Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

HPE6-A88 Exam - Topic 2 Question 9 Discussion

An IT administrator attempts to join a ClearPass server to an Active Directory domain. They notice that the system clocks of the ClearPass server and the AD domain are not in sync. The ClearPass server is 10 minutes behind the AD domain. What will be the likely outcome of this attempt to join the domain?
C) The join will fail because Active Directory only allows a maximum of five minutes of clock skew.
A) The join will succeed but ClearPass will generate a warning about the clock skew.
B) The join will succeed because ClearPass automatically adjusts the clock skew during the join process.

HPE6-A88 Exam - Topic 2 Question 9 Discussion

Actual exam question for HP's HPE6-A88 exam
Question #: 9
Topic #: 2
[All HPE6-A88 Questions]

An IT administrator attempts to join a ClearPass server to an Active Directory domain. They notice that the system clocks of the ClearPass server and the AD domain are not in sync. The ClearPass server is 10 minutes behind the AD domain. What will be the likely outcome of this attempt to join the domain?

Show Suggested Answer Hide Answer
Suggested Answer: C

Kerberos, the underlying protocol for Active Directory authentication, is extremely time-sensitive. To prevent 'replay attacks,' AD Domain Controllers strictly enforce a maximum clock skew of 5 minutes. If the ClearPass server's clock differs from the AD domain by 10 minutes, the Kerberos tickets will be considered invalid, and the domain join attempt will fail. Administrators must ensure both systems are synced to a reliable NTP source before joining.


Contribute your Thoughts:

0/2000 characters

Currently there are no comments in this discussion, be the first to comment!


Save Cancel