A. The device's onboard authorization request will be denied.

B. The device will be disconnected from and reconnected to the network after Onboarding is completed.

C. After logging in on the Onboard web login page, the device will be disconnected form and reconnected to the network before Onboard begins.

D. The device will be disconnected from the network after Onboarding so that an EAP-TLS authentication is not performed.

E. The device will be disconnected after post-Onboarding EAP-TLS authentication, so a second EAP-TLS authentication is performed.

A. A Static host list can only contain a list of IP addresses.

B. Entries in the guest user database can be deleted.

C. Entries in the guest user database do not expire.

D. The endpoints database can only be populated by manually adding MAC addresses to the table.

E. Entries in the local user database cannot be modified.

A. Onboard Provisioning, Onboard Authorization, Onboard Pre-Auth

B. Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization, Onboard Provisioning

C. Onboard Authorization, Onboard Provisioning, Onboard Authorization

D. Onboard Provisioning, Onboard Authorization, Onboard Provisioning

E. Onboard Provisioning, Onboard Pre-Auth, Onboard Authorization

A. This Posture Policy can use either the persistent or dissolvable Onguard agent to obtain the statement of health.

B. This Posture Policy can only be applied to an 802.1x wired service not 802.1x wireless.

C. This Posture Policy checks for presence of a firewall application in Windows devices.

D. This Posture Policy checks with a Windows NPS server for posture tokens.

E. This Posture Policy checks the health status of devices running Windows, Linux and Mac OS X.

A. The amount of time the Policy Manager caches the user\s client certificate.

B. The amount of time the Policy Manager caches the user attributes fetched from Active Directory.

C. The amount of time the Policy Manager caches the user credentials stored in the Active Directory.

D. The amount of time the Policy Manager waits for a response from the Active Directory before checking the backup authentication source.

E. The amount of time the Policy Manager waits for response from the Active Directory before sending a timeout message to the Network Access Device.

A. RADIUS Authentication will succeed, but RADIUS Access-Accept messages from ClearPass to the wired switch for Change of Role will not be delivered.

B. RADIUS Authentications will fail because the wired switch will not be able to reach the ClearPass server.

C. RADIUS Authentications will timeout because the wired switch will not be able to reach the ClearPass server.

D. During RADIUS Authentication, certificate exchange between the wired switch and ClearPass will fail.

E. RADIUS Authentication will succeed, but Post-Authentication Disconnect-Requests from ClearPass to the wired switch will not be delivered.

A. RADIUS Reject

B. Full Access VLAN

C. RADIUS CoA

D. RADIUS Accept

E. Quarantine VLAN

A. A Healthy Posture Token was sent to the Policy Manager.

B. The Aruba Terminate Session enforcement profile as applied because the posture check failed.

C. A NAP agent was used to obtain the posture token for the user.

D. The authentication method used is EAP-PEAP.

E. A RADIUS-Access-Accept message is sent back to the Network Access Device.