Refer to the exhibit.

A customer has incomplete information for endpoints in the Endpoint Repository. In order to make accurate decisions about what types of devices are connecting to the network. ClearPass is enabled to process the device information from IF-MAP interface, but no updates are received. What can the customer do to update those endpoints using IF-MAP?

• A. Configure the authentication service to Audit the endpoints using, the embedded Nmap Server
• B. Configure IF-MAP on all networking devices to send additional information to ClearPass
• C. Configure ClearPass Management IP in the DHCP Helper address
• D. Configure IF-MAP only on Aruba Mobility Controller, providing ClearPass username and password

There is an Aruba Controller configured to stand Guest AAA requests to ClearPass If the customer would likt tht most effective way to ensure the lowest license usage counts, how should the controller be configured?

• A. Aruba Controller will send stop messages if RADIUS Accounting Server Group is defined in the authentication profile.
• B. Aruba Controller will send stop messages only if both accounting and Interim accounting are enabled.
• C. Aruba Controller will send stop messages only if EAP termination and Interim accounting are enabled.
• D. Configure EAP Termination on the Aruba Controller and the client will send a stop message.

Refer to the exhibit.

What enforcement prof lit will be assigned to the Windows 10 MDH enabled devices if it completes user authentication and is already profiled by ClearPess?

• A. Default - Deny Access Profile
• B. Cisco Redirect URL - Service Unavailable
• C. Cisco Full Access VLAN
• D. Cisco Redirect ACL for profiling

You have configured a factory default Aruba controller with Clear Pass for guest access and the NAS vendor settings - Address field in the guest weblogin page is configured with Aruba controller's default self-signed certificate common name "securelogin.arubanetworks.com" that the client will use to submit the authentication request.
What happens when the client sends a DNS request to securelogin aruba networks com?

• A. Address field in the web login vendor settings should be set to IP address of the controller instead of certificate CN name.
• B. The controller will pass the request to the DNS server and server returns the IP of the controller from the DNS records.
• C. The controller will intercept the ONS request sent to its HTTPS certificate common name and return its own IP address.
• D. Client does not send the DNS request, the ClearPass resolves the hostname in the NAS vendor settings Address field.

Refer to the exhibit.

You configured the Wired MAC - Auth service enforcement conditions with the Endpoint profiling data When mac-auth based clients connect to the network, ClearPass assigns Deny access profile. The customer has sent you the above screenshots How would you resolve the issue?

• A. Create a new condition in last position with Type and operator as Tips:Role EQUALS [User Authenticated] with action as Allow access profile permitting any services and any ports to do profiling.
• B. Create a new condition in the first position with Type and operator as Authorization [Endpoint Repository] Category NOT_EXISTS with action as Limited access profile and ArubaOS wireless terminate session
• C. Change the Rules evaluation algorithm in the Enforcement policy of HPE ArubaOS Mac auth policy as "select all matches" and add the CoA action as HPE Bounce switch port in the profiler tab.
• D. Create a new condition in first position with Type and operator as Authorization (Endpoint Repository]:Category NOT_EXISTS with action as Limited access profile allowing only DHCP service.