Exam HPE6-A84 topic 1 question 42 discussion

Actual exam question from HP's HPE6-A84

Question #: 42
Topic #: 1

You are setting up Aruba ClearPass Policy Manager (CPPM) to enforce EAP-TLS authentication with Active Directory as the authentication source. The company wants to prevent users with disabled accounts from connecting even if those users still have valid certificates.
As the first part of meeting these criteria, what should you do to enable CPPM to determine where accounts are enabled in AD or not?

A. Add an Endpoint Context Server to the domain controller with actions for querying the domain controller for account status.
B. Enable OCSP in the EAP-TLS authentication method settings and configure an OCSP override to the domain controller FQDN.
C. Add a custom attribute for userAccountControl to the filters in the AD authentication source.
D. Install a Microsoft Active Directory extension in Aruba ClearPass Guest and set up an HTTP authentication source that points to that extension.

Show Suggested Answer

Suggested Answer: C 🗳️

by bikelepo at April 4, 2025, 10:18 p.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!