Exam HPE6-A68 topic 1 question 17 discussion

Actual exam question from HP's HPE6-A68

Question #: 17
Topic #: 1

[All HPE6-A68 Questions]

Refer to the exhibit.

What does the Cache Timeout Value refer to?

A. The amount of time the Policy Manager caches the user credentials stored in the Active Directory.
B. The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.
C. The amount of time the Policy Manager caches the user attributes fetched from Active Directory.
D. The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.
E. The amount of time the Policy Manager caches the user\s client certificate.

Show Suggested Answer

Suggested Answer: C 🗳️

by hujinki at Aug. 23, 2022, 9:23 a.m.

Comments

Submit Cancel

pabx31

2 years, 8 months ago

Selected Answer: C

The box is checked to used the authe source for autho. Clearpass does not store any credentials. Caching is used for user attributes only.

upvoted 3 times

...

hujinki

2 years, 9 months ago

Selected Answer: C

UPDATE DorcomPS is right, user password is not transmitted during authentication. And the option "authorization" is checked So the cache can store user attributes. Answer is C.

upvoted 2 times

...

C si correct. A false - Credentials are not stored B false - This is related to server response time maybe. D false - This is related to server response time maybe. E false - Beleive it is not stored (Like credentials)

upvoted 4 times

...

hujinki

2 years, 9 months ago

Selected Answer: A

regarding authentication, Active directory is mainly a credential server, then answer should be A

upvoted 1 times

Fyrith

2 years, 2 months ago

But CPPM does not cache the credentials. It caches attributes to reduce load on AD. Caching credentials would be a security concern.

upvoted 2 times

...

hujinki

2 years, 9 months ago

edit : Server timeout is related to wait for response, cache timeout is related to keep informations. B an D are false. The exhibit is about Authentication settings, no authorisation, so user attributes are not relevants. C is false. So B, C and D are false

upvoted 1 times

...

hujinki

2 years, 9 months ago

Server timeout is related to wait for response, cache timeout is related to keep informations. B an C are false. The exhibit is about Authentication settings, no authorisation, so user attributes are not relevants. C is false.

upvoted 1 times

...