HPE6-A82 Aruba Certified ClearPass Associate Exam Questions and Answers

ClearPass will cache all user and machine attributes from AD every 10 hours in anticipation of one of those users or machines attempting to authenticate.

Less traffic is required between ClearPass and the AD server when re-authenticating within a 10 hour

period.

The Cache Timeout is designed to reduce the amount of traffic between ClearPass and the AD server by caching user credentials for a 10 hour period.

A user changing departments may not see their Department attribute change in AD reflected while

authenticating until the Cache Timeout period has ended.

On a failed authentication attempt, ClearPass will consider any subsequent attempts within 10 hours as total failed attempts before blacklisting the client.

a wireless user connection would fail because of miss-configured service rules

a wireless user connected to any SSID named "CORP"

a wireless user connecting to any SSID on an Aruba Controller

a wireless user connecting to an Aruba IAP on the SSID "CORP"

This removes the reliance on the known or unknown status for MAC authentication.

All clients with unknown endpoints will be granted guest access regardless of authorization

Client attempts will fail without an additional Authentication method applied.

All clients with known endpoints will be granted guest access regardless of authorization.

DHCP fingerprinting

IF-MAP

SNMP

HTTP user agents

NMAP

Requires the purchase of a supported Cisco Access Point licensed as an Aruoa Monitor Mode AP. to then act as !he sensor

Forwards DHCP and HTTP user-agent info to ClearPass using Control and Datagram Transport Layer Security (DTLS) encapsulation

Gathers raw endpoint data from Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP)

Forwards DHCP and HTTP user-agent info to ClearPass using RADIUS accounting packets

Requires a Cisco Smart Net license to be installed on the Network Access Device (NAD) utilizing the feature