Exam 15: Aruba Certified Design Associate

Refer to the exhibit. Based on the Enforcement Policy configuration, when a user with Role Engineer connects to the network and the posture token assigned is Unknown, which Enforcement Profile will be applied?

A customer wants to make enforcement decisions during 802.1x authentication based on a client's Onguard posture token. What enforcement profile should be used in the health check service?

Which statement is true about the configuration of a generic LDAP server as an External Authentication server in ClearPass? (Choose three.)

Refer to the exhibit. Based on the Enforcement Profile configuration shown, which statement accurately describes what is sent?

Refer to the exhibit. Based on the Posture Policy configuration shown, above, which statement is true?

What types of files are stored in the Local Shared Folders database in ClearPass? (Choose two.)

Refer to the exhibit. When configuring a Web Login Page in ClearPass Guest, the information shown is displayed. What is the Address field value 'securelogin.arubanetworks.com' used for?

Refer to the exhibit. An AD user's department attribute value is configured as "Product Management". The user connects on Monday to a NAD that belongs to the Device Group HQ. Which role is assigned to the user in ClearPass?

Which checks are made with Onguard posture evaluation in ClearPass? (Choose three.)

Refer to the exhibit. An AD user's department attribute is configured as "HR". The user connects on Monday using an Android phone to an Aruba Controller that belongs to the Device Group Remote NAD. Which roles are assigned to the user in ClearPass? (Choose two.)

What is RADIUS CoA (RFC 3576) used for?

Refer to the exhibit. A guest to the Guest SSID and authenticates successfully using the guest php web login page. Based on the MAC Caching service information shown, which statement about the guest's MAC address is accurate?

In single SSID Onboarding, which method can be used in the Enforcement Policy to distinguish between a provisioned device and a device that has not gone through the Onboard workflow?

Refer to the exhibit. What does the Cache Timeout Value refer to?

What must be configured to enable RADIUS authentication with ClearPass on a network access device (NAD)? (Choose two.)

Refer to the exhibit. In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?

Refer to the exhibit. A user who is tagged with the ClearPass roles of Role_Engineer and developer, but not testqa, connects to the network with a corporate Windows laptop. Which Enforcement Profile is applied?

Which statement is true? (Choose two.)

Refer to the exhibit. Based on the information, what is the purpose of using [Time Source] for authorization?

A customer wants to implement Virtual IP redundancy, such that in case of a ClearPass server outage. 802.1x authentications will not be interrupted. The administrator has enabled a single Virtual IP address on two ClearPass servers. Which statement is true? (Choose two.)