D is WRONG. C is correct! The controllers webserver redirects you to Clearpass portal. BUT, when logging in on that portal, you are sent back to the controller (in a controller initiated logon) where the actual credentials are posted and then verified with the auth-server configured in the captive portal profile. The securelogin.arubanetworks.com is the CN of the factory default certificate of your controller by the way.

Yes, D is the correct answer

dumpschool.com The provided solution is correct.

Correct answer is C:

C its correct

D is correct. The controller will see the client DNS lookup for "securelogin.arubanetworks.com" and answer with its own IP, but then it will redirect the client to the captive portal on ClearPass. (This is of course assuming the controller is configured to use an external captive portal. But since they're only giving us the ClearPass config I think it's safe to assume the controller uses the external captive portal. It is a ClearPass exam, so this makes since.)

C is correct, the controller or IAP will capture it as long as the CP certificate has the same CN name.

C is correct. See Aruba ClearPass Essentials Student Guide p. 284.

If there is no DNS setup, it does not matter what the certificate is on the controller, the request will time out and fail for the guest browser. Hence A would be correct in this case.

very abigious question.. the screenshot shows the address used post-authentication and relats to controller ..Question however is asking about the captive portal redirect during login attempt ..so pre-auth and this is done by ClearPass Guest .. so D is correct

Its D, controllers check this FQDN (proxy)

the answer is C 100% sure

is there anyone who took the exam soon to tell us if this questions still valid.... and if it is enough to pass???

D is correct

it's D

I'm sure B is wrong, I think correct answer is D