This certification validates practical cybersecurity skills in security operations and risk control, including protecting systems, investigating threats, and applying effective controls. It is intended for professionals who assess risk and respond to real-world security scenarios.
An organization has HPE Aruba Networking infrastructure, including AOS-CX switches and an AOS-8 mobility infrastructure with Mobility Controllers (MCs) and APs. Clients receive certificates from ClearPass Onboard. The infrastructure devices authenticate clients to ClearPass Policy Manager (CPPM). The company wants to start profiling clients to take their device type into account in their access rights.
What is a role that ClearPass Onboard should play in this plan?
A user attempts to connect to an SSID configured on an AOS-8 mobility architecture with Mobility Controllers (MCs) and APs. The SSID enforces WPA3-Enterprise security and uses HPE Aruba Networking ClearPass Policy Manager (CPPM) as the authentication server. The WLAN has initial role, logon, and 802.1 X default role, guest.
A user attempts to connect to the SSID, and CPPM sends an Access-Accept with an Aruba-User-Role VSA of "contractor," which exists on the MC.
What does the MC do?
You have a network with AOS-CX switches for which HPE Aruba Networking ClearPass Policy Manager (CPPM) acts as the TACACS + server. When an admin authenticates, CPPM sends a response with:
* Aruba-Admin-Role = auditors
* TACACS+ privilege level = 1
What happens to the user?
What is one benefit of enabling Enhanced Secure mode on an AOS-CX switch?
A client is connected to a Mobility Controller (MC). These firewall rules apply to this client’s role: ipv4 any any svc-dhcp permit ipv4 user 10.1.5.20 svc-dns permit ipv4 user 10.1.1.0 255.255.255.0 https permit ipv4 user 10.1.0.0 255.255.0.0 https deny_opt ipv4 user any any permit
What correctly describes how the controller treats HTTPS packets to these two IP addresses, both of which are on the other side of the firewall:
10.1.20.1
10.1.5.20