Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

HP Exam HPE6-A84 Topic 3 Question 25 Discussion

Actual exam question for HP's HPE6-A84 exam
Question #: 25
Topic #: 3
[All HPE6-A84 Questions]

Refer to the scenario.

An organization wants the AOS-CX switch to trigger an alert if its RADIUS server (cp.acnsxtest.local) rejects an unusual number of client authentication requests per hour. After some discussions with other Aruba admins, you are still not sure how many rejections are usual or unusual. You expect that the value could be different on each switch.

You are helping the developer understand how to develop an NAE script for this use case.

The developer explains that they plan to define the rule with logic like this:

monitor > value

However, the developer asks you what value to include.

What should you recommend?

Show Suggested Answer Hide Answer
Suggested Answer: C

According to the ClearPass Policy Manager User Guide1, the tag shown in the exhibit is a Device Insight tag, which is used to classify and identify devices based on their behavior and characteristics. Device Insight tags can be used as conditions in enforcement policies to apply different actions or roles to devices based on their tags. However, in order to ensure that devices are reclassified and receive the correct treatment based on their tags, profiling must be enabled in each service that uses one of these enforcement profiles. Profiling is a feature that allows ClearPass to dynamically discover and profile devices on the network, and update their attributes and tags accordingly. Profiling also allows ClearPass to send RADIUS Change of Authorization (CoA) messages to the network access servers (NASes) that control the access of the devices, and instruct them to reauthenticate or terminate the sessions of the devices that have changed their tags. The profiling action must be set to the correct one for the NASes using that service, as different NASes may support different types of CoA messages. Therefore, option C is the correct answer.


by Joaquin at Aug 05, 2024, 12:08 AM

Limited Time Offer

25%

Off

Get Premium HPE6-A84 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Ira
3 months ago
Wait, we're supposed to do actual work here? I was just going to pick option C and call it a day. Looks like I need to rethink my strategy.
upvoted 0 times
Malissa
2 months ago
User 3: Checking one of the access switches' RADIUS statistics and adding 10 to the number listed for rejects could also work.
upvoted 0 times
...
Golda
2 months ago
User 2: I think we should consider defining a baseline and referring to it for the value.
upvoted 0 times
...
Shaquana
2 months ago
User 1: Option C sounds like a good starting point.
upvoted 0 times
...
...
Lettie
3 months ago
Haha, 10 rejections per hour? That's like a Tuesday for my network! Option B is the way to go, for sure.
upvoted 0 times
Paola
2 months ago
Definitely go with Option B. It will give you a more reliable way to determine unusual activity on your network.
upvoted 0 times
...
Brittney
2 months ago
Yeah, 10 rejections per hour is nothing. Setting a baseline will give you a better idea of what to monitor for.
upvoted 0 times
...
Howard
2 months ago
I agree, a baseline will help you determine what is normal for your network. It's important to have that reference point.
upvoted 0 times
...
Leonardo
2 months ago
Option B is definitely the best choice. Setting a baseline will give you a more accurate understanding of what is considered unusual.
upvoted 0 times
...
...
Luisa
4 months ago
10 rejections per hour doesn't seem like a very high threshold. I'd go with Option B and define a baseline to work from.
upvoted 0 times
Irma
3 months ago
User 2: Yeah, it would give us a reference point to work from.
upvoted 0 times
...
My
3 months ago
User 1: I agree, setting a baseline would be a good idea.
upvoted 0 times
...
...
Lajuana
4 months ago
I think Option D is the best choice here. Defining a parameter that can be adjusted easily is the way to go in this case.
upvoted 0 times
...
Shawn
4 months ago
I disagree. I believe using 10 as a starting point for the value is a better approach.
upvoted 0 times
...
Charolette
4 months ago
Option B sounds like the way to go. Defining a baseline for normal RADIUS rejections and using that as the value makes the most sense.
upvoted 0 times
Magnolia
2 months ago
Yes, it would make it easier to monitor and identify any abnormal activity.
upvoted 0 times
...
Daron
3 months ago
It would definitely help in setting a standard for when an alert should be triggered.
upvoted 0 times
...
Karina
3 months ago
I agree, having a baseline to refer to would provide a clear threshold for what is considered unusual.
upvoted 0 times
...
Janet
3 months ago
Option B sounds like the way to go. Defining a baseline for normal RADIUS rejections and using that as the value makes the most sense.
upvoted 0 times
...
...
Yong
4 months ago
I agree with Sharee. It's important to have a reference point to determine what is unusual.
upvoted 0 times
...
Sharee
4 months ago
I think we should define a baseline and refer to it for the value.
upvoted 0 times
...

Save Cancel