ACP Aruba ClearPass Policy Management 3

Question 1

In a ClearPass cluster deployment, what is the specific role of the Publisher node?

Accepted Answer

It serves as the primary configuration node that replicates settings to Subscriber nodes

Answer

It processes the majority of inbound RADIUS authentication requests

Answer

It handles all guest user registrations exclusively

Answer

It stores reporting data and generates compliance audit reports

Question 2

What does ClearPass Insight provide to network administrators?

Accepted Answer

Reporting, analytics dashboards, and visibility into authentication events and access trends

Answer

Real-time RADIUS packet capture and protocol debugging tools

Answer

Certificate lifecycle management with automatic renewal workflows

Answer

API-based bidirectional integration with third-party security platforms

Question 3

Which protocol does ClearPass support for authenticating and authorizing administrator logins to network infrastructure devices (routers and switches)?

Accepted Answer

TACACS+

Answer

DIAMETER

Answer

SNMP v3

Answer

Kerberos

Question 4

What is the ClearPass REST API primarily used for in enterprise deployments?

Accepted Answer

Programmatically integrating ClearPass with external systems and automating management tasks

Answer

Collecting SNMP traps from managed network devices

Answer

Streaming real-time authentication logs directly to SIEM platforms

Answer

Remotely upgrading ClearPass software versions across cluster nodes

Question 5

What is the purpose of ClearPass Extensions?

Accepted Answer

To integrate third-party applications or custom functionality using containerized add-ons

Answer

To add physical hardware modules to a ClearPass appliance for increased RADIUS throughput

Answer

To unlock additional authentication methods through software license activation

Answer

To extend the RADIUS accounting interval for long-lived user sessions

Question 6

In ClearPass, which mechanism allows automatic re-evaluation of a connected endpoint's access level if its posture status changes after initial authentication?

Accepted Answer

RADIUS Change of Authorization (CoA) triggered by OnGuard re-check

Answer

ClearPass Audit periodic scan

Answer

ClearPass Profiler re-fingerprinting

Answer

RADIUS Accounting interim-update processing

Question 7

What is a 'Static Host List' in ClearPass used for?

Accepted Answer

Storing a manually maintained list of MAC or IP addresses for authentication or device classification

Answer

Defining the IP addresses of ClearPass cluster publisher and subscriber nodes

Answer

Listing static routes configured on connected network access devices

Answer

Maintaining a whitelist of permitted RADIUS client (NAS) IP addresses