HP Exam HPE7-A07 Topic 1 Question 10 Discussion

Actual exam question for HP's HPE7-A07 exam

Question #: 10
Topic #: 1

A customer has deployed an AOS 10 mobility gateway cluster consisting of three controllers at a single site The WLAN is configured to tunnel wireless device traffic to the AOS 10 mobility cluster The clients are authenticated by ClearPass using WPA3-Enterprise (opmode wpa3-aes-ccm-128). The security team has requested the ability to force a wireless device to reauthenticate using ClearPass.

Which steps are required to ensure ClearPass can consistently initiate a change of authorization against an AOS 10 mobility cluster, including during gateway failover scenarios? (Select two)

Aset cluster mode to Auto Site under High Availability - Cluster configuration

Bmodify WLAN - SSID - VLAN - Mode Configuration

Cenable manual cluster configuration under High Availability - Cluster Configuration

Denable Dynamic Authorization CoA under High Availability - Cluster Configuration

Emodify NAS IPv4 address under Security - Advanced - RADIUS Client

Show Suggested Answer

Suggested Answer: C

When configuring Virtual Switching Extension (VSX) in a campus topology for link aggregation across two aggregation switches, it is important to synchronize Multi-Chassis Link Aggregation Group (MC-LAG) interfaces. The command 'vsx-sync mclag-interfaces' ensures that the state and configuration of MC-LAG interfaces are synchronized between the two VSX-linked switches, providing consistent link aggregation and preventing any loops or mismatched configurations that might occur if the interfaces were not in sync.

by Naomi at May 09, 2024, 05:27 AM

Limited Time Offer

25%

Off

Get Premium HPE7-A07 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Floyd

27 days ago

D and E are the clear winners here. Can't have those pesky wireless devices slacking off on their security checks. Time to bring in the CoA and NAS IP heavy hitters!

upvoted 0 times

...

Ettie

28 days ago

Wait, we can't just make the wireless devices do the Macarena to reauthenticate? Dang, I was really looking forward to that dance party.

upvoted 0 times

...

Roselle

29 days ago

I bet the security team is just trying to catch us out with this one. But I think D and E are the way to go. Gotta love those dynamic authorizations!

upvoted 0 times

Rosita

12 days ago

I agree, D and E seem like the most logical choices for ensuring ClearPass can initiate a change of authorization.

upvoted 0 times

...

2 months ago

I'm not sure about B, that sounds like it might be changing the WLAN configuration, which isn't what the question is asking for. I'd go with D and E.

upvoted 0 times

Cruz

8 days ago

E is also important to modify the NAS IPv4 address for ClearPass to initiate a change of authorization

upvoted 0 times

...

Haydee

1 months ago

I think D is necessary to enable Dynamic Authorization CoA

upvoted 0 times

...

Brianne

2 months ago

Should we also consider setting cluster mode to Auto Site under High Availability - Cluster configuration?

upvoted 0 times

...

2 months ago

I think we need to enable Dynamic Authorization CoA under High Availability - Cluster Configuration.

upvoted 0 times

...