HPE6-A84 試験問題を無料オンラインアクセス

Refer to the scenario.
An organization wants the AOS-CX switch to trigger an alert if its RADIUS server (cp.acnsxtest.local) rejects an unusual number of client authentication requests per hour. After some discussions with other Aruba admins, you are still not sure how many rejections are usual or unusual. You expect that the value could be different on each switch.
You are helping the developer understand how to develop an NAE script for this use case.
You are helping the developer find the right URI for the monitor.
Refer to the exhibit.

You have used the REST API reference interface to submit a test call. The results are shown in the exhibit.
Which URI should you give to the developer?

• A./rest/v1/system/vrfs/mgmt/radius/servers/cp.acnsxtest.local/2083/tcp?attributes=authstatistics.access_rejec
• B./rest/v1/system/vrfs/mgmt/radius/servers/cp.acnsxtest.local/2083/tcp?attributes=authstatistics?attributes=a
• C./rest/v1/system/vrfs/mgmt/radius/_servers/cp.acnsxtest.local/2083/tcp
• D./rest/v1/system/vrfs/mgmt/radius/servers/cp.acnsxtest.local/2083/tcp?attributes=authstatistics

Refer to the scenario.
A customer has an AOS10 architecture that is managed by Aruba Central. Aruba infrastructure devices authenticate clients to an Aruba ClearPass cluster.
In Aruba Central, you are examining network traffic flows on a wireless IoT device that is categorized as
"Raspberry Pi" clients. You see SSH traffic. You then check several more wireless IoT clients and see that they are sending SSH also.
You want an easy way to communicate the information that an IoT client has used SSH to Aruba ClearPass Policy Manager (CPPM).
What step should you take?

• A.On CPPM create an Endpoint Context Server that points to the Central API.
• B.On CPPM enable Device Insight integration.
• C.On Central configure APs and gateways to use CPPM as the RADIUS accounting server.
• D.On Central set up CPPM as a Webhook application.

Refer to the scenario.
A customer is migrating from on-prem AD to Azure AD as its sole domain solution. The customer also manages both wired and wireless devices with Microsoft Endpoint Manager (Intune).
The customer wants to improve security for the network edge. You are helping the customer design a ClearPass deployment for this purpose. Aruba network devices will authenticate wireless and wired clients to an Aruba ClearPass Policy Manager (CPPM) cluster (which uses version 6.10).
The customer has several requirements for authentication. The clients should only pass EAP-TLS authentication if a query to Azure AD shows that they have accounts in Azure AD. To further refine the clients' privileges, ClearPass also should use information collected by Intune to make access control decisions.
Assume that the Azure AD deployment has the proper prerequisites established.
You are planning the CPPM authentication source that you will reference as the authentication source in
802.1X services.
How should you set up this authentication source?

• A.As HTTP type, referencing the Intune extension
• B.AS HTTP type, referencing Azure AD's FODN
• C.As Kerberos type
• D.As Active Directory type

Refer to the scenario.
A customer requires these rights for clients in the "medical-mobile" AOS firewall role on Aruba Mobility Controllers (MCs):
* Permitted to receive IP addresses with DHCP
* Permitted access to DNS services from 10.8.9.7 and no other server
* Permitted access to all subnets in the 10.1.0.0/16 range except denied access to 10.1.12.0/22 Denied access to other 10.0.0.0/8 subnets
* Permitted access to the Internet
Denied access to the WLAN for a period of time if they send any SSH traffic Denied access to the WLAN for a period of time if they send any Telnet traffic Denied access to all high-risk websites External devices should not be permitted to initiate sessions with "medical-mobile" clients, only send return traffic.
The exhibits below show the configuration for the role.

What setting not shown in the exhibit must you check to ensure that the requirements of the scenario are met?

• A.That denylisting is enabled globally on the MCs' firewalls
• B.That AppRF and WebCC are enabled globally and on the medical-mobile role
• C.That stateful handling of traffic is enabled globally on the MCs' firewalls and on the medical-mobile role.
• D.That the MCs are assigned RF Protect licenses

The customer needs a way for users to enroll new wired clients in Intune. The clients should have limited access that only lets them enroll and receive certificates. You plan to set up these rights in an AOS-CX role named "provision." The customer's security team dictates that you must limit these clients' Internet access to only the necessary sites. Your switch software supports IPv4 and IPv6 addresses for the rules applied in the "provision" role.
What should you recommend?

• A.Configuring the "provision" role as a downloadable user role (DUR) in CPPM
• B.Configuring the rules for the "provision" role with IPv6 addresses, which tend to be more stable
• C.Enabling tunneling to the MCs on the "provision" role and then setting up the privileges on the MCs
• D.Assigning the "provision" role to a VLAN and then setting up the rules within a Layer 2 access control list (ACL)