HP Exam HPE6-A84 Topic 3 Question 25 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 25
Topic #: 3

Refer to the exhibit.

Aruba ClearPass Policy Manager (CPPM) is using the settings shown in the exhibit. You reference the tag shown in the exhibit in enforcement policies related to NASes of several types, including Aruba APs, Aruba gateways, and AOS-CX switches.

What should you do to ensure that clients are reclassified and receive the correct treatment based on the tag?

AChange the RADIUS action to [Aruba Wireless -Terminate Session] which is supported by all the NASes in question.

BChange the RADIUS action to [Aruba Wireless - Bounce Switch Port] which is supported by all the NASes in question.

CEnable profiling in each service using one of these enforcement profiles. Set the profiling action to the correct one for the NASes using that service.

DSet the Tags Update Action to No Action. Then instead enable the RADIUS CoAs using enforcement profiles in the rules that match clients with the tag shown in the exhibit.

Show Suggested Answer

Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, the tag shown in the exhibit is a Device Insight tag, which is used to classify and identify devices based on their behavior and characteristics. Device Insight tags can be used as conditions in enforcement policies to apply different actions or roles to devices based on their tags. However, in order to ensure that devices are reclassified and receive the correct treatment based on their tags, profiling must be enabled in each service that uses one of these enforcement profiles. Profiling is a feature that allows ClearPass to dynamically discover and profile devices on the network, and update their attributes and tags accordingly. Profiling also allows ClearPass to send RADIUS Change of Authorization (CoA) messages to the network access servers (NASes) that control the access of the devices, and instruct them to reauthenticate or terminate the sessions of the devices that have changed their tags. The profiling action must be set to the correct one for the NASes using that service, as different NASes may support different types of CoA messages. Therefore, option C is the correct answer.

by Joaquin at Aug 05, 2024, 12:08 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Angella

3 months ago

I think option C makes the most sense, as it ensures clients are reclassified accurately based on the tag.

upvoted 0 times

...

Tyra

3 months ago

But wouldn't setting the Tags Update Action to No Action and enabling RADIUS CoAs be more efficient?

upvoted 0 times

...

4 months ago

I agree with Kenneth. Going with Option C is the most comprehensive solution to address the requirements of reclassifying clients based on the tag across different NAS types.

upvoted 0 times

Antonio

3 months ago

I think enabling profiling in each service is the best approach to ensure clients are reclassified correctly.

upvoted 0 times

...

Rolande

3 months ago

Option C is definitely the way to go. It covers all the different NAS types we have.

upvoted 0 times

...

Tyra

4 months ago

I think we should change the RADIUS action to [Aruba Wireless -Terminate Session].

upvoted 0 times

...

Kenneth

4 months ago

Option C seems like the way to go. Enabling profiling in each service and setting the correct profiling action for each NAS type sounds like the best approach to ensure consistent client classification and treatment.

upvoted 0 times

Fidelia

4 months ago

Yes, enabling profiling for each service and setting the correct action for each NAS type should ensure accurate client treatment.

upvoted 0 times

...

Monte

4 months ago

I agree, option C seems like the most logical choice.

upvoted 0 times

...