Aruba ClearPass Policy Management Flashcards
7 cards from real ACP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Aruba ClearPass Policy Management flashcards as text
In a ClearPass cluster deployment, what is the specific role of the Publisher node?
Answer: It serves as the primary configuration node that replicates settings to Subscriber nodes
In a ClearPass cluster, the Publisher is the sole writable configuration node; all administrative changes are made on the Publisher and automatically synchronized out to Subscriber nodes.
What does ClearPass Insight provide to network administrators?
Answer: Reporting, analytics dashboards, and visibility into authentication events and access trends
ClearPass Insight is the built-in reporting and analytics module that transforms raw authentication logs into visual dashboards, trend reports, and exportable compliance data.
Which protocol does ClearPass support for authenticating and authorizing administrator logins to network infrastructure devices (routers and switches)?
Answer: TACACS+
ClearPass supports TACACS+ (Terminal Access Controller Access-Control System Plus) specifically for network device administration, enabling per-command authorization for CLI access to routers and switches.
What is the ClearPass REST API primarily used for in enterprise deployments?
Answer: Programmatically integrating ClearPass with external systems and automating management tasks
The ClearPass REST API uses standard HTTP methods to allow external scripts and systems to programmatically create guest accounts, query endpoint profiles, manage services, and automate other administrative operations.
What is the purpose of ClearPass Extensions?
Answer: To integrate third-party applications or custom functionality using containerized add-ons
ClearPass Extensions allow administrators to install Docker-based containerized applications directly within ClearPass, enabling integrations with MDM solutions, security tools, and custom enterprise platforms.
In ClearPass, which mechanism allows automatic re-evaluation of a connected endpoint's access level if its posture status changes after initial authentication?
Answer: RADIUS Change of Authorization (CoA) triggered by OnGuard re-check
ClearPass OnGuard performs periodic posture re-checks after initial authentication and can trigger a RADIUS CoA message to dynamically modify a user's access level if their device becomes non-compliant.
What is a 'Static Host List' in ClearPass used for?
Answer: Storing a manually maintained list of MAC or IP addresses for authentication or device classification
A Static Host List in ClearPass is a manually maintained repository of MAC addresses, IP addresses, or subnets that can serve as an authentication source or device category input, useful for headless devices that cannot perform 802.1X.