HP Exam HPE6-A84 Topic 3 Question 25 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 25
Topic #: 3

Refer to the scenario.

An organization wants the AOS-CX switch to trigger an alert if its RADIUS server (cp.acnsxtest.local) rejects an unusual number of client authentication requests per hour. After some discussions with other Aruba admins, you are still not sure how many rejections are usual or unusual. You expect that the value could be different on each switch.

You are helping the developer understand how to develop an NAE script for this use case.

The developer explains that they plan to define the rule with logic like this:

monitor > value

However, the developer asks you what value to include.

What should you recommend?

AChecking one of the access switches' RADIUS statistics and adding 10 to the number listed for rejects

BDefining a baseline and referring to it for the value

CUsing 10 (per hour) as a good starting point for the value

DDefining a parameter and referring to it (self ^ramsfname]) for the value

Show Suggested Answer

Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, the tag shown in the exhibit is a Device Insight tag, which is used to classify and identify devices based on their behavior and characteristics. Device Insight tags can be used as conditions in enforcement policies to apply different actions or roles to devices based on their tags. However, in order to ensure that devices are reclassified and receive the correct treatment based on their tags, profiling must be enabled in each service that uses one of these enforcement profiles. Profiling is a feature that allows ClearPass to dynamically discover and profile devices on the network, and update their attributes and tags accordingly. Profiling also allows ClearPass to send RADIUS Change of Authorization (CoA) messages to the network access servers (NASes) that control the access of the devices, and instruct them to reauthenticate or terminate the sessions of the devices that have changed their tags. The profiling action must be set to the correct one for the NASes using that service, as different NASes may support different types of CoA messages. Therefore, option C is the correct answer.

by Joaquin at Aug 05, 2024, 12:08 AM

Limited Time Offer

25%

18 days ago

Option B sounds like the way to go. Defining a baseline for normal RADIUS rejections and using that as the value makes the most sense.

upvoted 0 times

Janet

11 hours ago

Option B sounds like the way to go. Defining a baseline for normal RADIUS rejections and using that as the value makes the most sense.

upvoted 0 times

...

Yong

19 days ago

I agree with Sharee. It's important to have a reference point to determine what is unusual.

upvoted 0 times

...

Sharee

24 days ago

I think we should define a baseline and refer to it for the value.

upvoted 0 times

...