A customer has a ClearPass cluster deployment with one Publisher and one Subscriber configured as a Standby Publisher at the Headquarters DataCenter They also have a large remote site that is connected with an Aruba SD Branch solution over a two Mbps Internet connection. The Remote Site has two ClearPass servers acting as Subscribers. The solution implemented for the customer includes OnGuard, Guest Self Registration, and Employee 802. ix authentication. The client is complaining that users connecting to an IAP Clusters Guest SSID located at the Remote Site are experiencing a significant delay in accessing the Guest Captive Portal page.
What could be a possible cause of this behavior?

• A.The captive portal page was only created on the Publisher and requests are getting redirected to a Subscriber
• B.The guest page is not optimized to work with the client browser and a proper theme should be applied
• C.The ClearPass Cluster has no zones defined and the guest captive portal request is being redirected to the Publisher
• D.The configuration of the captive portal is pointing to a link located on one of the servers in the Headquarters

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit:

The customer complains that the user shown cannot log into the ClearPass Server as an administrator using the
[Policy Manager Admin Network Login Service]. What could be the reason for this?

• A.The local user authentication might be disabled
• B.The account created does not fit this purpose.
• C.The user might be used for a TACACS authentication
• D.The mapping on the role should be changed to [RADIUS Super Admin]

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit:





You configured the 802 1 x service enforcement conditions with the Endpoint profiling data. When the client connects to the network. ClearPass successfully profiles the client but the client always receives an incorrect enforcement profile The configurations in the Aruba controller are completed correctly.
What is the cause of the issue?

• A.An additional authorization source should be configured for profiling to work.
• B.The enforcement policy conditions configured with profiling data are not correct.
• C.The enforcement policy rules evaluation algorithm Is not configured correctly.
• D.The option, use cached roles and posture from previous sessions should be enabled.

Comment: *

Name: *

Email: *

Verification: *

How does the RadSec improve the RADIUS message exchange? (Select two.)

• A.It builds a TTLS tunnel between the NAD and ClearPass.
• B.It encrypts the entire RADIUS message.
• C.It can be used on an unsecured network or the Internet.
• D.Only the NAD needs to trust the ClearPass Certificate.
• E.It uses UDP to exchange the radius packets.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit:





You have configured an Onboard portal for single SSID provision. During testing you notice that the QuickConnect Application did not display the "Connect" button, only the finish button. To get connected the test user had to manually connect to the secure-HS-5007 SSID but was prompted for a username and password.
Using the screenshots as a reference, how would you fix this issue?

• A.Change the network settings to use EAP-TLS for the authentication protocol.
• B.Install a public signedHTTPs web server certificate on the ClearPass server.
• C.Check the network settings for the correct SSID name spelling.
• D.Configure the SSID to support both EAP-PEAP and EAP-TLS authentication method.

Comment: *

Name: *

Email: *

Verification: *