Which must be taken into account if a customer wants to use the DHCP collector with 802.1X authentication?
A.
Because DHCP fingerprinted is a Layer-3 function, it cannot t>e used with an 802 1X authentication service.
B.
The client needs to be granted limited access before the enforcement policy can take into account the device type
C.
When a client sends an authentication request to ClearPass, the profiler will also gather DHCP information
D.
The client needs to connect to an open network first to be profiled, then shifted to the secure 802.1x network.
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 10
When joining ClearPass to an Active Directory (AD) domain, what information is required? (Select two.)
A.
ClearPass Policy Manager (CPPM) enterprise credentials.
B.
Domain Administrator credentials with at least read access
C.
Domain User credentials with read-write access
D.
Cache Timeout value set to at least 10 hours
E.
Fully Qualified Domain Name (FQDN) of the AD Domain Controller.
Answer:
BE
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 11
What is a function of the posture token in ClearPass OnGuard? (Select two )
A.
Identifies clients that are not security compliant
B.
Initiates the Auto-Remediation process
C.
Controls access to network resources
D.
Denies access to unhealthy clients
E.
indicates the Health Status of the Client
Answer:
AE
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 12
Which fingerprint collectors can help to distinguish between an iPhone and an iPad? (Select two.)
A.
IF-MAP
B.
MAC OUI
C.
HTTP
D.
TCP header capture
E.
SNMP
Answer:
AC
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Explanation: In some cases, DHCP fingerprinting alone cannot fully classify a device. A common example is the Apple family of smart devices; for example, DHCP fingerprints cannot distinguish between an iPad and an iPhone. In these scenarios, user-agent strings sent by browsers in the HTTP protocol are useful to further refine classification results. User-agent strings are collected from the following: ClearPass Guest ClearPass Onboard Aruba controller through an IF-MAP (Interface for Metadata Access Points) interface
Discussions
0/ 1000
Question 13
What needs to be configured for ClearPass use an enforcement rule base on client Data Cap?
A.
Interim Accounting on the Network Access Device (NAD).
B.
Enable Active Sessions in ClearPass Guest
C.
Enable Logging of Accounting Start-Stop packets.
D.
Make sure the Endpoint Profiling is configured
Answer:
A
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 14
A customer is setting up Guest access with ClearPass. They are considering using 802.1X for both the Employee network and the Guest network. What are two issues the customer may encounter when deploying 802.1X with the Guest network? (Select two)
A.
the lack of encryption during the authentication process
B.
ClearPass win not be able to enforce individual Access Control policies.
C.
the high level of complexity for users to join the guest network
D.
Guests will not be able to be uniquely identified.
E.
difficult to maintain in an environment with a large number of transient guest users
Answer:
CE
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 15
DRAG DROP Match the ClearPass system description to the best term Options are used only once.
Answer:
None
User Votes:
Explanation: The correct order is: OnGuard, OnBoard, Profiler, Policy Manager, Insight