HP Exam HPE6-A84 Topic 8 Question 35 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 35
Topic #: 8

Refer to the scenario.

A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune).

The customer wants to improve security for the network edge. You are helping the customer design a ClearPass deployment for this purpose. Aruba network devices will authenticate wireless and wired clients to an Aruba ClearPass Policy Manager (CPPM) cluster (which uses version 6.10).

The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Azure AD shows that they have accounts in Azure AD. To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions.

You are planning to use Azure AD as the authentication source in 802.1X services.

What should you make sure that the customer understands is required?

AAn app registration on Azure AD that references the CPPM's FQDN

BWindows 365 subscriptions

CCPPM's RADIUS certificate was imported as trusted in the Azure AD directory

DAzure AD Domain Services

Show Suggested Answer

Suggested Answer: A

To use Azure AD as the authentication source in 802.1X services, you need to configure CPPM as a SAML service provider and Azure AD as a SAML identity provider. This allows CPPM to use Azure AD for user authentication and role mapping. To do this, you need to create an app registration on Azure AD that references the CPPM's FQDN as the reply URL and the entity ID.You also need to grant the app registration the required permissions to access user information from Azure AD1

by Emerson at Dec 06, 2024, 03:01 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Serina

5 days ago

Ah, I see the key is authenticating wireless and wired clients using Azure AD. The ClearPass integration is crucial for that.

upvoted 0 times

...

Walker

7 days ago

I think the customer should understand that an app registration on Azure AD that references the CPPM's FQDN is required.

upvoted 0 times

...