Refer to the exhibit.


You have integrated the Cisco switch with ClearPass to do MAC-Auth for Cisco IP Phones. The phones connect to the network successfully but when you try to change the status of the device from the access tracker, you see only the ArubaOS Radius terminate session options and not the Cisco vendor terminate session options. What will you check to fix this issue?

• A. Verify if the ClearPass supports RADIUS Dynamic Authorization for the Cisco IP Phones doing MAC.AUTH.
• B. Verify that Cisco is chosen as the vendor name while adding the Cisco Switch under network devices.
• C. Verify if the Cisco IP Phone is actively connected to the switch to get the Cisco CoA options from ClearPass.
• D. Verify if the Enable RADIUS Dynamic Authorization option is checked for the Cisco switch added under the network devices.

A customer is troubleshooting a user that has complained about randomly having issues connecting the network with EAP PEAP using the Corporate Laptop. The initial checks are showing a number of authentication failures but no sign of issues with the ClearPass server or AD.
What can the Customer do to monitor this user Authentication trend closely over the next few days?

• A. configure an Alert using Failed Authentication template with Threshold 1. Interval 5 mins
• B. add to ClearPass Insight Dashboard the Authentication Status widget for this specific user
• C. add the user name in the Insight/Alert/Watchlitst and get the authentication failures notifications within 30 seconds
• D. configure a Report using Radius Failed Authentication template and schedule it to run every 5 mins

Refer to the exhibit.

You configured the Wired MAC - Auth service enforcement conditions with the Endpoint profiling data When mac-auth based clients connect to the network, ClearPass assigns Deny access profile. The customer has sent you the above screenshots How would you resolve the issue?

• A. Create a new condition in the first position with Type and operator as Authorization [Endpoint Repository] Category NOT_EXISTS with action as Limited access profile and ArubaOS wireless terminate session
• B. Create a new condition in last position with Type and operator as Tips:Role EQUALS [User Authenticated] with action as Allow access profile permitting any services and any ports to do profiling.
• C. Change the Rules evaluation algorithm in the Enforcement policy of HPE ArubaOS Mac auth policy as "select all matches" and add the CoA action as HPE Bounce switch port in the profiler tab.
• D. Create a new condition in first position with Type and operator as Authorization (Endpoint Repository]:Category NOT_EXISTS with action as Limited access profile allowing only DHCP service.

What is used to validate the EAP Certificate? (Select two.)

• A. Key usage
• B. Common Name
• C. SAN entries
• D. Server Identity
• E. Date