Aruba Certified Network Security Professional

A company uses HPE Networking ClearPass Policy Manager (CPPM) as a TACACS+ server to authenticate managers on its AOS-CX switches. The company wants CPPM to control commands managers are allowed to enter.
Which service must you add to the managers’ TACACS+ enforcement profile?

An AOS-CX switch has this admin user account configured on it: netadmin in the operators group
You have configured these commands on an AOS-CX switch:
tacacs-server host cp.example.com key plaintext &12xl.powmay7855 aaa authentication login ssh group tacacs local aaa authentication allow-fail-through
A user accesses the switch with SSH and logs in as netadmin with the correct password. When switch sends a TACACS+ request to the ClearPass server at cp.example.com, the server does not send a response. Authentication times out.
What happens?

You have created this rule in an HPE Aruba Networking ClearPass Policy Manager (CPPM) service’s enforcement policy. IF Authorization [Endpoints Repository] Conflict EQUALS true THEN apply “quarantine_profile”
What information can help you determine whether you need to configure cluster-wide profiler parameters to ignore some conflicts?

A port-access role for AOS-CX switches has this policy applied to it:

The company wants to permit clients in this role to access 10.2.12.0/24 with HTTPS.
What should you do?

You are setting up HPE Aruba Networking SSE to prohibit users from uploading and downloading files from Dropbox. What is part of the process?