What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

• A.This removes the reliance on the known or unknown status for MAC authentication.
• B.All clients with unknown endpoints will be granted guest access regardless of authorization
• C.Client attempts will fail without an additional Authentication method applied.
• D.All clients with known endpoints will be granted guest access regardless of authorization.

Comment: *

Name: *

Email: *

Verification: *

Match the correct Profiling Collector with the Collector Type. Collector Types may be used more than once.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

When should a role mapping policy be used in an 802.1x service with Active Directory as the authentication source?

• A.When you want to match Active Directory attributes to a Aruba firewall role on a Aruba Network Access Device.
• B.When you want to translate and combine Active Directory attributes into ClearPass roles.
• C.When you want to enable attributes as roles directly without combining multiple attributes
• D.When you want to match Active Directory attributes directly to an enforcement policy.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What are two consequences of the Cache Timeout being set to 36000 seconds? (Select two.)

• A.ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate
• B.On a failed authentication attempt. ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.
• C.A user changing departments may not see their Department attribute change in AD reflected while authenticating until the Cache Timeout period has ended
• D.Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour period.
• E.The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period

Comment: *

Name: *

Email: *

Verification: *

What is the significance of using the [Allow ALL MAC AUTH] as an Authentication Method for Guests?

• A.All clients with known endpoints will be granted guest access regardless of authorization.
• B.Client attempts will fail without an additional Authentication method applied.
• C.All clients with unknown endpoints will be granted guest access regardless of authorization
• D.This removes the reliance on the known or unknown status for MAC authentication.

Comment: *

Name: *

Email: *

Verification: *