ACP Aruba ClearPass Policy Management 2

Question 1

In ClearPass Policy Manager, what is the purpose of a Role Mapping Policy?

Accepted Answer

To map user or device attributes to defined roles used in authorization decisions

Answer

To assign IP addresses to authenticated clients based on subnet location

Answer

To configure the priority order of multiple authentication sources

Answer

To create static VLAN definitions for specific network segments

Question 2

What is a ClearPass Enforcement Profile?

Accepted Answer

A configuration defining which access parameters (VLAN, ACL, etc.) to return when a role is matched

Answer

A document describing a network administrator's access privileges

Answer

A compliance checklist used during endpoint posture assessment

Answer

A template for creating new Active Directory authentication sources

Question 3

ClearPass OnGuard is used to:

Accepted Answer

Perform health and posture checks on endpoints before granting full network access

Answer

Configure firewall rules on perimeter network devices

Answer

Generate compliance reports on network utilization and bandwidth

Answer

Provision wireless access point firmware updates automatically

Question 4

Which ClearPass feature automatically identifies and categorizes devices based on network behavior, DHCP fingerprints, and HTTP attributes?

Accepted Answer

Device Profiler

Answer

ClearPass Insight

Answer

Policy Simulator

Answer

ClearPass OnBoard

Question 5

What does the ClearPass Policy Simulation tool allow administrators to do?

Accepted Answer

Test how services and policies respond to hypothetical authentication requests without real clients

Answer

Test enforcement profiles against live traffic without affecting production users

Answer

Simulate RF coverage changes in wireless controller deployments

Answer

Preview firmware changes before committing them to managed access points

Question 6

Which Aruba Vendor-Specific Attribute (VSA) is commonly used in a ClearPass Enforcement Profile to place a wireless user into a specific VLAN on an Aruba controller?

Accepted Answer

Aruba-User-Vlan

Answer

Cisco-AVPair

Answer

Filter-ID

Answer

Tunnel-Private-Group-ID

Question 7

What is the primary function of a ClearPass Enforcement Policy?

Accepted Answer

To match assigned roles and posture results to enforcement profiles for final access decisions

Answer

To define the encryption algorithms used for RADIUS communication

Answer

To schedule automatic configuration backups of the ClearPass database

Answer

To define the priority order of authentication sources within a service