Refer to the exhibit.

What does Search Base Dn do when joining an Active Directory domain? (Choose two.)

• A.validates the connection details entered in the Connection Details
• B.searches for the Base DN (Distinguished Name) based on what was typed in the field
• C.sets the starting point in the directory tree for the Base DN (Distinguished Name) search
• D.updates the Base DN (Distinguished Name) in Active Directory if no match is found
• E.runs an Active Directory query that returns all results along with any matching the entered Base DN (Distinguished Name)

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

When creating a new ClearPass Service, the [Time Source] has been added as an authorization source.
What time source is ClearPass referencing?

• A.the NTP (Network Time Protocol) source indicated in the Cluster settings
• B.the local clock of the ClearPass server doing the authentication
• C.the ClearPass server where Insight Master has been enabled
• D.the local time setting found on the authenticating client machine

Comment: *

Name: *

Email: *

Verification: *

What is RADIUS Change of Authorization (CoA)?

• A.It allows ClearPass to transmit messages to the Network Attached Device/Network Attached Server (NAD/NAS) to modify a user's session status
• B.It allows clients to issue a privilege escalation request to ClearPass using RADIUS to switch to TACACS+
• C.It is a mechanism that enables ClearPass to assigned a User-Based Tunnel (UBT) between a switch and controller for Dynamic Segmentation
• D.It forces the client to re-authenticate upon roaming to an access point controlled by a foreign mobility controller.

Comment: *

Name: *

Email: *

Verification: *

What is an effect of the Cache Timeout setting on the authentication source settings for Active Directory?

• A.ClearPass will validate the user credentials, then, for the duration of the cache, ClearPass will just fetch account attributes.
• B.The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the attributes.
• C.ClearPass will validate the user credentials on the first attempt, then will always fetch the account attributes.
• D.The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the A/D server by caching the credentials.

Comment: *

Name: *

Email: *

Verification: *

When using Guest Authentication with MAC Caching service template, which statements are true?
(Choose two.)

• A.The endpoint status of the client will be treated as "known" the first time the client associates to the network.
• B.Which wireless SSID and wireless controller must be indicated when configuring the template.
• C.The guest authentication is provided better security than without using MAC caching.
• D.The client will be required to re-enter their credentials even if still within the MAC-Auth Expiry term.

Comment: *

Name: *

Email: *

Verification: *