HP Exam HPE6-A84 Topic 4 Question 27 Discussion

Actual exam question for HP's HPE6-A84 exam

Question #: 27
Topic #: 4

Refer to the scenario.

A customer requires these rights for clients in the ''medical-mobile'' AOS firewall role on Aruba Mobility Controllers (MCs):

External devices should not be permitted to initiate sessions with ''medical-mobile'' clients, only send return traffic.

The exhibits below show the configuration for the role.

There are multiple issues with this configuration. What is one change you must make to meet the scenario requirements? (In the options, rules in a policy are referenced from top to bottom. For example, ''medical-mobile'' rule 1 is ''ipv4 any any svc-dhcp permit,'' and rule 8 is ''ipv4 any any any permit''.)

AIn the ''medical-mobile'' policy, move rules 2 and 3 between rules 7 and 8.

BIn the ''medical-mobile'' policy, change the subnet mask in rule 3 to 255.255.248.0.

CMove the rule in the ''apprf-medical-mobile-sacl'' policy between rules 7 and 8 in the ''medical-mobile'' policy.

DIn the ''medical-mobile'' policy, change the source in rule 8 to ''user.''

Show Suggested Answer

Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, userAccountControl is a custom attribute in Active Directory that contains a set of flags that define the properties and behavior of user accounts. One of these flags is ACCOUNTDISABLE, which indicates whether the account is disabled or not. By adding this attribute to the filters in the AD authentication source, CPPM can retrieve this attribute for each user and use it as a condition in the enforcement policies to prevent users with disabled accounts from connecting even if they have valid certificates. Therefore, option C is the correct answer.

by Rory at Sep 09, 2024, 06:52 PM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Norah

13 days ago

Hmm, that's an interesting point. I'll have to reconsider my choice.

upvoted 0 times

...

Demetra

14 days ago

I disagree, I believe the answer is C) Move the rule in the ''apprf-medical-mobile-sacl'' policy between rules 7 and 8 in the ''medical-mobile'' policy.

upvoted 0 times

...

Norah

21 days ago

I think the correct answer is A) In the ''medical-mobile'' policy, move rules 2 and 3 between rules 7 and 8.

upvoted 0 times

...