MENU
A company wants to apply role-based access control lists (ACLs) on AOS-CX switches, which are implementing authentication to HPE Aruba Networking ClearPass Policy Manager (CPPM). The company wants to centralize configuration as much as possible. Which correctly describes your options?
Suggested Answer: A
Get Premium HPE7-A02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Centralized Role Configuration on CPPM:
CPPM can assign roles to clients dynamically during authentication.
However, the actual ACL policies (e.g., firewall policies) must already exist and be referenced locally on the switch.
CPPM cannot directly configure ACL details on AOS-CX switches.
Option Analysis:
Option A: Correct. The role is defined on CPPM, but it references a policy pre-configured on the switch.
Option B: Incorrect. This does not align with Aruba's centralized role-based access control design.
Option C: Incorrect. CPPM cannot configure the ACL policies and classes directly; they must exist locally.
Option D: Incorrect. Policies can be referenced centrally but not fully configured on CPPM.
28 comments · newest first
SH
Sheldon
10 months ago
D seems like a solid compromise. Roles and policies on CPPM, classes local.
SH
Shay
10 months ago
C sounds too good to be true. Can you really do all that on CPPM?
AL
Alaine
10 months ago
I think option A is correct. CPPM needs a policy name from the switch.
SO
Son
11 months ago
I disagree, B makes more sense. Local settings are crucial.
NA
Nancey
11 months ago
Just to clarify, does this mean more management overhead?
TI
Timothy
11 months ago
I'm leaning towards option D because it mentions configuring roles and policies on CPPM, but I can't recall if classes really need to be local.
AN
Anabel
11 months ago
I feel like we had a question similar to this in our last mock exam, and I think it was about configuring roles on CPPM but with some limitations.
AI
Aimee
12 months ago
I think option A sounds familiar because it mentions referencing a policy on the switch, which seems like a common setup we practiced.
KI
Kizzy
12 months ago
I remember discussing how CPPM can centralize role management, but I'm not sure if it can handle everything without local configurations on the switch.
FE
Fernanda
12 months ago
Okay, I think I've got it. Option D seems to be the correct answer - I can configure the role and policy on CPPM, but the classes need to be set up locally on the switch. That allows for some centralization while still requiring some switch-level configuration.
SI
Sina
1 year ago
I'm not entirely sure about this one. The wording is a bit tricky, and I want to make sure I understand the differences between the configuration options before selecting an answer.
AR
Arletta
1 year ago
Option C looks like the best choice here. It says I can configure the role, policy, and classes all on CPPM, which would allow for the most centralized configuration.
DO
Dortha
1 year ago
Hmm, I'm a bit confused about the relationship between CPPM and the switch configuration. I'll need to carefully read through the options to understand where the different components are configured.
LI
Lilli
1 year ago
This question seems straightforward. I think the key is understanding how the role-based ACLs are configured between CPPM and the AOS-CX switches.
ED
Edison
1 year ago
I agree with Yvonne, option A seems like the most practical choice for maintaining control over the network.
YV
Yvonne
1 year ago
That's a good point, but I still think having some configuration on the switch is necessary for flexibility.
ME
Melynda
1 year ago
I disagree, I believe option C is the most efficient as it allows for configuring everything on CPPM.
TA
Tamekia
1 year ago
Haha, I bet the person who wrote this question has been dealing with way too many switch configs lately.
LU
Luisa
1 year ago
Haha, yeah, dealing with switch configs can be a headache sometimes.
KR
Krystina
1 year ago
B) You can configure the role name on CPPM; however, the role settings, including policy and classes, must be configured locally on the switch.
LO
Lonny
1 year ago
A) You can configure the role on CPPM; however, the CPPM role must reference a policy name that is configured on the switch.
YV
Yvonne
1 year ago
I think option A is the best choice because it allows for centralized configuration while still referencing a policy on the switch.
LO
Louis
1 year ago
Hmm, I'd go with D. Let's keep the switch config as simple as possible.
FA
Fatima
1 year ago
Option C is the way to go. Centralized configuration for the win!
MA
Mauricio
1 year ago
D: Absolutely, having everything on CPPM streamlines the process and ensures uniformity across the network.
TH
Theodora
1 year ago
C: It's a no-brainer, centralizing configuration is the way to go for efficiency and consistency.
OL
Ollie
1 year ago
B: Agreed, having everything in one place simplifies the process and reduces the chance of errors.
LA
Latonia
1 year ago
A: Option C is definitely the best choice. Centralizing everything on CPPM makes management much easier.