email: *

Verification: *

Which statements are true about Aruba downloadable user roles? (Select three.)

• A.Can be applied only on ports or WLAN users authenticated by ClearPass.
• B.Administering downloadable user roles can be difficult for a large enterprise
• C.Can use these roles for other authentication methods not involving ClearPass
• D.Aruba downloadable user role are universally available across the environment
• E.Downloadable role names must be defined in Aruba switch or controller
• F.Aruba downloadable user role is a built in enforcementtemplate in ClearPass

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit:




A customer has configured the Aruba Controller for administrative authentication using ClearPass as a TACACS server. During testing, the read-only user is getting the root access role. What could be a possible reason for this behavior? (Select two.)

• A.The ClearPass user role associated to the read-only user is wrong
• B.The Controllers Admin Authentication Options Default role is mapped to toot.
• C.On the Controller, the TACAC$ authentication server Is not configured for Session authorization
• D.The Controller Server Group Match Rules are changing the user role
• E.The read-only enforcement profile is mapped to the root role

Comment: *

Name: *

Email: *

Verification: *