In the Aruba RADIUS dictionary shown, what is the purpose of the RADIUS attributes?
to gather and send Aruba NAD information to ClearPass
to gather information about Aruba NADs for ClearPass
to send information via RADIUS packets to Aruba NADs
to send information via RADIUS packets to clients
to send CoA packets from ClearPass to the Aruba NAD
Correct answer: C
Question 2
Refer to the exhibit.
Based on the Guest Role Mapping Policy shown, what is the purpose of the Role Mapping Policy?
to display a role name on the Self-registration receipt page
to send a firewall role back to the controller based on the Guest User’s Role ID
to assign Controller roles to guests
to assign three roles of [Contractor], [Guest] and [Employee] to every guest user
to create additional account roles for guest administrators to assign to guest accounts
Correct answer: C
Question 3
A customer wants all guests who access a company’s guest network to have their accounts approved by the receptionist, before they are given access to the network.
How should the network administrator set this up in ClearPass? (Select two.)
Enable sponsor approval confirmation in Receipt actions.
Configure SMTP messaging in the Policy Manager.
Configure a MAC caching service in the Policy Manager.
Configure a MAC auth service in the Policy Manager.
Enable sponsor approval in the captive portal authentication profile on the NAD.
Correct answer: AD
Explanation:
A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access until a sponsor (could even be a central help desk) has approved the request. When the registration form is completed by the guest/user, an on screen message is displayed for the guest stating the account requires approval.Guests are disabled upon registration and need to wait on the receipt page for the confirmation until the login button gets enabled. D. Device Mac Authentication is designed for authenticating guest devices based on their MAC address. References: ClearPass Policy Manager 6.5 User Guide (October 2015), page 94https://community.arubanetworks.com/aruba/attachments/aruba/SoftwareUserReferenceGuides/52/1/ClearPass%20Policy%20Manager%206.5%20User%20Guide.pdf
A: Sponsored self-registration is a means to allow guests to self-register, but not give them full access until a sponsor (could even be a central help desk) has approved the request. When the registration form is completed by the guest/user, an on screen message is displayed for the guest stating the account requires approval.
Guests are disabled upon registration and need to wait on the receipt page for the confirmation until the login button gets enabled.
D. Device Mac Authentication is designed for authenticating guest devices based on their MAC address.