An organization is implementing certificates for their internal servers and wants to ensure security and reliability. They decide to use SAN records in their certificates.
What critical step must they take to ensure all hostnames are properly validated?
Answer : C
An organization is implementing ClearPass and wants to avoid using the internal database for authentication unless necessary.
What is the primary reason for this recommendation?
Answer : A
A network engineer is troubleshooting an issue where a user is receiving unexpected access rights. They decide to use the LDAP browser in ClearPass.
What feature of the LDAP browser should they use to determine why the user is getting a certain type of access?
Answer : B
A company uses ClearPass with Active Directory as both the authentication and authorization source.
What is the advantage of this setup?
Answer : A
A company is setting up a RADIUS server for their wireless network authentication. They want to use a certificate with a generic CN for all their ClearPass RADIUS servers.
What must they ensure for the certificate to be valid for the clients managed by an Active Directory domain?
Answer : A
An organization uses ClearPass to verify client certificates for network access. A client attempts to authenticate using a TLS certificate.
What does ClearPass need to verify to ensure the certificate is valid?
Answer : C
A company has implemented ClearPass Policy Manager to manage network access. ClearPass gathers user credentials, endpoint profile context, and the client’s health status during a network access request. After collecting all the necessary data, ClearPass must decide whether to grant access based on the organization’s policies.
Which stage of the ClearPass process is responsible for making this final decision and replying to the request?
Answer : B
In a scenario where the OCSP server replies with an ‘unknown’ status, what action will ClearPass take regarding the certificate-based authentication?
Answer : C
An organization is setting up a ClearPass server for their network authentication. The administrator has installed a certificate issued by an internal Certificate Authority. The clients cannot fully validate the server’s certificate during the validation process.
What additional step must the administrator take to ensure the clients can successfully validate the certificate?
Answer : B
An IT specialist is configuring authentication methods for a network resource in ClearPass. They need to ensure that only valid methods are used and that the client credentials are authenticated against multiple sources in a specific order.
What should the specialist do?
Answer : C
A company is setting up a new secure network service and has configured EAP TLS with OCSP enabled.
What additional step must be taken to ensure proper authentication?
Answer : A
A company is setting up a new wireless service for their Intermec handheld scanners and has decided to use the full-service wizard. What is a likely outcome they should prepare for after using the wizard?
Answer : C
A company wants to prevent corporate devices from accessing the guest network. They configure a ClearPass Entity Update Enforcement action to tag devices as corporate clients.
What happens when a tagged device attempts to access the guest network?
Answer : B
An IT specialist is tasked with ensuring that guests receive their login credentials via SMS after completing the self-registration process.
What configuration must be checked to guarantee that this feature is enabled?
Answer : B
An IT administrator is setting up a new service in their company’s configuration system. After selecting a service type and filling in the name and description, they need to modify the service selection rules.
They want to ensure that non-compliant end hosts are automatically remediated.
Which step should they take next?
Answer : C
Have any questions or issues ? Please dont hesitate to contact us