HPE6-A78 Exam - Topic 9 Question 14 Discussion

Actual exam question for HP's HPE6-A78 exam

Question #: 14
Topic #: 9

You configure an ArubaOS-Switch to enforce 802.1X authentication with ClearPass Policy Manager (CPPM) denned as the RADIUS server Clients cannot authenticate You check Aruba ClearPass Access Tracker and cannot find a record of the authentication attempt.

What are two possible problems that have this symptom? (Select two)

Ausers are logging in with the wrong usernames and passwords or invalid certificates.

BClients are configured to use a mismatched EAP method from the one In the CPPM service.

CThe RADIUS shared secret does not match between the switch and CPPM.

DCPPM does not have a network device defined for the switch's IP address.

EClients are not configured to trust the root CA certificate for CPPM's RADIUS/EAP certificate.

Show Suggested Answer

Suggested Answer: A, E

by Willodean at May 05, 2022, 06:52 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A78 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bettina

5 months ago

I disagree with A, users usually get their creds right.

upvoted 0 times

...

Stanton

5 months ago

D seems likely too, if the switch isn't recognized.

upvoted 0 times

...

Edwin

5 months ago

Wait, how can clients not trust the CA? Isn't that basic?

upvoted 0 times

...

Noble

5 months ago

I think B is also a strong possibility.

upvoted 0 times

...

Evangelina

5 months ago

Definitely A and C, those are common issues.

upvoted 0 times

...

Layla

5 months ago

I feel like users entering wrong credentials is a common issue, but I can't recall if that would show up in Access Tracker. Maybe option A is less likely?

upvoted 0 times

...

Renea

5 months ago

I practiced a similar question where the network device wasn't defined in CPPM, which made me think of option D here.

upvoted 0 times

...

Brock

5 months ago

I'm not entirely sure, but I think if the RADIUS shared secret doesn't match, it could definitely prevent authentication. That's option C, right?

upvoted 0 times

...

Beckie

5 months ago

I remember something about mismatched EAP methods causing issues, so option B seems likely.

upvoted 0 times

...

Merlyn

6 months ago

I'm pretty confident that option A, configuring fast snapshot restore, is the way to go. That seems like it would directly address the issue of the initial low performance when restoring from snapshots. The other options don't seem as targeted to solving that specific problem.

upvoted 0 times

...

Tiffiny

6 months ago

Okay, I remember discussing this in class. I believe the key characteristic is that the metrics need to align with the specific business objectives, so I'll go with C.

upvoted 0 times

...