Question 1

Which option supports DHCP profiling for devices in a network?

Aconfiguring ClearPass as a DHCP relay for the client

BDHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not
necessary

Cenabling the DHCP server to profile endpoints and forward meta-data to ClearPass

Denabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

Answer : D

Question 2

What are benefits of using Network Device Groups in ClearPass? (Select two.)

AAllows Service selection rules to match based upon which Network Device Group the Network Access Device (NAD) belongs to

BNetwork Access Devices (NADs) only require Aruba factory installed certificates to join a Network Device Group

CA Network Access Device is must be discovered by ClearPass prior to be added to a Network Device Group

DAnother way to add a customizable 'attribute' field to reference when processing authentication requests

ECan apply to both Network Access Devices (NADs) as wen as client machines as a way to filter authentication requests

Answer : A, D

Question 3

An organization wants guests to be able to create their own guest accounts for access to the public WLAN Guests do not want to have to repeatedly tog in multiple times through the day Which clearPass feature can meet these requirements?

AEnforcement based on endpoint profiling

BGuest access with Media Access Control (MAC) caching

CClearPass Onboard Portal.

DGuest self-registration with sponsor approval

Answer : C

Question 4

An organization with 345 employees wants to have the guest create their own accounts for access to the public WLAN. and when guests reconnect they do not want the guest to have to tog in again

Which ClearPass features can be used to meet these requirements?

AClearPass Onboard Portal

BGuest access with MAC caching

CGuest serf-registration with sponsor approval

DEnforcement based on endpoint profiling

Answer : B

Question 5

A customer with 985 employees would like to authenticate employees using a captive portal guest web login page Employees should use their AD credentials to login on this page

Which statement is true?

AThe customer needs to add second guest service in the policy manager for the guest network.

BThe customer needs to add the AD server as an authentication source in a guest service

CEmployees must be taken to a separate web login page on the guest network

DThe customer needs to add the AD servers RADIUS certificate to the guest network.